Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64361348-2cfd-476c-9ee2-d9c959ddd082/3b07e4a139e6b9612ca7024682ea7ee8954349b9.roa
File: 3b07e4a139e6b9612ca7024682ea7ee8954349b9.roa (raw, json)
Hash identifier: 6AIk1ZY14f7IAV0AIfIarudKfLJt834GDre7vZXGybM=
Subject key identifier: CF:69:28:24:25:EE:CD:AA:7A:16:92:AB:D9:04:9C:FA:09:1E:0B:37
Certificate issuer: /CN=61678bdd44acebd11355abc32f79a39e0ab6e968
Certificate serial: 2048C7
Authority key identifier: 53:0E:FD:DD:FD:ED:EC:BC:CC:76:B3:41:B4:AF:50:A5:DA:0F:08:DC
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/61678bdd44acebd11355abc32f79a39e0ab6e968.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/64361348-2cfd-476c-9ee2-d9c959ddd082/3b07e4a139e6b9612ca7024682ea7ee8954349b9.roa
Signing time: Mon 12 Jun 2023 16:15:38 +0000
ROA not before: Sun 11 Jun 2023 16:15:37 +0000
ROA not after: Thu 12 Jun 2025 16:15:37 +0000
asID: 263824
IP address blocks: 138.185.76.0/22 maxlen: 24
170.254.16.0/22 maxlen: 24
2803:9a40::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2115783 (0x2048c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61678bdd44acebd11355abc32f79a39e0ab6e968
Validity
Not Before: Jun 11 16:15:37 2023 GMT
Not After : Jun 12 16:15:37 2025 GMT
Subject: CN=3b07e4a139e6b9612ca7024682ea7ee8954349b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:10:90:fb:ba:57:a8:13:3b:9c:56:4e:bf:7c:
01:cb:f9:cf:f6:82:ce:2c:61:e3:da:90:d7:ce:04:
de:32:a4:01:a3:06:9c:df:dd:90:36:9e:be:9f:26:
fb:50:f7:53:5b:7c:d7:ef:b4:27:e9:18:f0:ae:4c:
f3:c6:9e:ad:e3:65:d6:4c:23:f2:d7:d6:97:89:35:
97:a7:d4:35:ea:d4:7b:01:d3:13:a2:6b:87:f5:c4:
a7:0e:28:1c:e9:78:11:3e:65:b2:38:d9:4d:84:06:
02:50:76:e6:4e:da:1e:07:e0:f7:b1:86:68:23:f9:
28:b8:84:0a:c3:c4:61:c2:84:61:74:ac:88:c9:83:
5d:14:49:e5:a0:7d:c4:cf:d3:55:73:88:cb:0f:a5:
8b:7b:74:10:dc:70:3b:8f:94:dd:05:d3:4d:df:01:
82:ad:44:b8:41:16:25:ee:8a:aa:4e:2c:04:9f:66:
ab:da:59:4c:9c:3c:df:09:8e:51:af:f3:fb:7e:7c:
2e:e8:44:5e:60:9b:8d:99:9f:81:3e:91:63:fd:ed:
1b:bb:9c:36:47:c2:f7:eb:71:d9:a7:8b:82:a6:a6:
e5:60:17:9b:d4:2b:b4:55:c2:f7:ea:0c:5d:8a:96:
ff:b2:29:21:0a:23:65:d6:f9:43:cb:78:1f:37:73:
a4:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:69:28:24:25:EE:CD:AA:7A:16:92:AB:D9:04:9C:FA:09:1E:0B:37
X509v3 Authority Key Identifier:
keyid:53:0E:FD:DD:FD:ED:EC:BC:CC:76:B3:41:B4:AF:50:A5:DA:0F:08:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/61678bdd44acebd11355abc32f79a39e0ab6e968.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64361348-2cfd-476c-9ee2-d9c959ddd082/3b07e4a139e6b9612ca7024682ea7ee8954349b9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/64361348-2cfd-476c-9ee2-d9c959ddd082/61678bdd44acebd11355abc32f79a39e0ab6e968.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.185.76.0/22
170.254.16.0/22
IPv6:
2803:9a40::/32
Signature Algorithm: sha256WithRSAEncryption
d3:6a:cb:54:54:6b:68:bc:07:1e:94:6e:32:94:8b:c0:e7:44:
29:ed:3f:59:1a:0f:16:b9:74:28:e1:bc:a8:19:89:95:1e:03:
58:de:f9:04:0f:46:93:f7:85:1a:7a:16:cc:6f:a5:fb:c2:bd:
31:73:2a:e0:96:00:cb:18:89:7d:fd:e2:aa:09:fd:80:45:db:
8a:0c:f8:3c:87:d2:10:6d:fc:db:bc:74:48:53:36:05:b0:1e:
e2:fc:9d:61:cf:4e:65:17:e5:aa:0a:94:13:71:34:79:5c:56:
16:33:84:6d:f3:ff:71:4b:7a:17:9d:2a:5c:b9:42:b3:5b:1b:
b5:07:cf:64:6c:b1:7a:89:47:40:55:f0:b5:4e:84:88:7e:1a:
e1:b5:7f:37:9d:8e:47:4a:ac:fa:e1:3b:49:bf:11:52:66:0b:
95:d5:cb:98:d0:00:41:8a:9b:12:f5:a9:41:e0:1c:a4:18:02:
b6:95:63:90:67:a5:43:7f:59:60:15:15:02:66:28:72:7f:54:
a7:5d:42:42:54:23:1b:90:d0:81:7e:3f:bb:0b:73:ba:58:52:
16:6f:68:ec:0b:c8:66:da:f1:09:1d:63:24:2d:92:b9:0b:02:
7e:2e:37:6d:dc:a1:9a:8b:0b:36:d5:a6:02:bf:c3:61:be:ee:
8d:02:22:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:36 2024 by rpki-client on console-ams.rpki-client.org