Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3cd76adc-676f-4a60-ad0d-231468e546b2/ac95a35ec90c5e9e9758f38793992f0e6a913cc8.roa
File: ac95a35ec90c5e9e9758f38793992f0e6a913cc8.roa (raw, json)
Hash identifier: NFT6o8YzIHCTM4d0SZzcA3lKpW99E22E64/8Mj50UhU=
Subject key identifier: 85:5A:C8:20:DA:CB:AE:04:0C:F6:60:99:E4:EB:5C:64:C4:F9:5D:20
Certificate issuer: /CN=d46b4ca0a9fad10842355c22e4bfcc2f877fdc28
Certificate serial: 1F2429
Authority key identifier: 15:44:36:65:79:46:ED:7A:C6:C8:7D:0D:CA:A1:07:76:9C:69:28:3F
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d46b4ca0a9fad10842355c22e4bfcc2f877fdc28.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3cd76adc-676f-4a60-ad0d-231468e546b2/ac95a35ec90c5e9e9758f38793992f0e6a913cc8.roa
Signing time: Fri 24 Mar 2023 08:30:55 +0000
ROA not before: Thu 23 Mar 2023 08:30:55 +0000
ROA not after: Sat 22 Mar 2025 08:30:55 +0000
asID: 263728
IP address blocks: 131.72.232.0/24 maxlen: 24
131.72.233.0/24 maxlen: 24
131.72.234.0/24 maxlen: 24
131.72.235.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2040873 (0x1f2429)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d46b4ca0a9fad10842355c22e4bfcc2f877fdc28
Validity
Not Before: Mar 23 08:30:55 2023 GMT
Not After : Mar 22 08:30:55 2025 GMT
Subject: CN=ac95a35ec90c5e9e9758f38793992f0e6a913cc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:fb:7c:3e:54:e3:71:a6:72:39:52:24:84:29:
0b:1a:7b:f6:59:94:f1:97:a3:1d:59:32:10:86:a9:
9a:6b:ef:ca:06:de:46:48:48:5c:07:c0:a1:e7:89:
d8:90:58:e2:dc:37:a8:a2:3f:f4:e9:52:3d:8d:fd:
7c:c6:a0:0d:2e:3b:f2:e3:42:8d:33:c9:84:e6:53:
3d:49:96:ef:f9:ab:21:d9:5c:69:04:6e:77:0f:6f:
44:cd:9d:e4:5d:5b:54:76:f4:0f:c6:82:42:ab:8f:
b9:b9:19:b5:17:2e:d7:33:70:e9:28:7e:a3:58:c0:
66:ff:b8:3a:85:e2:63:d8:44:2c:75:7c:40:ad:86:
eb:fd:ef:e7:62:17:c0:08:98:b2:74:21:19:92:4c:
b9:6f:b9:8f:f7:38:7d:45:e9:d1:63:6c:8f:17:44:
27:20:17:66:ab:cc:4a:ff:b3:70:d8:60:d2:ac:ea:
5b:cb:8d:8b:7f:66:28:a7:ec:c8:01:21:19:9d:12:
6a:3f:a7:3d:77:76:9d:12:a5:07:be:d4:a2:c4:c7:
41:01:24:f3:50:11:93:13:4f:61:33:0d:d4:2f:94:
9e:65:0e:8d:2c:ff:79:e8:b6:56:d1:7d:d7:cc:a3:
18:84:6e:7e:e5:4d:e4:cc:a6:48:2e:42:95:90:f9:
0a:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:5A:C8:20:DA:CB:AE:04:0C:F6:60:99:E4:EB:5C:64:C4:F9:5D:20
X509v3 Authority Key Identifier:
keyid:15:44:36:65:79:46:ED:7A:C6:C8:7D:0D:CA:A1:07:76:9C:69:28:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d46b4ca0a9fad10842355c22e4bfcc2f877fdc28.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3cd76adc-676f-4a60-ad0d-231468e546b2/ac95a35ec90c5e9e9758f38793992f0e6a913cc8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/3cd76adc-676f-4a60-ad0d-231468e546b2/d46b4ca0a9fad10842355c22e4bfcc2f877fdc28.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.72.232.0/22
Signature Algorithm: sha256WithRSAEncryption
6c:a8:55:19:e2:63:a9:83:36:4d:88:96:98:5f:5a:e2:91:c8:
ea:1f:c1:31:c3:10:9d:a5:d1:dc:b0:9a:66:b2:31:83:51:5a:
ff:83:08:d3:91:5b:f9:5c:4f:6a:dd:9d:f9:5a:fc:9f:69:6d:
5d:45:92:ad:67:73:49:69:f2:77:54:f4:a3:3e:30:53:b5:11:
79:c1:24:68:e8:f6:2d:51:4b:d7:0c:e6:61:79:81:0c:8b:52:
00:1b:54:99:0a:59:0e:8f:dc:0c:5c:68:d8:35:f8:a1:68:21:
38:1e:5a:c6:32:8e:bd:36:89:a9:b9:c9:a7:bc:43:cc:68:39:
88:23:bb:7f:43:7d:c6:52:58:5d:79:f7:bb:38:9a:be:4a:04:
18:b7:66:04:f3:6c:66:70:93:dd:d9:fd:4c:18:99:33:07:0c:
0f:8e:7d:95:cb:96:d1:83:3c:f5:39:cf:e1:d1:6b:4a:38:2a:
46:87:9c:fd:bd:da:e9:9b:35:6d:fc:c4:01:29:c1:c3:cf:b7:
68:2a:42:b2:1b:cc:2d:ee:2a:6a:56:51:04:be:68:de:bc:7f:
6f:95:07:d3:30:8d:fe:34:a7:4d:92:5b:fc:f0:5c:45:ee:ee:
8a:05:14:64:e7:9b:dd:4a:04:b0:d7:3d:7f:43:52:7c:e8:53:
e6:6b:ae:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:05 2024 by rpki-client on console-fra.rpki-client.org