Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1c50a542-8fb8-4588-84ea-93f140223e89/5b81a78abbee20802c71b33e5a2ffe893029e7af.roa
File: 5b81a78abbee20802c71b33e5a2ffe893029e7af.roa (raw, json)
Hash identifier: fZNooqv1StXfgMDp1BBfMOCgcy1NFIMR2zkIbJ9Faeo=
Subject key identifier: 9E:2D:E6:15:F2:FE:76:AD:1B:96:95:6A:5E:EB:B7:B7:49:39:5C:17
Certificate issuer: /CN=41fdade6fa28cbe8bc8b37b44f50fb9818152d49
Certificate serial: 22ECC1
Authority key identifier: 58:3D:38:CA:36:4B:D5:E2:1D:6A:DB:7D:93:B4:6F:37:00:B0:74:0A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/41fdade6fa28cbe8bc8b37b44f50fb9818152d49.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1c50a542-8fb8-4588-84ea-93f140223e89/5b81a78abbee20802c71b33e5a2ffe893029e7af.roa
Signing time: Thu 31 Aug 2023 14:50:50 +0000
ROA not before: Wed 30 Aug 2023 14:50:50 +0000
ROA not after: Sun 31 Aug 2025 14:50:50 +0000
asID: 269980
IP address blocks: 138.117.40.0/22 maxlen: 24
170.254.0.0/22 maxlen: 24
2803:f840::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2288833 (0x22ecc1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41fdade6fa28cbe8bc8b37b44f50fb9818152d49
Validity
Not Before: Aug 30 14:50:50 2023 GMT
Not After : Aug 31 14:50:50 2025 GMT
Subject: CN=5b81a78abbee20802c71b33e5a2ffe893029e7af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:1b:56:09:2f:67:4b:c3:93:e7:42:29:6d:2b:
12:d8:fd:4f:6e:80:a1:8c:fe:6f:4c:dc:01:20:07:
5d:ae:e3:07:4e:bb:2c:02:21:a5:59:8c:96:c4:fd:
60:e3:4c:e4:51:90:35:a7:13:91:96:ec:95:9e:94:
b1:03:ac:d5:f1:78:65:1f:46:00:66:3a:25:c3:ee:
2c:ed:38:47:f5:76:d0:29:f3:7a:57:af:7a:c1:46:
0b:78:1d:77:cb:8e:63:81:61:5f:9d:b9:99:d9:2a:
15:2f:3c:c1:7d:43:1b:eb:56:33:f0:9a:dc:de:40:
40:96:fd:a0:5f:28:36:60:27:30:8a:88:c0:c8:8a:
1d:6e:fe:78:e0:35:ec:2d:aa:d6:69:54:43:07:60:
5f:86:ca:86:2f:02:cd:20:86:1f:05:c6:e0:75:ed:
34:54:bc:54:a3:e9:a8:5f:77:3a:41:27:68:9e:79:
5b:64:d8:3f:87:f5:f3:d9:ce:55:66:45:1c:7b:1e:
ae:75:28:95:7b:97:3f:8c:6c:08:47:1d:3b:47:c7:
d5:92:4b:9e:97:f3:06:b3:84:93:29:82:c9:a5:d1:
e0:ff:45:93:0b:af:c2:e6:43:7a:b4:a9:ee:46:7c:
12:a4:7b:3c:31:14:93:55:4f:88:24:10:fd:94:c7:
87:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:2D:E6:15:F2:FE:76:AD:1B:96:95:6A:5E:EB:B7:B7:49:39:5C:17
X509v3 Authority Key Identifier:
keyid:58:3D:38:CA:36:4B:D5:E2:1D:6A:DB:7D:93:B4:6F:37:00:B0:74:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/41fdade6fa28cbe8bc8b37b44f50fb9818152d49.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1c50a542-8fb8-4588-84ea-93f140223e89/5b81a78abbee20802c71b33e5a2ffe893029e7af.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1c50a542-8fb8-4588-84ea-93f140223e89/41fdade6fa28cbe8bc8b37b44f50fb9818152d49.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.117.40.0/22
170.254.0.0/22
IPv6:
2803:f840::/32
Signature Algorithm: sha256WithRSAEncryption
3b:08:ce:7d:10:56:ff:d7:ae:3d:b1:c8:57:22:67:4c:80:d2:
b2:fe:c1:b0:3b:29:76:4f:8a:db:7a:c2:ed:14:49:69:93:5e:
f0:7d:31:1f:e8:41:4c:d8:ab:d6:fe:cd:b0:1d:e0:ec:c2:92:
80:a9:56:25:08:c9:c0:75:83:85:d4:bb:15:6d:dd:b4:b0:aa:
fb:2e:5f:f8:64:7e:70:bf:88:96:fb:9f:6d:3e:a5:b9:21:43:
8b:59:d4:4d:e5:56:11:74:f1:59:f9:74:02:63:1c:75:f3:e5:
79:dc:48:a7:f7:bd:a5:f4:78:b4:5e:f4:6b:0b:35:6e:ae:3f:
bb:e1:f9:f0:e7:ee:93:a8:63:0c:17:31:44:f8:f1:9e:a0:d0:
59:56:51:7d:f8:3e:cd:62:9c:84:f5:9e:d4:2e:f1:99:0c:30:
c7:8b:b4:9b:dd:3e:1d:86:31:17:1d:fd:ec:38:7f:1a:e2:af:
16:dc:79:38:45:59:ea:94:3c:8d:f7:cb:0c:e4:70:8e:5e:cd:
3a:2f:98:1e:66:3b:dc:b5:24:1e:17:0c:dd:01:33:11:a8:64:
76:87:9e:9e:d8:d9:08:b1:ee:69:13:97:f5:74:fb:ec:5b:99:
9c:4b:ff:62:ab:5d:ec:32:81:ce:71:ce:a9:a9:fe:f8:48:72:
6a:06:d6:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:02 2024 by rpki-client on console-ams.rpki-client.org