Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/42ffd7eefdfcc167962f4a9c179babab536b5caa.roa
File: 42ffd7eefdfcc167962f4a9c179babab536b5caa.roa (raw, json)
Hash identifier: g+gip03wyNTZ9023hCn1O+VT+/Kc3wfpN3Ott/4+X4o=
Subject key identifier: 42:FB:18:93:37:71:A2:E6:16:AA:D6:6F:71:A6:AE:14:A8:BB:0A:B3
Certificate issuer: /CN=21124edeafd78a1e2f1ca38bd489cef8bd20ae73
Certificate serial: 0D0B71
Authority key identifier: F8:FE:73:47:5C:7B:C8:14:48:1C:6C:FF:BD:F1:19:77:7E:0B:D9:5E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/21124edeafd78a1e2f1ca38bd489cef8bd20ae73.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/42ffd7eefdfcc167962f4a9c179babab536b5caa.roa
Signing time: Wed 24 Mar 2021 14:29:20 +0000
ROA not before: Wed 24 Mar 2021 14:29:18 +0000
ROA not after: Tue 24 Mar 2026 14:29:18 +0000
asID: 61494
IP address blocks: 138.204.244.0/24 maxlen: 24
2001:13c7:6016::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 854897 (0xd0b71)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21124edeafd78a1e2f1ca38bd489cef8bd20ae73
Validity
Not Before: Mar 24 14:29:18 2021 GMT
Not After : Mar 24 14:29:18 2026 GMT
Subject: CN=42ffd7eefdfcc167962f4a9c179babab536b5caa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:cc:9c:06:32:20:d5:8a:cc:00:07:a7:df:1c:
ff:25:5c:ea:c5:42:9d:24:b0:bb:f6:82:7e:4e:ae:
c5:d0:26:a2:94:18:f6:8d:ee:f3:66:3c:50:24:18:
0e:9c:db:84:2d:e9:ce:ec:13:87:c6:80:68:af:39:
d7:9c:91:4c:16:39:cb:7c:bf:19:ea:82:7e:ad:3e:
38:9d:ce:43:90:cd:e2:55:92:7c:f7:cd:6f:57:92:
ae:12:86:10:65:3e:97:cc:a5:12:20:a6:cf:72:64:
34:30:40:db:b2:b9:67:a5:0d:e9:27:76:ae:6e:c3:
b4:b3:48:86:a2:42:ba:77:28:77:b0:37:c3:64:d7:
e6:3e:56:68:73:19:3e:82:01:f2:f0:ad:a0:0c:f1:
fa:90:c1:d4:2d:7a:70:97:1b:08:01:c8:05:63:18:
3d:86:bf:e9:b5:79:78:bf:85:60:5b:68:74:88:79:
32:ac:8b:9a:65:1e:c8:3a:e2:65:53:f7:52:14:92:
6a:15:b9:59:33:d0:87:0f:fb:b8:76:ee:23:c5:c4:
a5:c0:da:4c:60:e8:44:8d:a0:f2:43:8d:f6:8c:4a:
8c:45:f0:29:73:50:89:a5:ca:11:dc:1f:3e:60:6b:
98:51:29:19:61:97:4e:bf:64:66:7f:2e:56:36:5e:
fb:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:FB:18:93:37:71:A2:E6:16:AA:D6:6F:71:A6:AE:14:A8:BB:0A:B3
X509v3 Authority Key Identifier:
keyid:F8:FE:73:47:5C:7B:C8:14:48:1C:6C:FF:BD:F1:19:77:7E:0B:D9:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/21124edeafd78a1e2f1ca38bd489cef8bd20ae73.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/42ffd7eefdfcc167962f4a9c179babab536b5caa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/21124edeafd78a1e2f1ca38bd489cef8bd20ae73.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.204.244.0/24
IPv6:
2001:13c7:6016::/48
