Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2c158c3a-6b20-48ae-bd4f-de3260213708/8708267e25b56b6cfcb4cabe20a352abdbb0d958.roa
File: 8708267e25b56b6cfcb4cabe20a352abdbb0d958.roa (raw, json)
Hash identifier: 88v5Brk8ojcMVpGuNkl/M/iy6EiKcmKOx9Ev/uGcPGg=
Subject key identifier: 9B:50:E4:7A:60:D8:49:AB:6E:48:D8:A1:83:BE:43:3C:B5:04:FA:C1
Certificate issuer: /CN=cab6fb04adee0738d3e5a3d1bade4f4643eebb77
Certificate serial: 0DEE6F
Authority key identifier: 0D:7B:30:57:A4:93:ED:06:D8:BF:63:8B:CE:60:B9:0A:ED:41:E1:DB
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cab6fb04adee0738d3e5a3d1bade4f4643eebb77.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/2c158c3a-6b20-48ae-bd4f-de3260213708/8708267e25b56b6cfcb4cabe20a352abdbb0d958.roa
Signing time: Wed 24 Mar 2021 14:30:38 +0000
ROA not before: Wed 24 Mar 2021 14:30:38 +0000
ROA not after: Tue 24 Mar 2026 14:30:38 +0000
asID: 263782
IP address blocks: 138.121.228.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 913007 (0xdee6f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cab6fb04adee0738d3e5a3d1bade4f4643eebb77
Validity
Not Before: Mar 24 14:30:38 2021 GMT
Not After : Mar 24 14:30:38 2026 GMT
Subject: CN=8708267e25b56b6cfcb4cabe20a352abdbb0d958
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:71:1d:ad:d4:ac:85:69:85:8f:f8:cc:3c:14:
e2:44:95:87:a4:87:2f:07:b0:a6:35:c1:72:9a:ce:
43:b0:59:a0:1b:98:99:8e:f2:b6:0b:c7:ba:3f:e3:
e4:37:cf:7a:e7:78:ad:42:de:7d:01:d5:7b:a3:2d:
1c:f5:2f:ab:f4:53:00:0d:8f:0d:9f:ea:08:47:8b:
7f:f2:ca:00:69:af:c7:5e:04:97:e2:31:39:d7:58:
ad:e1:42:ba:d3:ab:bf:ae:1c:9f:0c:8a:a2:ea:f5:
97:29:ec:cb:51:31:bb:9d:8c:1e:51:76:38:12:bf:
98:6d:25:49:0f:e4:7e:8a:2a:40:0e:b0:6b:af:50:
d9:55:5e:c0:c9:37:03:d0:c0:16:63:9e:24:99:53:
c0:25:8d:7a:d9:35:8e:52:45:74:01:1d:19:a8:46:
30:b0:ab:2d:60:ff:66:4f:43:b4:84:57:53:1e:e8:
71:01:19:9c:f1:25:e1:00:8c:af:da:69:fd:10:0a:
f4:37:fd:aa:fd:d4:65:80:6f:df:6d:2a:9e:e9:c8:
7c:f6:ac:3d:45:a5:9c:b8:3e:36:54:ea:76:78:19:
16:61:36:97:6b:0f:4c:32:04:9f:36:db:b8:84:03:
b1:55:de:45:0e:bb:60:b5:ff:32:93:8a:6c:92:c3:
93:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:50:E4:7A:60:D8:49:AB:6E:48:D8:A1:83:BE:43:3C:B5:04:FA:C1
X509v3 Authority Key Identifier:
keyid:0D:7B:30:57:A4:93:ED:06:D8:BF:63:8B:CE:60:B9:0A:ED:41:E1:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cab6fb04adee0738d3e5a3d1bade4f4643eebb77.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2c158c3a-6b20-48ae-bd4f-de3260213708/8708267e25b56b6cfcb4cabe20a352abdbb0d958.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/2c158c3a-6b20-48ae-bd4f-de3260213708/cab6fb04adee0738d3e5a3d1bade4f4643eebb77.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.121.228.0/22
Signature Algorithm: sha256WithRSAEncryption
3b:a0:a6:f6:c5:e2:87:e4:55:0c:90:db:7f:ee:4f:be:78:0f:
77:bc:a6:e7:99:94:21:9f:c7:a8:af:5a:ab:c3:e0:69:6e:7e:
8f:56:38:ce:31:02:70:bc:05:9e:36:55:4a:b1:5e:03:43:9f:
ce:69:20:8b:f7:59:57:8a:a1:c1:fe:13:80:39:99:1c:c2:2b:
22:55:1b:7f:0f:80:b2:5d:68:a6:bc:45:f5:c5:29:ad:a7:b5:
a1:d0:15:78:52:fe:bf:b3:d8:b0:c8:3d:c3:52:88:7d:bf:6d:
c1:a1:22:9b:f0:e3:d6:98:48:25:17:da:22:79:d0:31:7d:a2:
36:88:2c:37:70:ec:56:4a:bc:cf:f0:0a:b3:b8:14:7e:6a:c1:
14:7c:9f:ea:63:c9:69:87:29:ec:11:cf:e1:b2:b8:2d:0e:4b:
60:3d:f3:f9:55:d7:b4:39:e8:a7:66:f6:5f:e7:90:dd:d7:ab:
2b:1f:0b:67:f6:59:b8:0b:43:e4:52:04:73:44:9c:5b:27:52:
77:0f:0c:71:3d:d6:9b:e7:37:8e:47:95:bb:f5:9d:29:8f:10:
4e:da:32:bd:fa:d4:98:f8:5a:81:1a:14:f4:d5:1d:24:19:fb:
aa:5f:6f:ad:3c:2a:86:26:5f:7e:b2:b3:66:66:5b:89:25:d7:
43:24:53:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:04 2024 by rpki-client on console-fra.rpki-client.org