Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/765275f9-87e2-4136-b464-167e9e51e902/1d1df37b70cffa29d05e3ca3f6d2fe633590f381.roa
File: 1d1df37b70cffa29d05e3ca3f6d2fe633590f381.roa (raw, json)
Hash identifier: xjSYEIxshJEAF84Hrd44bF8fTGbtq/LC96zTl+fvIGM=
Subject key identifier: 64:A2:B4:D9:DF:43:89:B1:31:4B:03:F8:34:FC:CD:71:D4:C8:5F:B3
Certificate issuer: /CN=cf47512a1a6566f37a0da36f74206b83a801d6d9
Certificate serial: 0DA103
Authority key identifier: 8C:0B:F1:D7:52:CE:4E:D9:E2:40:D4:EF:48:0F:BE:71:DB:DD:80:5A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cf47512a1a6566f37a0da36f74206b83a801d6d9.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/765275f9-87e2-4136-b464-167e9e51e902/1d1df37b70cffa29d05e3ca3f6d2fe633590f381.roa
Signing time: Wed 24 Mar 2021 14:30:59 +0000
ROA not before: Wed 24 Mar 2021 14:30:58 +0000
ROA not after: Tue 24 Mar 2026 14:30:58 +0000
asID: 61493
IP address blocks: 131.255.4.0/22 maxlen: 24
168.205.92.0/22 maxlen: 24
170.78.72.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 893187 (0xda103)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf47512a1a6566f37a0da36f74206b83a801d6d9
Validity
Not Before: Mar 24 14:30:58 2021 GMT
Not After : Mar 24 14:30:58 2026 GMT
Subject: CN=1d1df37b70cffa29d05e3ca3f6d2fe633590f381
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:11:57:c7:7c:cc:b0:ec:a8:e7:d2:8e:9b:72:
dd:f9:01:32:ef:e6:e6:9c:03:54:69:70:18:a5:66:
8f:5e:87:32:01:ae:2f:63:f1:4d:f0:34:a6:e7:58:
50:f6:9d:cd:a7:2a:35:84:08:9f:92:a5:b7:c1:47:
20:6a:25:f1:06:cb:32:8e:85:86:75:a5:a0:03:e7:
ff:64:04:7c:25:02:cc:9e:51:0d:c0:88:d1:f9:e5:
3a:28:9a:7d:99:a1:50:80:03:1f:bc:8d:a5:87:48:
f9:01:4e:e0:fa:37:67:6a:8d:51:ce:ea:0e:0b:75:
6f:94:de:4e:ce:f7:ca:e5:25:c1:74:1f:15:1b:97:
4f:26:aa:72:78:8a:c9:62:c1:7f:0d:64:ea:bf:a4:
45:08:d7:6e:83:de:57:fb:e9:ee:f2:78:5f:43:1b:
62:0c:60:40:f2:af:90:7e:5e:55:e1:80:2a:c5:43:
47:15:98:f7:67:96:da:1d:b1:3d:47:c3:52:a9:f4:
7f:24:a6:47:a5:3c:91:0a:e2:76:8f:66:83:ea:62:
30:0a:3c:09:cb:86:3b:57:1c:96:b8:ee:11:81:bf:
7a:29:5b:f4:e8:79:c5:c1:95:9b:ab:6a:64:b1:a3:
6a:31:20:9d:85:fa:28:47:d8:37:c2:73:e1:be:6e:
a1:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:A2:B4:D9:DF:43:89:B1:31:4B:03:F8:34:FC:CD:71:D4:C8:5F:B3
X509v3 Authority Key Identifier:
keyid:8C:0B:F1:D7:52:CE:4E:D9:E2:40:D4:EF:48:0F:BE:71:DB:DD:80:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cf47512a1a6566f37a0da36f74206b83a801d6d9.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/765275f9-87e2-4136-b464-167e9e51e902/1d1df37b70cffa29d05e3ca3f6d2fe633590f381.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/765275f9-87e2-4136-b464-167e9e51e902/cf47512a1a6566f37a0da36f74206b83a801d6d9.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.255.4.0/22
168.205.92.0/22
170.78.72.0/22
Signature Algorithm: sha256WithRSAEncryption
72:9d:61:87:bc:4f:b4:5a:43:30:b7:c9:5b:09:5e:76:99:3e:
68:2e:0a:f3:25:50:cd:ed:28:39:ce:18:e2:95:be:90:ba:86:
12:60:ca:a7:0f:f4:2b:42:fa:b8:bf:55:f0:6c:09:f0:35:fc:
08:d6:63:22:62:6b:ee:54:a2:d3:51:1d:7a:03:62:1a:b5:19:
88:5e:fc:2d:f6:dc:93:6c:cc:09:39:ac:a7:c8:85:5c:bc:81:
e7:96:69:f9:6c:ea:cd:c2:bb:c2:e3:68:30:01:cf:f6:cd:5c:
53:8f:99:d7:3f:ba:13:3d:75:11:da:f2:68:67:71:fc:db:6b:
b2:fb:62:1a:4f:01:5c:ee:3a:86:9a:c8:25:f4:cc:55:e3:6c:
7d:5b:22:aa:b4:43:74:9c:ba:55:87:ee:18:eb:46:c4:70:2f:
31:3a:c5:b5:03:82:8b:7d:83:a3:e5:31:30:e6:17:47:51:76:
5d:ac:ec:c2:3d:f4:44:d4:ef:8a:02:e4:f9:ac:8d:c7:eb:f2:
02:b4:ca:68:09:fd:9d:b4:26:1a:8e:30:c0:3d:42:42:c6:d7:
ce:80:1d:a0:91:5a:b7:94:c5:1e:4c:5d:df:cd:0a:75:7a:cd:
48:80:49:00:7c:91:ec:76:91:d9:45:2a:18:b3:46:03:cc:bd:
22:91:3a:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:22 2024 by rpki-client on console-fra.rpki-client.org