Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4d176b0b-dfdd-4095-a6b4-eccb47ba5a51/66567040c79ad72de6054c57407bdd786dd4e330.roa
File: 66567040c79ad72de6054c57407bdd786dd4e330.roa (raw, json)
Hash identifier: pcnbZXZG2KRapfsyU6UoGpBqCQPnJ78nDv0aurtJQO0=
Subject key identifier: 98:18:FB:DE:19:13:95:08:22:3C:A8:56:88:62:D8:10:B4:82:40:FE
Certificate issuer: /CN=39cac9b8258cbecd7f49618f9f9179bb699f6cfe
Certificate serial: 20C7EF
Authority key identifier: 9E:C7:8A:28:C0:2E:E6:96:77:B3:45:42:8A:E0:95:FD:92:99:FA:23
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/39cac9b8258cbecd7f49618f9f9179bb699f6cfe.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4d176b0b-dfdd-4095-a6b4-eccb47ba5a51/66567040c79ad72de6054c57407bdd786dd4e330.roa
Signing time: Wed 14 Jun 2023 04:36:38 +0000
ROA not before: Tue 13 Jun 2023 04:36:37 +0000
ROA not after: Sat 14 Jun 2025 04:36:37 +0000
asID: 23470
IP address blocks: 138.204.111.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2148335 (0x20c7ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39cac9b8258cbecd7f49618f9f9179bb699f6cfe
Validity
Not Before: Jun 13 04:36:37 2023 GMT
Not After : Jun 14 04:36:37 2025 GMT
Subject: CN=66567040c79ad72de6054c57407bdd786dd4e330
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:45:32:d9:71:1a:19:dc:c2:b4:33:62:0f:f3:
58:9f:00:8d:d4:71:3c:1b:48:d0:d9:c2:27:df:2a:
e8:ca:1b:dc:c4:7c:a6:b9:4f:13:e1:59:dd:97:71:
bd:54:f5:15:53:6c:22:76:35:ad:9c:03:d4:26:21:
6c:a0:bb:9e:f4:ed:45:26:5d:fc:25:14:74:c7:14:
6f:9a:2d:ac:fb:5c:cb:b0:06:24:46:9f:14:c5:36:
10:96:90:0a:6b:ef:4e:c4:26:ec:75:f6:56:7b:fc:
40:8b:83:0e:24:8d:b9:53:69:06:42:b6:75:4f:03:
0b:f4:04:73:40:e4:55:fd:3a:b5:2e:0b:60:f1:bd:
ed:39:99:7e:2e:ff:f3:a2:42:c5:13:f0:67:15:07:
b4:25:e0:6e:77:78:e8:f2:71:2a:fc:f2:c7:20:34:
3f:81:f2:05:39:05:8e:8d:75:39:06:90:37:0e:36:
4e:e9:63:a6:8d:0e:21:f6:39:37:32:02:ba:e8:07:
8c:d3:9c:99:91:27:46:dc:87:87:79:2b:d5:a6:9f:
49:92:88:14:2f:cc:c3:a9:b5:6f:1b:b4:29:e4:a9:
1b:5a:46:dd:82:e3:2f:49:39:8b:51:31:34:aa:ed:
db:c5:80:bd:05:96:53:ce:32:95:30:8a:59:ce:cd:
f5:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:18:FB:DE:19:13:95:08:22:3C:A8:56:88:62:D8:10:B4:82:40:FE
X509v3 Authority Key Identifier:
keyid:9E:C7:8A:28:C0:2E:E6:96:77:B3:45:42:8A:E0:95:FD:92:99:FA:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/39cac9b8258cbecd7f49618f9f9179bb699f6cfe.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4d176b0b-dfdd-4095-a6b4-eccb47ba5a51/66567040c79ad72de6054c57407bdd786dd4e330.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/4d176b0b-dfdd-4095-a6b4-eccb47ba5a51/39cac9b8258cbecd7f49618f9f9179bb699f6cfe.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.204.111.0/24
Signature Algorithm: sha256WithRSAEncryption
96:65:2a:25:ba:f4:c3:34:7f:bd:f9:c9:c1:ae:23:7a:34:48:
4c:c4:89:65:ba:42:1e:50:e7:b4:87:5b:95:70:0e:e0:77:66:
5a:56:ba:31:11:f8:3a:9c:aa:59:ba:b7:35:2c:fe:cc:00:c7:
99:76:6c:34:b0:a4:bf:28:75:90:95:db:94:28:3c:ca:87:fb:
d6:89:40:98:97:6a:2c:7a:3f:62:86:6a:e3:2a:c8:9e:7a:00:
69:66:ab:93:d5:c2:0a:db:11:9d:37:92:10:22:06:65:47:30:
7d:57:9f:4d:29:26:3b:44:e6:cc:5c:1e:aa:58:85:1a:28:ee:
4e:db:37:c1:1b:dd:10:88:ca:de:33:f0:19:ae:67:2e:7b:d5:
bf:cb:46:95:9c:6d:24:38:c2:dc:36:59:45:d5:96:64:d5:5b:
ae:4a:1a:8c:9a:65:12:dc:bc:3f:7d:50:fe:dd:87:4a:7f:d2:
f8:3c:9e:19:f0:8a:29:0f:ae:33:f5:91:5b:86:e0:56:0e:f9:
d3:6c:d0:ac:78:bd:3a:b9:d6:7c:a0:1b:c5:c3:52:7b:35:d9:
6d:a7:b7:69:17:19:fc:c3:53:5e:8b:ee:38:8f:13:f4:12:8b:
f5:69:e2:9c:7f:8e:95:d9:cd:91:cd:34:fb:89:57:d0:96:5b:
d5:64:2f:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:32 2024 by rpki-client on console-ams.rpki-client.org