Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7ae23e18-d064-4323-bbc5-878ae16e18d3/6be576376c9808d644c582cc6e2496a0a82d0a94.roa
File: 6be576376c9808d644c582cc6e2496a0a82d0a94.roa (raw, json)
Hash identifier: gYRKpegUU5rHDmSHL2JsCXZ0BfAsBwZiWYlHtRHjFzY=
Subject key identifier: 2E:A0:17:BA:62:AF:EF:3C:33:19:80:72:59:79:EB:6C:70:9C:F2:A7
Certificate issuer: /CN=d644dc4f03e4edb1c47800a7f22ba12fcb5be9bf
Certificate serial: 03FE89
Authority key identifier: 3D:15:9A:1B:F8:45:30:25:C9:F9:AF:1C:6C:1B:80:45:B5:55:52:AE
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d644dc4f03e4edb1c47800a7f22ba12fcb5be9bf.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/7ae23e18-d064-4323-bbc5-878ae16e18d3/6be576376c9808d644c582cc6e2496a0a82d0a94.roa
Signing time: Wed 24 Mar 2021 14:32:10 +0000
ROA not before: Wed 24 Mar 2021 14:32:10 +0000
ROA not after: Tue 24 Mar 2026 14:32:10 +0000
asID: 265740
IP address blocks: 128.201.21.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 261769 (0x3fe89)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d644dc4f03e4edb1c47800a7f22ba12fcb5be9bf
Validity
Not Before: Mar 24 14:32:10 2021 GMT
Not After : Mar 24 14:32:10 2026 GMT
Subject: CN=6be576376c9808d644c582cc6e2496a0a82d0a94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:02:8f:b5:e9:0b:13:93:9c:8f:85:91:de:93:
65:5a:1d:28:3e:36:2e:6e:32:de:9b:32:ef:b8:46:
88:6f:7c:97:85:f6:ed:be:1f:2e:08:c0:67:7d:06:
e1:8f:f8:9c:f7:6c:c4:1b:16:bc:4d:3f:6f:16:24:
46:3a:e8:46:f6:91:82:1d:7e:7c:e2:53:2c:53:36:
e5:fd:7c:2a:84:e4:c5:cd:99:bc:13:15:1b:5b:a0:
e4:ee:7e:77:d8:db:c8:96:48:f8:19:11:c3:91:f1:
5a:95:c8:7b:bc:91:5d:f1:b8:70:74:c6:52:f4:dd:
8c:12:92:12:7f:20:11:6c:a3:f2:53:a3:f6:f2:9d:
51:13:cd:cd:a7:f0:8f:7b:dc:b0:c7:8b:04:dd:b9:
25:af:33:73:d1:39:5e:93:8a:a7:f9:7e:7d:3d:3b:
f1:3d:99:30:59:b3:5e:25:0b:53:83:ab:09:54:03:
6c:64:74:5b:24:f7:59:73:70:53:8c:eb:2b:4f:42:
e1:3a:bb:7d:e7:44:7b:b5:01:e2:c3:8a:ee:d3:5c:
b3:0f:b4:e1:28:ad:78:60:3c:7b:c0:f6:cc:0b:fa:
92:a8:93:d2:17:3b:56:e5:90:d7:46:13:bd:b4:30:
13:2f:22:85:77:fa:50:95:d0:3c:b3:1a:12:18:4d:
6c:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:A0:17:BA:62:AF:EF:3C:33:19:80:72:59:79:EB:6C:70:9C:F2:A7
X509v3 Authority Key Identifier:
keyid:3D:15:9A:1B:F8:45:30:25:C9:F9:AF:1C:6C:1B:80:45:B5:55:52:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d644dc4f03e4edb1c47800a7f22ba12fcb5be9bf.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7ae23e18-d064-4323-bbc5-878ae16e18d3/6be576376c9808d644c582cc6e2496a0a82d0a94.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/7ae23e18-d064-4323-bbc5-878ae16e18d3/d644dc4f03e4edb1c47800a7f22ba12fcb5be9bf.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
128.201.21.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:1b:0e:bd:31:d8:3c:29:e3:fb:08:4d:70:22:58:b8:eb:d5:
27:50:77:54:6e:80:e4:75:14:3b:38:3c:68:6f:37:7f:dc:c5:
43:f5:41:da:82:7a:23:0b:a8:61:9d:ab:99:13:13:2b:74:d9:
ee:cb:67:7d:15:3a:8b:01:4a:b2:2c:c3:9e:ce:2e:0a:49:f4:
8a:1d:c3:2e:b1:5c:a6:dc:2a:60:4c:a6:b6:2d:5e:34:86:3e:
9a:b1:f9:50:7b:c4:2d:9e:65:5b:46:ce:56:c7:c4:13:90:36:
83:b6:00:04:40:51:aa:dd:a2:7e:96:45:75:c9:47:b0:c0:44:
cf:20:15:16:c0:ef:f0:0c:b5:33:00:52:76:14:12:71:06:a0:
5d:97:2b:c7:bd:ec:bb:d8:87:b9:ac:66:e1:54:e1:dd:51:0b:
5c:43:00:7d:b6:a7:73:d3:ff:99:50:89:3c:de:e6:4f:d5:6e:
76:49:43:6c:88:06:2a:7d:e3:b1:25:5e:2a:e3:b9:5d:01:87:
e9:97:38:de:fd:a0:bd:5a:41:ed:70:2e:4a:92:20:a8:93:c3:
39:f6:2a:74:8c:67:e0:bc:f8:f5:9d:b3:9a:39:fb:c8:d7:18:
24:79:bf:04:50:a7:d2:24:47:a9:df:f0:1d:5a:76:ea:b5:8c:
7f:05:9e:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:39 2024 by rpki-client on console-ams.rpki-client.org