Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3ceec008-f613-4035-aeee-2c2db47eb520/113831d20fb56fa5e953f1141fc6d67192bbf211.roa
File: 113831d20fb56fa5e953f1141fc6d67192bbf211.roa (raw, json)
Hash identifier: WV84ILf5g4z+c2FxMthMsDt6EpiIoAV+xyfURiFpnfw=
Subject key identifier: 0C:9C:0A:D7:A4:48:98:F8:6A:6F:80:2C:63:39:0B:51:7C:F7:07:D6
Certificate issuer: /CN=1d2fa4f2addeecf046730f3bb57f3dfb7945a4d3
Certificate serial: 163C45
Authority key identifier: 58:B5:0D:EB:1A:6D:EC:02:75:B0:A6:6B:AD:AE:10:B2:70:98:2A:C9
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1d2fa4f2addeecf046730f3bb57f3dfb7945a4d3.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3ceec008-f613-4035-aeee-2c2db47eb520/113831d20fb56fa5e953f1141fc6d67192bbf211.roa
Signing time: Thu 21 Dec 2023 11:30:10 +0000
ROA not before: Thu 21 Dec 2023 11:30:10 +0000
ROA not after: Sun 21 Dec 2025 11:30:10 +0000
asID: 263700
IP address blocks: 138.121.168.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1457221 (0x163c45)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d2fa4f2addeecf046730f3bb57f3dfb7945a4d3
Validity
Not Before: Dec 21 11:30:10 2023 GMT
Not After : Dec 21 11:30:10 2025 GMT
Subject: CN=113831d20fb56fa5e953f1141fc6d67192bbf211
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:82:b8:dd:d0:05:ae:23:58:14:75:46:08:07:
f1:5b:ae:c8:dc:c7:76:f4:8f:97:4b:e2:c1:4c:1a:
e4:22:6a:fe:2c:77:d8:1b:1c:0f:b0:8d:a6:b2:6b:
82:99:d7:d0:ea:c3:4d:62:39:fa:e7:01:01:13:4d:
b0:71:43:8f:19:a4:4b:69:e5:c7:86:fc:94:ca:4b:
57:73:08:d5:26:d6:c8:99:38:fe:2b:a1:3c:8a:b9:
0e:63:a4:c2:6a:20:c3:98:cb:d2:44:71:44:1e:f9:
ec:c0:5a:ae:77:6b:c6:43:23:97:0c:fb:c8:64:e7:
13:cd:0e:a6:ab:5a:b9:49:64:76:f4:ad:d6:6c:74:
93:38:77:c5:78:6d:ba:f1:0e:0f:d6:90:32:8c:f0:
2e:87:4d:00:d0:92:ae:ec:ed:45:98:26:5d:05:10:
8b:d9:d3:3f:66:ce:be:19:0a:99:c0:fc:78:c0:91:
dc:c6:36:53:e1:0f:df:67:68:a5:d2:22:fb:99:b2:
90:98:53:cc:87:20:14:46:83:d5:f2:4d:6f:da:53:
e7:0e:e2:3c:8d:f2:d1:e1:38:26:65:91:c2:63:e0:
88:e7:26:4d:e1:79:9c:24:15:72:48:d4:0f:3e:78:
79:70:c8:09:5e:38:ab:1f:0f:09:17:b9:f7:b1:d8:
54:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:9C:0A:D7:A4:48:98:F8:6A:6F:80:2C:63:39:0B:51:7C:F7:07:D6
X509v3 Authority Key Identifier:
keyid:58:B5:0D:EB:1A:6D:EC:02:75:B0:A6:6B:AD:AE:10:B2:70:98:2A:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1d2fa4f2addeecf046730f3bb57f3dfb7945a4d3.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3ceec008-f613-4035-aeee-2c2db47eb520/113831d20fb56fa5e953f1141fc6d67192bbf211.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/3ceec008-f613-4035-aeee-2c2db47eb520/1d2fa4f2addeecf046730f3bb57f3dfb7945a4d3.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.121.168.0/22
Signature Algorithm: sha256WithRSAEncryption
62:b8:ac:e0:aa:cc:e1:a4:8a:8a:f1:81:81:26:83:34:9c:e5:
cf:87:e3:0e:4c:be:08:29:d2:88:7f:3a:ba:cf:de:26:b2:5e:
62:c5:4c:77:03:cb:83:2a:ac:c8:24:e0:51:36:87:70:d4:1a:
30:e5:6b:83:0d:ca:84:7c:0b:61:e7:ec:d0:f1:bb:63:ff:75:
22:d8:d0:44:37:20:3a:35:d7:b7:37:47:3e:36:6f:67:c1:f2:
35:c8:4b:50:6b:bd:da:ca:89:0f:ba:2b:57:c6:88:5d:0f:f6:
dd:56:80:1e:e3:60:01:3e:04:08:9b:46:3b:bd:01:8a:bb:28:
ee:04:f1:db:ad:91:b5:2d:52:bb:e0:13:fe:28:de:ee:ff:21:
3e:60:2b:29:86:27:83:17:93:df:6d:84:12:8a:c1:47:7a:3a:
87:66:25:8c:f5:46:8c:bb:29:26:1f:d0:22:0f:36:0d:01:d1:
95:60:bb:a3:3d:54:f5:c5:6f:35:5a:40:a2:9e:6c:85:f3:36:
22:54:98:6a:3d:cc:7a:54:57:e7:34:ad:89:08:74:96:32:dc:
42:36:37:44:a5:71:e3:e5:0c:3c:d7:b4:17:79:36:ca:9f:ad:
05:52:3b:5f:6c:de:9d:a9:7f:f0:de:54:9f:83:46:ec:cf:c9:
ca:cc:65:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:20 2024 by rpki-client on console-ams.rpki-client.org