Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1ff8ed32-c73d-446c-a8a8-25de0fb11dae/ac8771fcccea802cf8ebe4459a1f4df3653d7b21.roa
File: ac8771fcccea802cf8ebe4459a1f4df3653d7b21.roa (raw, json)
Hash identifier: bhxsc2u/1XOiNSLnn44NGlNQJnH0CACy3qjA9PzOaZM=
Subject key identifier: 3F:4A:65:3E:21:1C:02:AE:E8:65:D6:D6:CE:45:63:C0:EB:24:62:AC
Certificate issuer: /CN=1292ef1d864fb561c399f957f285e0c7eb3c7305
Certificate serial: 0D7143
Authority key identifier: 70:30:82:33:C5:21:60:8B:21:F6:A1:20:DC:51:D8:B6:3B:C3:E7:D7
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1292ef1d864fb561c399f957f285e0c7eb3c7305.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1ff8ed32-c73d-446c-a8a8-25de0fb11dae/ac8771fcccea802cf8ebe4459a1f4df3653d7b21.roa
Signing time: Wed 24 Mar 2021 14:30:39 +0000
ROA not before: Wed 24 Mar 2021 14:30:39 +0000
ROA not after: Tue 24 Mar 2026 14:30:39 +0000
asID: 263822
IP address blocks: 138.219.212.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 880963 (0xd7143)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1292ef1d864fb561c399f957f285e0c7eb3c7305
Validity
Not Before: Mar 24 14:30:39 2021 GMT
Not After : Mar 24 14:30:39 2026 GMT
Subject: CN=ac8771fcccea802cf8ebe4459a1f4df3653d7b21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:70:27:14:8c:6f:cc:96:14:29:82:02:f2:15:
8f:7c:f4:e5:7b:e5:20:22:69:1f:00:2f:e5:50:7f:
dd:b6:1e:76:1a:7c:60:48:f4:39:4f:e2:3c:94:cf:
65:6d:78:e2:11:d4:96:6e:f4:4a:30:83:90:0f:3f:
e3:5c:3f:89:6d:01:a4:ce:68:67:b5:e9:1d:5a:73:
e3:f2:26:cf:81:8a:18:40:68:f3:f0:5c:03:7a:4a:
40:08:d6:a7:c3:84:4f:52:d1:a1:ea:1a:4d:7b:ec:
ef:9f:5b:d5:4c:5c:49:37:0e:d8:fb:0e:ea:d3:1c:
04:e5:d6:18:c9:92:3c:82:6e:e3:ff:f5:d6:c9:b7:
1c:ac:c3:16:b7:23:62:17:78:4d:17:4b:ff:8c:ef:
a6:b5:ba:91:35:4c:bf:b7:f4:bb:3d:fb:3a:20:1c:
a7:26:eb:04:93:0f:bd:aa:66:70:11:b2:1c:59:49:
1a:fc:59:50:06:88:db:67:27:c6:8f:f9:ec:81:31:
b5:56:d1:d1:28:11:da:64:32:e4:90:50:4b:a2:8d:
16:da:4b:20:45:cb:7d:2d:c3:ba:1b:03:93:cf:c4:
e3:c8:e4:ec:6b:11:d9:38:c6:f9:1c:c4:2c:01:7d:
0f:dd:99:cc:29:6b:5e:04:30:04:80:64:b4:f7:0f:
a6:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:4A:65:3E:21:1C:02:AE:E8:65:D6:D6:CE:45:63:C0:EB:24:62:AC
X509v3 Authority Key Identifier:
keyid:70:30:82:33:C5:21:60:8B:21:F6:A1:20:DC:51:D8:B6:3B:C3:E7:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1292ef1d864fb561c399f957f285e0c7eb3c7305.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1ff8ed32-c73d-446c-a8a8-25de0fb11dae/ac8771fcccea802cf8ebe4459a1f4df3653d7b21.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1ff8ed32-c73d-446c-a8a8-25de0fb11dae/1292ef1d864fb561c399f957f285e0c7eb3c7305.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.219.212.0/22
Signature Algorithm: sha256WithRSAEncryption
2b:09:db:7e:ea:81:9e:6f:c5:ad:b4:cc:8f:0c:af:3a:2b:33:
3f:05:00:57:fd:9c:7c:84:7a:6a:03:26:6a:14:22:a8:82:30:
33:99:ed:0c:a9:66:67:4f:dd:f0:ee:a7:89:ab:2b:2c:8e:1f:
a8:4f:94:f3:d6:0d:2c:ab:6f:98:8e:60:b8:c5:22:12:d6:50:
bf:04:1e:dd:07:b0:21:53:51:4a:17:d8:9d:c1:4d:a5:84:14:
4e:df:89:4f:5b:bf:29:73:bf:ac:3d:56:19:26:a4:38:14:bd:
56:e8:bb:62:37:3e:fe:5f:db:5c:71:e1:76:e6:56:d1:e4:db:
56:2c:d3:7e:1e:60:2c:9e:b3:85:a7:1b:16:33:e4:44:95:9f:
97:ce:b4:84:bd:38:13:6b:48:d5:5b:5e:09:1e:fa:23:cc:dc:
09:90:21:43:4d:aa:bb:5b:9a:9f:e0:2b:b7:57:7e:d6:7a:40:
b9:5b:b8:67:a9:4f:27:c8:0b:ec:02:90:de:da:48:93:c2:49:
bf:c1:93:30:e4:f5:22:38:0d:75:ea:11:0b:2e:20:a3:dc:a7:
11:01:cb:fc:06:fe:c9:98:3b:50:1e:04:eb:74:f2:27:84:0f:
b1:1e:98:9d:fe:d9:ae:88:9c:c5:4d:93:8e:af:68:46:81:a6:
01:3f:61:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:17 2024 by rpki-client on console-ams.rpki-client.org