Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/350b06c7-448f-4125-80cb-fc0d869542d0/e21571a606cbe2e8a2b66ec2e6a9bfdd0bfb8572.roa
File: e21571a606cbe2e8a2b66ec2e6a9bfdd0bfb8572.roa (raw, json)
Hash identifier: Ynr50Skkdd3Kr0iqaSDE/5QWkTufJoJC88IPHv9N88o=
Subject key identifier: A0:F2:1C:3F:74:66:19:4B:6A:CA:B4:89:7B:AA:C1:86:B1:43:4C:62
Certificate issuer: /CN=ca57033023e73c5b1a524aa43f058bd1ed72d47f
Certificate serial: 0DC453
Authority key identifier: 96:5B:C5:F5:C2:25:AD:63:AB:03:78:DF:22:AF:94:19:43:DB:B9:E6
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ca57033023e73c5b1a524aa43f058bd1ed72d47f.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/350b06c7-448f-4125-80cb-fc0d869542d0/e21571a606cbe2e8a2b66ec2e6a9bfdd0bfb8572.roa
Signing time: Wed 24 Mar 2021 14:37:03 +0000
ROA not before: Wed 24 Mar 2021 14:37:01 +0000
ROA not after: Tue 24 Mar 2026 14:37:01 +0000
asID: 262206
IP address blocks: 131.108.36.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 902227 (0xdc453)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca57033023e73c5b1a524aa43f058bd1ed72d47f
Validity
Not Before: Mar 24 14:37:01 2021 GMT
Not After : Mar 24 14:37:01 2026 GMT
Subject: CN=e21571a606cbe2e8a2b66ec2e6a9bfdd0bfb8572
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:fd:6e:12:8b:72:cd:88:c8:3c:32:ae:9a:42:
a5:c3:8c:83:72:e9:29:ed:96:d0:4f:12:58:27:22:
7b:28:1c:da:e1:51:42:43:e4:b0:dd:86:91:96:95:
98:06:e5:5a:ec:9a:93:51:ed:ef:77:8c:69:af:37:
10:6a:64:ac:a4:49:a2:21:2a:21:1d:20:78:88:e9:
7e:6b:62:a1:41:f4:9a:5c:52:a8:9a:34:fa:01:ea:
03:4a:b9:31:7c:f4:71:23:2c:b8:41:80:19:92:65:
06:e4:69:2b:18:23:38:08:4c:b9:e0:73:4d:a5:b8:
47:2f:95:b1:81:6b:e1:6f:ea:e7:36:23:ee:52:81:
b5:5f:4c:70:86:40:1c:63:ee:27:39:49:57:9a:12:
fa:59:3b:f2:a9:05:1e:cf:ab:bc:29:30:fb:83:a5:
28:30:20:aa:7d:5d:10:6f:a9:25:42:1d:d5:32:4b:
b8:b4:ef:af:97:27:df:d6:6d:3b:cd:ab:67:b3:7c:
87:e8:f0:8c:92:5b:18:02:fa:56:c9:2a:ea:78:c6:
5a:61:2a:08:8e:81:a0:f0:9b:be:3f:66:97:c2:fc:
e2:0e:63:b0:6e:54:0c:ed:ab:e5:d8:1b:2f:2d:9f:
56:1e:34:f8:3c:8f:14:66:b6:0a:f8:b5:a3:e5:34:
b5:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:F2:1C:3F:74:66:19:4B:6A:CA:B4:89:7B:AA:C1:86:B1:43:4C:62
X509v3 Authority Key Identifier:
keyid:96:5B:C5:F5:C2:25:AD:63:AB:03:78:DF:22:AF:94:19:43:DB:B9:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ca57033023e73c5b1a524aa43f058bd1ed72d47f.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/350b06c7-448f-4125-80cb-fc0d869542d0/e21571a606cbe2e8a2b66ec2e6a9bfdd0bfb8572.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/350b06c7-448f-4125-80cb-fc0d869542d0/ca57033023e73c5b1a524aa43f058bd1ed72d47f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.108.36.0/22
Signature Algorithm: sha256WithRSAEncryption
52:d8:1c:b0:00:7a:9b:6b:f4:4b:f1:ce:4b:c4:5b:46:99:d9:
1f:77:0c:d1:a2:19:91:69:51:b4:a0:bb:c6:8d:29:a8:41:8c:
35:33:bb:1e:a9:3f:24:48:18:60:ba:62:41:f3:d9:21:9c:76:
db:d6:f2:b9:28:09:0e:89:0d:c8:b6:c3:9f:82:a2:18:55:28:
cb:be:e0:e7:3c:cd:50:e9:40:5b:80:18:65:01:ed:d7:5d:5d:
81:df:70:20:cd:9a:86:83:de:83:11:f0:84:2d:02:8b:43:f9:
c2:c3:d6:f1:a9:25:2d:48:39:2a:51:92:07:b2:75:40:9f:52:
d0:44:6c:4b:be:12:13:63:8d:b2:49:e7:ad:87:0b:a1:fa:66:
60:19:31:e4:b5:db:6d:0e:db:79:27:e0:14:bd:2b:60:21:91:
bb:ed:66:11:39:a5:91:97:4e:15:64:17:6a:b1:a6:03:df:3c:
1a:6c:63:00:72:e6:2b:26:e5:1f:dd:b0:f6:10:56:ef:84:a2:
c4:12:9c:7b:16:75:68:1a:f4:e6:17:bb:d2:8e:28:0a:ef:96:
d4:7d:18:36:68:7b:66:48:86:87:2a:97:79:57:ab:bb:4e:36:
16:8d:c0:e5:a2:89:3a:59:93:67:ef:71:0b:da:8d:4c:6f:a2:
d2:80:d4:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:26 2024 by rpki-client on console-fra.rpki-client.org