Signature Algorithm: sha256WithRSAEncryption
09:9b:90:7b:4b:b7:68:b3:c5:4e:82:41:63:b0:0f:7c:b8:40:
38:7d:e1:27:33:f6:05:e4:63:4d:c9:bd:ca:b1:ac:02:fa:43:
0d:8d:47:6d:35:62:18:b1:7b:c3:c4:a4:25:6f:50:d0:7f:7e:
ac:3f:6a:2c:4c:f6:e9:4d:a1:87:da:07:3f:20:62:76:ec:0c:
92:e4:06:ac:2b:ea:9f:9c:29:1d:c6:0b:a0:06:d3:70:53:a3:
20:82:3c:28:ab:95:dd:e4:cc:23:24:8c:e6:65:dd:ce:94:f3:
fd:de:93:c4:b6:8f:ca:f6:43:6e:aa:3f:23:8f:92:79:39:6d:
66:a4:d3:ca:e6:b5:00:29:9e:d7:29:dc:20:2e:0d:52:44:45:
49:f1:57:38:fb:6d:f2:2f:d0:bc:1a:bc:db:f3:8d:19:db:74:
92:12:f0:d5:2e:ca:dc:c8:86:11:45:01:e0:fd:20:8b:48:6f:
b9:a8:81:ef:3a:72:84:80:f6:20:81:b3:b1:38:df:18:da:4e:
7c:a9:d1:c4:f1:8b:68:b9:c6:ec:d3:43:16:59:52:5a:96:8a:
c5:d0:47:02:c3:70:89:d7:9c:aa:b8:04:17:7c:5b:31:df:22:
28:41:d5:15:e9:70:dc:82:67:69:f8:8d:cc:5d:b1:cb:c6:6c:
e6:d2:37:5d
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIDDQtxMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDIx
MTI0ZWRlYWZkNzhhMWUyZjFjYTM4YmQ0ODljZWY4YmQyMGFlNzMwHhcNMjEwMzI0
MTQyOTE4WhcNMjYwMzI0MTQyOTE4WjAzMTEwLwYDVQQDEyg0MmZmZDdlZWZkZmNj
MTY3OTYyZjRhOWMxNzliYWJhYjUzNmI1Y2FhMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAjsycBjIg1YrMAAen3xz/JVzqxUKdJLC79oJ+Tq7F0CailBj2
je7zZjxQJBgOnNuELenO7BOHxoBorznXnJFMFjnLfL8Z6oJ+rT44nc5DkM3iVZJ8
981vV5KuEoYQZT6XzKUSIKbPcmQ0MEDbsrlnpQ3pJ3aubsO0s0iGokK6dyh3sDfD
ZNfmPlZocxk+ggHy8K2gDPH6kMHULXpwlxsIAcgFYxg9hr/ptXl4v4VgW2h0iHky
rIuaZR7IOuJlU/dSFJJqFblZM9CHD/u4du4jxcSlwNpMYOhEjaDyQ432jEqMRfAp
c1CJpcoR3B8+YGuYUSkZYZdOv2Rmfy5WNl77KQIDAQABo4ICbDCCAmgwHQYDVR0O
BBYEFEL7GJM3caLmFqrWb3GmrhSouwqzMB8GA1UdIwQYMBaAFPj+c0dce8gUSBxs
/73xGXd+C9leMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMjExMjRl
ZGVhZmQ3OGExZTJmMWNhMzhiZDQ4OWNlZjhiZDIwYWU3My5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNjU1MGFlNDAtOGY4ZC00Nzc5LTllMjctODNiMWJk
MzAyNmUxLzQyZmZkN2VlZmRmY2MxNjc5NjJmNGE5YzE3OWJhYmFiNTM2YjVjYWEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy82NTUwYWU0MC04ZjhkLTQ3NzktOWUyNy04M2Ix
YmQzMDI2ZTEvMjExMjRlZGVhZmQ3OGExZTJmMWNhMzhiZDQ4OWNlZjhiZDIwYWU3
My5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAwBggrBgEFBQcBBwEB/wQh
MB8wDAQCAAEwBgMEAIrM9DAPBAIAAjAJAwcAIAETx2AWMA0GCSqGSIb3DQEBCwUA
A4IBAQAJm5B7S7dos8VOgkFjsA98uEA4feEnM/YF5GNNyb3KsawC+kMNjUdtNWIY
sXvDxKQlb1DQf36sP2osTPbpTaGH2gc/IGJ27AyS5AasK+qfnCkdxgugBtNwU6Mg
gjwoq5Xd5MwjJIzmZd3OlPP93pPEto/K9kNuqj8jj5J5OW1mpNPK5rUAKZ7XKdwg
Lg1SREVJ8Vc4+23yL9C8Grzb840Z23SSEvDVLsrcyIYRRQHg/SCLSG+5qIHvOnKE
gPYggbOxON8Y2k58qdHE8Ytoucbs00MWWVJalorF0EcCw3CJ15yquAQXfFsx3yIo
QdUV6XDcgmdp+I3MXbHLxmzm0jdd
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:46 2024 by rpki-client on console-fra.rpki-client.org