Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/501ca71d-9f99-4ec8-bdf3-2af0195e5031/6217e26042f9e7fe7bf59f81882ac4901d56e9ad.roa
File: 6217e26042f9e7fe7bf59f81882ac4901d56e9ad.roa (raw, json)
Hash identifier: iukGPqGNPClH4Ckw8B1OsbMsf0wPaFEJVK+aU5tINXY=
Subject key identifier: 2D:4B:0B:A2:7E:DE:75:12:49:77:80:A4:48:DA:22:73:CF:AF:84:AF
Certificate issuer: /CN=551ee44031263fb7ea75afe75460eef74dd1f0a1
Certificate serial: 12242D
Authority key identifier: 82:94:DF:54:9D:3E:AE:0B:3F:B8:48:AE:A9:5C:07:B5:4C:33:21:BD
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/551ee44031263fb7ea75afe75460eef74dd1f0a1.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/501ca71d-9f99-4ec8-bdf3-2af0195e5031/6217e26042f9e7fe7bf59f81882ac4901d56e9ad.roa
Signing time: Mon 27 Nov 2023 07:30:00 +0000
ROA not before: Mon 27 Nov 2023 07:30:00 +0000
ROA not after: Wed 26 Nov 2025 07:30:00 +0000
asID: 264634
IP address blocks: 138.219.248.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1188909 (0x12242d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551ee44031263fb7ea75afe75460eef74dd1f0a1
Validity
Not Before: Nov 27 07:30:00 2023 GMT
Not After : Nov 26 07:30:00 2025 GMT
Subject: CN=6217e26042f9e7fe7bf59f81882ac4901d56e9ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:ac:d0:11:1c:8b:18:d3:58:bf:f8:16:a8:9e:
0b:52:63:4d:e7:ae:77:aa:36:4d:0b:23:9f:6e:30:
ef:13:13:77:d2:d6:c9:d4:72:c1:e9:26:b6:98:02:
a1:53:dc:c1:bf:3b:8c:3b:ab:6e:94:65:73:05:e1:
47:68:7a:42:0b:2c:ee:28:9c:fa:a1:8a:a5:4a:c7:
09:34:1e:8a:df:d6:7c:f3:33:3e:af:40:dc:10:f7:
43:38:06:40:45:69:23:25:db:29:05:7b:82:25:c5:
bd:8f:2f:7e:63:c7:be:72:4a:27:5f:64:c0:39:a9:
be:1d:7d:88:c6:60:1c:c4:f9:23:e5:d7:be:71:5e:
68:fd:7c:3f:dd:de:61:23:ca:12:16:4d:40:19:ec:
bb:f1:35:77:3d:d3:1f:83:50:15:2f:e2:b7:c5:02:
d7:f8:6a:17:41:c5:d9:25:00:fe:04:88:74:89:60:
2d:7f:c3:45:52:99:67:21:bd:8d:fa:c8:6f:6e:85:
42:5b:6a:92:c2:11:01:ce:69:91:79:85:34:e8:bb:
94:ac:f5:fb:d4:a2:13:16:c8:a2:c2:3a:65:39:e7:
3c:8c:81:2a:3e:de:a0:3f:cb:bb:14:60:6f:03:13:
68:2c:34:a3:23:2b:90:52:1f:45:b7:e4:3b:e4:30:
5d:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:4B:0B:A2:7E:DE:75:12:49:77:80:A4:48:DA:22:73:CF:AF:84:AF
X509v3 Authority Key Identifier:
keyid:82:94:DF:54:9D:3E:AE:0B:3F:B8:48:AE:A9:5C:07:B5:4C:33:21:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/551ee44031263fb7ea75afe75460eef74dd1f0a1.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/501ca71d-9f99-4ec8-bdf3-2af0195e5031/6217e26042f9e7fe7bf59f81882ac4901d56e9ad.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/501ca71d-9f99-4ec8-bdf3-2af0195e5031/551ee44031263fb7ea75afe75460eef74dd1f0a1.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.219.248.0/22
Signature Algorithm: sha256WithRSAEncryption
10:c5:11:a2:b0:69:b9:aa:7c:84:33:1d:98:e6:93:39:80:33:
93:89:2b:82:d0:bd:e3:2a:48:7b:fb:84:4d:1b:8a:e7:a4:b9:
bb:86:9b:65:2d:76:78:87:d5:fc:90:0d:ca:70:f8:02:bf:2e:
5c:10:e9:5a:75:cc:4e:ba:47:0a:52:77:48:0e:be:f7:cb:a1:
d8:78:16:38:c8:6a:00:07:a6:35:c8:52:14:66:fe:d6:31:e2:
b0:f4:4b:09:72:0d:2d:2f:ef:f5:69:d6:c4:c3:6f:94:80:0b:
03:36:fb:a0:2a:c6:24:da:da:33:52:11:d9:13:3e:4a:48:7f:
06:cb:39:4d:dc:bd:c1:e2:a9:df:41:0c:cc:d7:a4:79:d6:6f:
d2:fb:33:39:0c:fe:13:73:cc:f2:26:fb:f8:2f:1f:43:ef:ba:
e2:c9:85:3a:0a:d2:aa:84:ca:d1:2b:eb:ba:55:3f:12:52:a7:
f8:93:0d:99:35:fd:92:5e:fd:b4:93:9e:fc:43:c4:32:07:91:
99:64:5b:e6:93:5c:61:b5:5f:00:74:8c:aa:5c:00:76:5b:8d:
b8:d3:6b:25:39:b4:77:6f:ff:e9:02:e5:60:30:16:4d:d2:c5:
10:0b:c7:29:fe:07:d0:48:f5:e0:a4:c4:6d:fe:14:ef:9e:86:
ab:59:b1:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:17 2024 by rpki-client on console-fra.rpki-client.org