Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5d81f6cd-fc81-491f-bb92-38db7086c322/1c03842ab194cfadc222b836532285b481041000.roa
File: 1c03842ab194cfadc222b836532285b481041000.roa (raw, json)
Hash identifier: RK5j1POgSaWbc0MwIau0lIJp8AM37pzlLPa+76+RG2E=
Subject key identifier: 44:C4:BF:2C:94:19:6E:F9:96:6E:D0:ED:38:9E:1C:C2:BB:26:64:A5
Certificate issuer: /CN=4393f7432846896d18bc47956f7dce0ffc072b54
Certificate serial: 0C3526
Authority key identifier: C5:62:86:91:75:C8:DB:6E:23:A2:5E:89:B8:61:A8:76:6D:95:57:B9
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4393f7432846896d18bc47956f7dce0ffc072b54.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5d81f6cd-fc81-491f-bb92-38db7086c322/1c03842ab194cfadc222b836532285b481041000.roa
Signing time: Wed 24 Mar 2021 14:45:29 +0000
ROA not before: Wed 24 Mar 2021 14:45:29 +0000
ROA not after: Tue 24 Mar 2026 14:45:29 +0000
asID: 138609
IP address blocks: 131.221.152.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 800038 (0xc3526)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4393f7432846896d18bc47956f7dce0ffc072b54
Validity
Not Before: Mar 24 14:45:29 2021 GMT
Not After : Mar 24 14:45:29 2026 GMT
Subject: CN=1c03842ab194cfadc222b836532285b481041000
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:df:09:00:e3:e7:fa:0f:a0:bd:40:b7:65:49:
cf:51:6e:89:5b:a7:b8:8d:fe:f2:f6:bf:eb:12:8a:
2c:1a:a8:b2:2d:2a:51:68:b7:6a:a7:0f:fa:e9:f2:
6b:45:8a:0e:8a:28:b7:c9:d4:8f:4b:3f:77:c0:69:
15:63:e1:f5:14:d2:fb:a2:d2:e0:25:c2:02:32:45:
33:4b:e0:40:a3:05:06:4a:03:03:98:7c:05:44:fb:
cb:2f:9d:1d:27:84:16:94:6f:4e:95:40:55:8b:a8:
54:81:90:c0:f2:d7:b4:ae:91:88:4d:40:e4:81:36:
db:72:56:b0:29:de:b0:07:2b:1e:23:19:e9:f0:a0:
a4:38:27:60:ce:49:89:bd:24:05:52:2e:cb:94:d9:
ff:5b:19:21:6f:6f:60:08:c9:46:6f:ff:d5:52:16:
e1:30:4f:e4:f3:40:51:a2:74:7b:4f:95:7b:5b:ef:
e6:48:b8:27:ee:3a:07:04:5c:94:df:e4:56:97:83:
cc:7b:aa:4d:01:1f:28:f9:39:6c:aa:29:74:6e:31:
22:83:11:e0:08:4b:23:5d:76:96:de:5e:13:85:7b:
a5:b8:19:a1:4f:58:cc:03:71:fd:41:4b:8c:7c:84:
b3:ae:97:46:6d:6d:30:5e:d0:91:db:8b:db:87:79:
9d:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:C4:BF:2C:94:19:6E:F9:96:6E:D0:ED:38:9E:1C:C2:BB:26:64:A5
X509v3 Authority Key Identifier:
keyid:C5:62:86:91:75:C8:DB:6E:23:A2:5E:89:B8:61:A8:76:6D:95:57:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4393f7432846896d18bc47956f7dce0ffc072b54.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5d81f6cd-fc81-491f-bb92-38db7086c322/1c03842ab194cfadc222b836532285b481041000.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/5d81f6cd-fc81-491f-bb92-38db7086c322/4393f7432846896d18bc47956f7dce0ffc072b54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.221.152.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:41:09:2c:02:6f:12:f8:ee:af:5c:9f:c7:bf:f2:39:0f:80:
05:a1:17:e1:5e:e8:e7:35:ce:67:2f:ca:f8:45:b6:71:05:f9:
56:df:c0:11:91:26:2c:b9:3f:49:96:c9:38:4d:41:9e:37:d0:
92:26:69:55:cd:37:32:70:9b:d2:2a:1d:90:45:c2:10:45:5b:
4b:82:77:f1:ef:fc:3b:c1:9d:5b:9a:16:62:ea:8c:21:e3:b7:
d4:dc:dc:63:c9:ec:44:9f:50:69:0f:b2:e4:36:8d:c1:06:57:
af:14:21:e8:ff:98:6b:ed:67:f9:d8:a7:e1:56:64:27:5b:d2:
47:0b:3a:50:3a:95:40:78:f5:34:10:bf:cd:94:11:d7:8e:5d:
ef:c0:31:72:75:de:e6:83:74:76:7e:1d:4b:25:79:f5:da:5e:
34:aa:ec:e9:2c:55:43:c8:be:e6:15:48:f4:e8:ad:52:32:d5:
c9:10:43:57:dc:be:b6:56:57:d0:d8:7b:3b:07:35:30:ae:94:
9a:98:f6:ca:a3:68:65:74:ae:8f:aa:91:e4:fd:a8:7a:b8:68:
1a:a2:74:45:1f:e4:8d:f7:03:cb:87:60:fe:ce:2a:c4:4a:37:
7e:f2:3f:33:4f:a7:5c:09:85:31:86:f3:af:94:c6:90:de:0a:
f2:63:12:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:20 2023 by rpki-client on console-fra.rpki-client.org