Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/58669d13-dbd2-448f-8616-af9319be2baf/ba5b0bbdbaf2cfd0d7549478a3e6f05d8fcbea3c.roa
File: ba5b0bbdbaf2cfd0d7549478a3e6f05d8fcbea3c.roa (raw, json)
Hash identifier: BUqoeYV3CC8ryzBuH7jwlMO+FVFdQeun/IcmH8nAEyA=
Subject key identifier: F2:5E:2E:1D:CB:BE:22:FF:18:53:33:8F:71:CD:00:93:42:E9:66:FE
Certificate issuer: /CN=dd92f04e17c84c39ce37b3e765b1e0b50fafe64c
Certificate serial: 04A8C1
Authority key identifier: 5F:31:3B:E9:18:28:48:AB:DC:81:17:CD:E2:A1:03:7F:D0:5F:8F:D3
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dd92f04e17c84c39ce37b3e765b1e0b50fafe64c.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/58669d13-dbd2-448f-8616-af9319be2baf/ba5b0bbdbaf2cfd0d7549478a3e6f05d8fcbea3c.roa
Signing time: Thu 17 Aug 2023 09:53:09 +0000
ROA not before: Wed 16 Aug 2023 09:53:09 +0000
ROA not after: Sun 17 Aug 2025 09:53:09 +0000
asID: 22411
IP address blocks: 138.59.64.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 305345 (0x4a8c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd92f04e17c84c39ce37b3e765b1e0b50fafe64c
Validity
Not Before: Aug 16 09:53:09 2023 GMT
Not After : Aug 17 09:53:09 2025 GMT
Subject: CN=ba5b0bbdbaf2cfd0d7549478a3e6f05d8fcbea3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:3d:d2:13:c4:35:ee:99:e6:47:06:34:53:05:
d7:e1:b0:cd:63:b8:60:be:64:92:ca:6c:bd:1c:cb:
26:1c:4f:35:7b:20:ff:7b:56:13:d7:92:f0:04:61:
03:aa:dd:57:fb:ff:8f:e9:26:2d:83:ef:81:d4:7e:
d2:74:cb:02:f1:60:c3:e2:e4:fd:8d:88:2d:05:ed:
51:e3:4b:9b:99:3c:1b:70:69:9d:a7:cd:0d:cc:0f:
c3:7e:e0:b8:dc:f7:39:9d:35:2c:43:33:fa:90:61:
f3:55:15:3d:fa:64:d2:72:a2:2b:46:a6:59:a2:51:
a7:c5:ef:f6:32:9b:0f:db:53:be:38:e6:c4:6b:08:
c5:bd:b4:47:2b:78:2a:17:fc:b1:aa:fa:df:22:81:
c5:8e:ca:38:85:e1:bc:69:73:ab:67:99:92:76:08:
09:f4:40:39:1a:0b:17:4a:a2:ea:95:df:62:9d:92:
38:fa:73:82:cc:cd:9a:6b:62:62:9d:f3:6d:a3:64:
7f:1c:76:7f:37:c3:b9:62:55:81:7e:1b:20:5a:a3:
2a:bb:83:29:dc:aa:ca:eb:76:ca:a6:b7:3d:f3:da:
e2:5a:e4:61:d5:b1:09:fb:6e:64:76:e1:66:c2:5d:
d5:b9:40:63:d0:be:ff:3f:ff:fc:14:6d:ab:43:ad:
30:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:5E:2E:1D:CB:BE:22:FF:18:53:33:8F:71:CD:00:93:42:E9:66:FE
X509v3 Authority Key Identifier:
keyid:5F:31:3B:E9:18:28:48:AB:DC:81:17:CD:E2:A1:03:7F:D0:5F:8F:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dd92f04e17c84c39ce37b3e765b1e0b50fafe64c.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/58669d13-dbd2-448f-8616-af9319be2baf/ba5b0bbdbaf2cfd0d7549478a3e6f05d8fcbea3c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/58669d13-dbd2-448f-8616-af9319be2baf/dd92f04e17c84c39ce37b3e765b1e0b50fafe64c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.59.64.0/22
Signature Algorithm: sha256WithRSAEncryption
5b:08:44:d2:b7:b7:eb:80:95:52:08:17:85:d8:27:80:27:26:
f1:86:eb:82:26:c1:20:c3:11:f1:ac:ad:a3:89:0a:0e:20:a5:
1e:5f:c4:36:de:22:78:61:91:47:38:ac:ab:21:ed:d2:9c:65:
a9:a6:c7:0c:99:07:48:3b:0a:ec:6a:e7:2f:30:45:3e:41:01:
da:e3:dd:af:97:8b:49:aa:a0:b6:c4:d2:e3:fc:15:27:6f:59:
63:57:f5:db:13:ba:29:f9:e4:16:57:d1:5b:94:7f:36:d5:e1:
ce:a9:fa:b3:50:a0:df:8d:c6:52:ff:a8:2f:6c:7d:98:86:13:
ff:fb:0e:0b:9a:10:a0:93:35:c4:1e:8d:14:16:81:83:8f:ea:
da:9c:f7:5d:c6:bc:38:bd:72:18:7c:60:b2:08:97:5d:38:76:
1e:a5:0f:20:5e:90:3b:1c:63:30:bc:12:6d:52:22:f4:b3:d6:
35:9e:81:00:0e:82:a8:05:2f:a3:36:13:00:94:8b:42:4d:54:
1b:74:98:ae:01:2a:6b:96:15:23:8a:1a:8a:3d:f2:1b:19:26:
e3:36:0e:1e:b3:a2:93:e1:cd:0b:0c:6f:d4:39:5e:3b:01:f4:
cf:4e:5e:f0:9f:64:bf:0b:04:71:03:b8:47:2e:ae:36:3c:07:
9d:03:32:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:35 2024 by rpki-client on console-ams.rpki-client.org