Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/28f72468-71a7-4407-a293-3c4d482a2082/d73cc15aa4d56f05c9ef3b5d97c720802e6ec3e4.roa
File: d73cc15aa4d56f05c9ef3b5d97c720802e6ec3e4.roa (raw, json)
Hash identifier: Bt6wmDqcRdxmX2P+b8gBTy1f9JlAbokTLKPNZTTZ//8=
Subject key identifier: F1:06:D1:9D:EA:49:7F:D1:9E:22:11:1C:43:96:2A:AE:2B:F3:55:98
Certificate issuer: /CN=f1d0163a439efacc1ac476fcf9ca062330c6e918
Certificate serial: 0D1997
Authority key identifier: 29:E7:A3:95:52:0E:C9:87:60:8C:CF:1E:68:F0:1E:63:7C:B3:7A:1E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f1d0163a439efacc1ac476fcf9ca062330c6e918.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/28f72468-71a7-4407-a293-3c4d482a2082/d73cc15aa4d56f05c9ef3b5d97c720802e6ec3e4.roa
Signing time: Wed 24 Mar 2021 14:40:33 +0000
ROA not before: Wed 24 Mar 2021 14:40:33 +0000
ROA not after: Tue 24 Mar 2026 14:40:33 +0000
asID: 263805
IP address blocks: 138.185.136.0/24 maxlen: 24
138.185.137.0/24 maxlen: 24
138.185.138.0/24 maxlen: 24
138.185.139.0/24 maxlen: 24
2803:a240::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 858519 (0xd1997)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d0163a439efacc1ac476fcf9ca062330c6e918
Validity
Not Before: Mar 24 14:40:33 2021 GMT
Not After : Mar 24 14:40:33 2026 GMT
Subject: CN=d73cc15aa4d56f05c9ef3b5d97c720802e6ec3e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:f1:6c:2f:18:e4:38:6a:07:2e:01:35:47:6f:
91:8b:f9:45:1c:ce:4c:33:2a:e9:d9:ce:65:e8:8e:
48:21:90:a1:7b:ce:29:af:22:e3:c7:1e:12:5a:f2:
8c:2c:d4:f1:98:4b:45:6d:86:06:5c:82:5c:58:84:
42:2e:61:b3:56:69:3e:71:f0:fe:de:ac:5e:c6:c8:
4e:61:fe:76:cd:c4:83:62:21:14:fc:8f:31:de:28:
c3:5e:de:74:03:54:20:3f:0f:12:27:a9:e0:fc:62:
01:1d:96:56:3c:2a:4a:89:40:2a:f4:69:89:3f:70:
5f:74:65:39:2a:8d:2f:53:32:85:87:bd:71:c8:a4:
83:cc:74:f1:a7:88:bb:eb:ba:67:43:d2:69:0d:f9:
14:af:00:9f:e2:38:c5:ef:27:f9:24:dc:e6:df:b7:
ae:01:94:25:a8:b1:dd:52:db:c6:fe:db:d2:5e:d7:
cd:46:a4:4d:cb:f0:f4:0a:b2:f7:f2:56:ed:a9:b7:
de:6f:3e:95:f6:ff:57:9a:1c:a7:59:4c:34:36:c1:
b4:72:92:67:3c:aa:5b:85:5e:02:30:f7:56:f3:02:
ae:5c:32:73:0e:af:f4:ce:c0:d8:40:b1:8f:bf:20:
e2:2a:ec:5d:04:31:3d:ec:52:4c:3e:73:f2:5d:16:
f2:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:06:D1:9D:EA:49:7F:D1:9E:22:11:1C:43:96:2A:AE:2B:F3:55:98
X509v3 Authority Key Identifier:
keyid:29:E7:A3:95:52:0E:C9:87:60:8C:CF:1E:68:F0:1E:63:7C:B3:7A:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f1d0163a439efacc1ac476fcf9ca062330c6e918.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/28f72468-71a7-4407-a293-3c4d482a2082/d73cc15aa4d56f05c9ef3b5d97c720802e6ec3e4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/28f72468-71a7-4407-a293-3c4d482a2082/f1d0163a439efacc1ac476fcf9ca062330c6e918.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.185.136.0/22
IPv6:
2803:a240::/32
Signature Algorithm: sha256WithRSAEncryption
6d:34:6d:cf:f6:19:20:d6:ff:2b:2a:7c:17:49:a3:67:a5:25:
9c:a6:97:32:0a:7c:7c:e3:33:c1:de:97:27:c7:70:e2:13:99:
93:0f:c1:97:cb:ca:8e:26:72:74:34:54:76:f4:e4:2c:ab:4c:
56:00:5e:ba:d8:c2:e7:65:0d:7d:32:2d:0a:2d:38:bd:82:34:
a6:c5:ad:cc:3a:24:7f:b3:67:c1:0b:c4:7d:be:d1:dd:45:bd:
dc:71:4d:46:82:51:75:ff:3b:0c:0e:c8:be:57:b9:a6:8f:89:
ef:1c:4f:85:70:7f:2c:b9:46:a9:cc:8e:2f:85:c2:ea:e0:02:
f1:d9:9f:75:ab:de:db:3c:20:9b:9a:6d:c9:00:77:27:e6:8e:
9a:7a:eb:00:c8:d1:2a:89:21:d2:c1:45:1a:f5:4f:f2:6f:5b:
2d:34:e6:01:6b:a3:d5:71:0c:3d:6d:af:b5:0f:75:8c:14:9e:
4b:e3:59:c8:ab:53:f3:32:d1:2a:1b:68:c8:b4:71:37:7c:e0:
ef:36:9f:ff:b5:6f:7d:b7:4d:d5:61:54:1a:4c:03:67:9d:b4:
c3:1b:76:1b:b1:ac:b3:b1:f8:a6:0a:b9:3c:ee:96:d1:77:95:
af:0d:fc:05:85:a9:a8:b3:fe:33:77:c5:94:ab:df:c9:f3:93:
3f:7b:47:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:25 2024 by rpki-client on console-fra.rpki-client.org