Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/350b06c7-448f-4125-80cb-fc0d869542d0/4cc08c99a85e0c09070c352040fa79f3ee49ec6e.roa
File: 4cc08c99a85e0c09070c352040fa79f3ee49ec6e.roa (raw, json)
Hash identifier: 1aAel7DKCC+U8HQWcuopkLmYu9KPj22KUeOsZZI6r4c=
Subject key identifier: EB:94:45:95:32:AA:2E:BE:1D:F3:24:2E:5C:32:8C:98:44:2F:6C:A8
Certificate issuer: /CN=ca57033023e73c5b1a524aa43f058bd1ed72d47f
Certificate serial: 0DC21F
Authority key identifier: 96:5B:C5:F5:C2:25:AD:63:AB:03:78:DF:22:AF:94:19:43:DB:B9:E6
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ca57033023e73c5b1a524aa43f058bd1ed72d47f.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/350b06c7-448f-4125-80cb-fc0d869542d0/4cc08c99a85e0c09070c352040fa79f3ee49ec6e.roa
Signing time: Wed 24 Mar 2021 14:37:02 +0000
ROA not before: Wed 24 Mar 2021 14:37:01 +0000
ROA not after: Tue 24 Mar 2026 14:37:01 +0000
asID: 20299
IP address blocks: 131.108.36.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 901663 (0xdc21f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca57033023e73c5b1a524aa43f058bd1ed72d47f
Validity
Not Before: Mar 24 14:37:01 2021 GMT
Not After : Mar 24 14:37:01 2026 GMT
Subject: CN=4cc08c99a85e0c09070c352040fa79f3ee49ec6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:4e:fd:bd:9d:4b:03:a3:2d:8e:b4:0f:22:2c:
12:37:87:9d:ea:08:fc:26:a5:c2:8b:b0:8f:10:61:
81:bb:9f:b6:3a:ba:c7:af:88:34:e6:7c:8f:c6:3c:
64:16:16:fa:f3:ab:b0:30:eb:11:b9:ec:ba:78:bb:
0e:5b:d6:c9:31:80:44:94:07:2d:4c:a4:aa:6d:91:
32:da:fa:62:a8:8d:bf:c6:62:9b:61:48:4a:3e:e9:
aa:c5:1f:ea:8c:2a:f8:4a:9c:96:db:fb:41:74:68:
30:35:6e:1b:f6:ed:eb:92:73:54:32:5d:59:55:f6:
df:a7:1b:82:13:4d:37:25:9a:6b:19:6e:6d:4b:d8:
89:76:ec:1a:0b:09:95:8b:8c:b0:48:b2:14:3b:85:
28:9d:ac:38:e4:86:9e:df:3e:9d:d4:be:08:07:47:
05:e3:77:4c:77:14:81:7a:9a:4b:5d:53:4b:fb:1c:
a1:54:97:d7:aa:ae:eb:7c:81:57:d0:60:ba:33:77:
ab:4c:2b:da:d6:13:05:27:e4:3a:6b:80:04:bf:fb:
17:be:85:13:d2:5f:e6:4b:d0:05:61:f8:0f:35:a0:
b7:f8:68:f1:25:28:9d:d0:c1:cd:3a:f4:74:08:ee:
8b:71:81:57:66:11:dc:c6:49:84:a4:5e:f3:4c:ec:
86:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:94:45:95:32:AA:2E:BE:1D:F3:24:2E:5C:32:8C:98:44:2F:6C:A8
X509v3 Authority Key Identifier:
keyid:96:5B:C5:F5:C2:25:AD:63:AB:03:78:DF:22:AF:94:19:43:DB:B9:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ca57033023e73c5b1a524aa43f058bd1ed72d47f.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/350b06c7-448f-4125-80cb-fc0d869542d0/4cc08c99a85e0c09070c352040fa79f3ee49ec6e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/350b06c7-448f-4125-80cb-fc0d869542d0/ca57033023e73c5b1a524aa43f058bd1ed72d47f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.108.36.0/22
Signature Algorithm: sha256WithRSAEncryption
48:1c:27:dd:a4:1c:11:8d:05:2c:bc:b8:41:7c:e5:93:99:6d:
0e:a3:9a:60:43:eb:d3:c5:52:5e:80:3b:e9:25:e4:a3:a7:c8:
8f:87:0f:48:29:34:ea:6f:7e:6a:02:0e:52:91:89:bc:d0:9f:
2a:d0:cf:3d:3b:3a:fe:f0:ca:9c:e0:04:4c:33:46:b5:00:74:
b6:44:a5:f9:a5:6f:0c:ce:09:0b:31:f1:bd:5c:ca:48:37:9c:
51:c7:3f:ad:7e:ba:21:4a:b4:8b:a0:8f:67:8e:d5:ce:97:90:
27:81:a9:34:2c:f9:9c:03:4b:56:76:7c:db:b9:70:d8:52:05:
03:02:4f:cd:18:d3:4c:e3:27:09:9c:e1:9b:1b:a1:b9:8e:d6:
6e:d3:a3:ef:e1:d6:c5:dc:67:dd:cd:d6:01:81:76:b3:f6:11:
ee:b9:fc:43:ed:4b:2e:be:83:0f:2d:63:4f:2e:54:31:f7:2d:
c5:db:ea:62:9b:f8:8b:6e:45:ea:cf:a3:43:d1:95:c1:02:bb:
8f:80:e9:54:88:a5:02:da:af:41:3a:90:f5:13:b4:e9:26:9b:
ab:9e:64:00:d7:06:3e:8f:77:57:ea:71:1b:e4:26:20:5b:03:
57:76:d9:fc:01:70:32:9d:aa:4a:78:57:c0:69:66:35:7a:fd:
14:54:bf:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:19 2024 by rpki-client on console-ams.rpki-client.org