Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/501ca71d-9f99-4ec8-bdf3-2af0195e5031/61fa697addd2a0ed7c103e00cce9e68f49fb80c6.roa
File: 61fa697addd2a0ed7c103e00cce9e68f49fb80c6.roa (raw, json)
Hash identifier: IY1X1OZLdDtldfy1uKQ42IHXSlDY+7x3w4J7O2yA6yc=
Subject key identifier: 54:73:98:10:45:3F:E5:B2:AA:10:2D:42:F4:F1:90:2B:FE:84:B6:9F
Certificate issuer: /CN=551ee44031263fb7ea75afe75460eef74dd1f0a1
Certificate serial: 122A12
Authority key identifier: 82:94:DF:54:9D:3E:AE:0B:3F:B8:48:AE:A9:5C:07:B5:4C:33:21:BD
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/551ee44031263fb7ea75afe75460eef74dd1f0a1.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/501ca71d-9f99-4ec8-bdf3-2af0195e5031/61fa697addd2a0ed7c103e00cce9e68f49fb80c6.roa
Signing time: Mon 27 Nov 2023 07:30:01 +0000
ROA not before: Mon 27 Nov 2023 07:30:01 +0000
ROA not after: Wed 26 Nov 2025 07:30:01 +0000
asID: 264634
IP address blocks: 138.219.248.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1190418 (0x122a12)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551ee44031263fb7ea75afe75460eef74dd1f0a1
Validity
Not Before: Nov 27 07:30:01 2023 GMT
Not After : Nov 26 07:30:01 2025 GMT
Subject: CN=61fa697addd2a0ed7c103e00cce9e68f49fb80c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:6b:6e:e8:8d:24:d2:60:bd:95:05:5d:1e:8f:
90:34:35:f0:e9:92:05:54:21:a2:0a:d7:fc:7e:1c:
10:29:95:98:f8:ed:22:28:de:b7:8b:47:91:4e:11:
0a:47:97:f0:57:3d:22:6b:06:49:e9:92:03:d6:ee:
ae:b5:80:9c:2b:90:0d:14:bc:33:bd:6e:99:b1:4d:
41:d0:a8:78:4a:8f:48:ac:75:6b:cd:d2:96:f7:52:
3d:04:67:82:db:11:de:be:af:6e:5a:1f:cb:b5:5e:
a7:32:c2:70:18:d6:0a:6d:7c:df:fa:c0:cd:31:6c:
54:3a:bf:b0:8a:f6:44:a7:6e:ad:a0:14:fb:d1:8b:
0d:bd:60:8b:fb:81:91:58:d9:00:3e:ba:19:3c:54:
77:3b:3f:82:a3:f8:6a:65:f5:8b:e1:84:5c:ec:58:
2f:45:fa:81:c7:9e:a6:e6:71:0c:96:74:a1:da:5c:
e9:b5:35:d5:74:fe:d4:9e:bd:64:3d:b9:60:11:cf:
3e:54:4c:f0:b3:2d:fe:42:e2:98:cd:ab:8b:be:23:
fa:b7:34:a1:27:15:d5:91:0b:4e:5d:ca:55:8a:1f:
0e:f1:47:de:24:a7:63:af:2f:67:f7:d0:b2:7d:1c:
2a:1c:51:64:e8:02:07:5e:e7:5a:83:5e:e4:9a:22:
91:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:73:98:10:45:3F:E5:B2:AA:10:2D:42:F4:F1:90:2B:FE:84:B6:9F
X509v3 Authority Key Identifier:
keyid:82:94:DF:54:9D:3E:AE:0B:3F:B8:48:AE:A9:5C:07:B5:4C:33:21:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/551ee44031263fb7ea75afe75460eef74dd1f0a1.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/501ca71d-9f99-4ec8-bdf3-2af0195e5031/61fa697addd2a0ed7c103e00cce9e68f49fb80c6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/501ca71d-9f99-4ec8-bdf3-2af0195e5031/551ee44031263fb7ea75afe75460eef74dd1f0a1.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.219.248.0/22
Signature Algorithm: sha256WithRSAEncryption
01:d7:7c:bb:94:b8:c1:e5:02:11:5f:33:67:f5:dc:7a:f7:26:
6f:ca:0d:d7:00:61:48:a7:77:bb:6c:c9:85:9a:6b:36:73:73:
5d:5e:ec:f3:36:bf:98:cd:e4:7a:c6:30:af:76:b4:4e:62:ab:
97:07:0f:ee:7d:a8:b2:0f:9d:e5:1c:fa:ad:cc:07:79:8f:36:
d0:2b:a0:cc:a1:6e:d8:7e:a7:d8:ad:ab:c4:84:cb:97:02:89:
99:20:71:6b:dc:e2:f4:d7:6d:9d:30:91:19:4d:ed:fe:18:24:
8c:3b:92:17:12:67:65:18:00:ac:48:a9:ae:05:7f:f6:3b:78:
26:ce:0c:99:17:42:63:97:60:c4:61:8e:b4:86:1b:a3:b8:60:
59:9f:a5:74:2c:40:48:0d:7b:e2:a7:5c:6c:b8:61:fc:c9:ca:
44:50:d5:5e:22:d9:6c:0c:70:1d:34:d8:be:52:63:27:b6:51:
51:bc:0f:2d:46:47:f8:0b:5b:41:b6:fd:83:58:b0:fd:b0:2c:
b1:71:8a:9a:30:6e:ef:8d:c1:77:ef:9f:bc:df:ae:12:ff:80:
58:4c:30:a5:6c:03:d4:60:00:c5:07:29:30:d6:22:be:18:f2:
d8:32:b5:6a:56:ce:b9:6f:47:14:3b:bb:e8:69:1a:1d:e1:64:
9d:cc:70:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:42 2024 by rpki-client on console-ams.rpki-client.org