Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/44985eae3db7efca23cd9ba8968949cb415f06ea.roa
File: 44985eae3db7efca23cd9ba8968949cb415f06ea.roa (raw, json)
Hash identifier: w0IqQ7da3Es/1hzSvekZwRzW4sJIwAk2EknQTtWIeFM=
Subject key identifier: 10:10:FF:DB:02:BB:13:DB:06:8E:82:85:D4:77:CE:15:9B:95:35:9D
Certificate issuer: /CN=21124edeafd78a1e2f1ca38bd489cef8bd20ae73
Certificate serial: 24C2B4
Authority key identifier: F8:FE:73:47:5C:7B:C8:14:48:1C:6C:FF:BD:F1:19:77:7E:0B:D9:5E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/21124edeafd78a1e2f1ca38bd489cef8bd20ae73.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/44985eae3db7efca23cd9ba8968949cb415f06ea.roa
Signing time: Mon 30 Oct 2023 12:07:00 +0000
ROA not before: Mon 30 Oct 2023 12:06:35 +0000
ROA not after: Thu 30 Oct 2025 12:06:35 +0000
asID: 64104
IP address blocks: 201.182.137.0/24 maxlen: 24
138.204.253.0/24 maxlen: 24
2001:13c7:601f::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2409140 (0x24c2b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21124edeafd78a1e2f1ca38bd489cef8bd20ae73
Validity
Not Before: Oct 30 12:06:35 2023 GMT
Not After : Oct 30 12:06:35 2025 GMT
Subject: CN=44985eae3db7efca23cd9ba8968949cb415f06ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:5b:26:72:30:69:57:48:1a:e4:6f:c0:c4:f0:
ec:34:f4:a3:4c:4f:90:47:3b:7a:67:28:e9:e0:55:
36:24:85:88:0d:50:16:3b:61:20:3d:2a:19:97:6c:
3c:33:48:44:23:4b:0b:7f:dd:c4:bf:41:55:c8:8a:
5f:de:73:c4:44:16:b4:5a:ed:2d:ee:2b:ba:33:8c:
86:9a:52:b7:45:64:b8:ad:d0:e2:ff:88:a9:90:00:
32:72:8f:f3:01:c0:a1:a9:f1:37:82:e3:70:5e:03:
24:3f:34:ee:38:00:22:e5:27:7b:c4:ae:38:80:9c:
46:61:98:17:32:6d:fe:59:52:3c:41:d6:4f:17:f2:
72:d6:5a:3f:66:67:ff:9e:80:27:86:88:f5:99:bd:
78:ce:31:b5:23:58:ab:b4:06:c5:1d:69:33:5a:1d:
ef:96:71:f9:1e:45:67:01:65:2a:22:39:70:4f:56:
a6:8b:1b:aa:d6:0d:ce:66:0e:a4:99:6f:d2:db:15:
d9:44:ec:88:85:57:9b:2d:db:e2:03:ad:64:4c:7d:
ce:25:e5:d9:02:f6:cd:22:99:9e:04:c7:7f:55:9c:
85:8f:5b:68:d9:82:29:f8:cc:f0:38:8d:e0:65:26:
e6:42:42:51:8d:45:35:52:00:d5:42:a1:2d:20:50:
9e:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:10:FF:DB:02:BB:13:DB:06:8E:82:85:D4:77:CE:15:9B:95:35:9D
X509v3 Authority Key Identifier:
keyid:F8:FE:73:47:5C:7B:C8:14:48:1C:6C:FF:BD:F1:19:77:7E:0B:D9:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/21124edeafd78a1e2f1ca38bd489cef8bd20ae73.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/44985eae3db7efca23cd9ba8968949cb415f06ea.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/21124edeafd78a1e2f1ca38bd489cef8bd20ae73.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.204.253.0/24
201.182.137.0/24
IPv6:
2001:13c7:601f::/48
Signature Algorithm: sha256WithRSAEncryption
44:3d:2a:d0:88:09:63:5d:2d:5a:3f:d3:ec:a6:06:0b:eb:fc:
b2:ae:fc:79:0f:3f:bc:7e:f1:b8:d4:b6:f7:dd:06:0e:13:d7:
df:05:0e:7d:e0:c5:99:e1:2a:2e:5a:4e:45:50:96:64:86:6a:
a0:7e:5d:72:33:c9:a8:e9:89:6d:67:8d:24:1e:d7:21:61:a4:
d4:ed:bb:25:7d:03:43:3e:b5:62:f3:91:1c:cc:8b:a4:d3:45:
e7:f4:d6:98:00:1d:7b:4e:ea:ff:7b:83:4e:bf:02:9c:3b:a9:
91:26:2d:b6:72:c2:46:20:5d:7c:ac:94:e3:1e:cf:8d:73:34:
56:68:4d:4c:65:eb:dd:c3:24:9a:57:88:12:2c:6e:03:a9:b5:
d4:ed:82:99:ab:c8:c8:83:56:62:c8:8b:ff:8a:e1:81:4b:d7:
15:7f:56:b5:24:e6:cd:52:5b:50:95:7e:50:2d:77:6c:b9:da:
33:43:b0:5a:e0:ec:2b:b0:8f:4b:89:1f:75:61:5e:b1:6e:8f:
fd:2d:96:c4:06:5b:fc:61:05:a5:34:b4:07:87:61:a8:cd:72:
35:16:d8:5f:1c:db:7e:34:c7:c7:71:e0:ed:c3:40:df:1e:79:
2f:a5:10:4a:3c:c3:ee:11:ee:d2:fc:87:22:3f:15:b5:20:99:
58:58:62:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:37 2024 by rpki-client on console-ams.rpki-client.org