Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/250bdbec-1e2e-4e8b-93fd-e23e8cfe8531/40ea98f71163752c7ffd9aee7337493ffa8c2756.roa
File: 40ea98f71163752c7ffd9aee7337493ffa8c2756.roa (raw, json)
Hash identifier: u4WruBnNN1QyImG+Z/mT4S1rZdqxAH0+P5RiQL0DB7w=
Subject key identifier: 47:01:84:BD:54:2F:34:0D:B2:84:0C:B5:B3:85:67:10:09:42:BD:51
Certificate issuer: /CN=5cc9dbf17ab87f53456274667413bf07a4f85fc9
Certificate serial: 0D5B42
Authority key identifier: 20:4F:BB:94:06:56:BA:86:D7:92:22:24:CD:DB:19:79:44:C0:B2:84
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5cc9dbf17ab87f53456274667413bf07a4f85fc9.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/250bdbec-1e2e-4e8b-93fd-e23e8cfe8531/40ea98f71163752c7ffd9aee7337493ffa8c2756.roa
Signing time: Wed 24 Mar 2021 14:31:03 +0000
ROA not before: Wed 24 Mar 2021 14:31:03 +0000
ROA not after: Tue 24 Mar 2026 14:31:03 +0000
asID: 263244
IP address blocks: 131.72.132.0/22 maxlen: 22
138.99.184.0/22 maxlen: 22
170.247.140.0/22 maxlen: 22
186.0.180.0/22 maxlen: 22
190.106.32.0/21 maxlen: 21
2800:cb0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 875330 (0xd5b42)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cc9dbf17ab87f53456274667413bf07a4f85fc9
Validity
Not Before: Mar 24 14:31:03 2021 GMT
Not After : Mar 24 14:31:03 2026 GMT
Subject: CN=40ea98f71163752c7ffd9aee7337493ffa8c2756
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:54:e1:b6:b9:6c:83:a2:e0:bf:da:37:5f:1e:
32:66:b0:ac:a0:c7:83:41:cc:fd:86:dc:c8:79:35:
46:58:f2:18:a3:8d:26:d1:26:9b:35:94:36:d9:3f:
43:a0:8d:59:0c:15:0d:c7:a9:ab:6e:ec:8c:bb:62:
8b:50:34:ef:49:e2:9d:f3:0e:fc:31:d4:a2:18:2a:
e7:15:74:c3:8a:95:ad:86:44:9e:55:38:e7:94:53:
a2:f9:91:34:fd:a8:d0:7c:e6:3e:ef:0c:5c:71:dc:
26:14:ac:98:2b:2a:2e:e9:ad:75:fa:ff:d2:27:d1:
6b:4e:7a:bb:46:a8:f7:a9:9a:32:45:a4:36:f5:09:
89:c3:2d:20:42:15:6b:56:17:6b:d1:0b:ee:2f:ee:
f1:8f:95:21:b8:63:d6:ba:fe:8e:af:fe:f3:4d:de:
04:bf:b1:4d:d3:bd:0c:58:7c:bc:58:1a:7e:85:79:
73:14:0a:da:55:8c:d9:b3:4a:47:35:9d:bd:08:72:
d3:ca:fd:90:df:07:92:d1:a9:7e:a7:3c:e5:d6:f3:
8c:e1:0a:42:36:4d:06:9a:c1:24:c0:33:00:25:33:
4f:eb:8d:38:80:ab:19:24:6c:7f:37:a2:6f:c0:0b:
94:f5:d6:2d:ae:50:40:5f:4f:1d:2f:fd:de:1e:34:
58:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:01:84:BD:54:2F:34:0D:B2:84:0C:B5:B3:85:67:10:09:42:BD:51
X509v3 Authority Key Identifier:
keyid:20:4F:BB:94:06:56:BA:86:D7:92:22:24:CD:DB:19:79:44:C0:B2:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5cc9dbf17ab87f53456274667413bf07a4f85fc9.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/250bdbec-1e2e-4e8b-93fd-e23e8cfe8531/40ea98f71163752c7ffd9aee7337493ffa8c2756.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/250bdbec-1e2e-4e8b-93fd-e23e8cfe8531/5cc9dbf17ab87f53456274667413bf07a4f85fc9.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.72.132.0/22
138.99.184.0/22
170.247.140.0/22
186.0.180.0/22
190.106.32.0/21
IPv6:
2800:cb0::/32
Signature Algorithm: sha256WithRSAEncryption
c5:6e:da:fb:79:60:cf:f9:44:f2:64:23:74:06:f2:5a:fb:0d:
15:22:ba:f4:c1:de:84:ca:7d:68:b3:cb:63:16:34:86:3c:78:
ed:2d:b8:a2:d9:74:6d:9c:70:d3:87:f7:df:5d:50:79:7f:be:
22:a3:d7:f8:ca:17:12:1b:b4:1c:f5:bc:78:fb:9a:46:ef:f1:
89:17:e5:20:35:14:3a:b4:ef:9e:43:e6:90:40:a1:a8:a2:2e:
d9:5b:00:49:2a:87:82:ba:3c:31:52:48:f2:01:e0:d2:a0:77:
1c:45:5c:9d:ad:18:12:87:a2:72:81:33:81:64:00:e5:94:bb:
49:36:45:0f:c8:b0:92:4e:81:bd:2e:be:82:87:c4:f0:8d:e3:
2f:a7:25:69:77:c4:a3:1f:5e:ce:45:fb:c7:a5:17:11:aa:bd:
74:e2:c0:c9:c7:52:b1:96:fb:38:01:af:29:d2:38:d5:90:09:
79:30:78:cf:e9:fe:1d:ae:8c:71:c6:3b:1b:85:9a:23:2c:31:
d1:96:69:37:e5:73:7f:0f:f8:34:d5:35:8b:c5:4c:11:c1:d9:
8c:15:5a:96:71:41:54:f4:5b:68:07:9b:eb:7f:75:a8:f8:71:
36:43:56:10:37:88:0a:8d:4e:f2:e4:13:d3:45:90:19:c8:1e:
e2:03:43:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:04 2024 by rpki-client on console-ams.rpki-client.org