Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7d48c231-5123-4237-96c2-e2e3b41b58aa/4ac41b176c4d69d95c705684a533649f29fe4b4d.roa
File: 4ac41b176c4d69d95c705684a533649f29fe4b4d.roa (raw, json)
Hash identifier: vqLVJ8IRE5C6hp6RMBCbpgNzfyh1RIOlIfl3kmv03ho=
Subject key identifier: DC:E9:C4:DC:E9:DE:2F:7B:28:85:48:B5:7F:76:74:CD:79:1B:F4:AA
Certificate issuer: /CN=79aa997c3add235597a12ab7bfcd7908569d5f30
Certificate serial: 0D6C52
Authority key identifier: 79:57:67:3E:6A:82:19:69:11:89:9E:C0:97:BB:FF:E6:51:A1:02:43
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/79aa997c3add235597a12ab7bfcd7908569d5f30.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/7d48c231-5123-4237-96c2-e2e3b41b58aa/4ac41b176c4d69d95c705684a533649f29fe4b4d.roa
Signing time: Wed 24 Mar 2021 14:34:09 +0000
ROA not before: Wed 24 Mar 2021 14:34:07 +0000
ROA not after: Tue 24 Mar 2026 14:34:07 +0000
asID: 27901
IP address blocks: 131.221.164.0/22 maxlen: 22
138.99.224.0/22 maxlen: 22
167.250.52.0/22 maxlen: 22
170.82.188.0/22 maxlen: 22
170.150.156.0/22 maxlen: 22
207.248.192.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 879698 (0xd6c52)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79aa997c3add235597a12ab7bfcd7908569d5f30
Validity
Not Before: Mar 24 14:34:07 2021 GMT
Not After : Mar 24 14:34:07 2026 GMT
Subject: CN=4ac41b176c4d69d95c705684a533649f29fe4b4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ed:04:62:51:e5:de:04:eb:1d:0d:cb:d5:44:
7b:8f:23:3d:fc:2c:c3:81:91:4a:4e:a5:fa:2c:ec:
94:53:25:59:ae:c4:3d:d3:51:4c:5c:1a:8d:d2:de:
50:7a:41:47:67:5e:bd:5c:3b:04:e7:5d:2a:42:2b:
30:95:e5:21:db:1b:47:72:3f:ea:a8:02:08:46:48:
4b:cc:23:f5:cb:56:06:9b:7e:82:ca:d9:31:6e:ba:
69:6b:4b:a7:ff:51:7f:01:4e:e9:55:4f:06:1b:3d:
00:f9:50:58:48:09:98:4a:bd:cd:2e:7a:a2:76:ea:
11:cd:b8:83:f4:98:0d:fc:af:85:f4:6f:b8:07:2a:
b1:a8:34:89:39:52:66:9d:21:fc:1e:1c:6d:44:ab:
0b:12:66:21:ae:b0:b3:de:b3:ae:16:60:e0:9e:b2:
be:e7:63:3d:84:58:74:70:0b:5c:37:b1:8a:04:9a:
d2:d0:44:f6:96:c6:d4:92:e4:92:82:ae:e9:23:3d:
89:7f:db:ed:b3:b7:ab:9c:a3:43:44:24:b7:99:32:
ec:97:d4:40:fb:11:a0:e9:0b:47:54:b4:48:63:a6:
27:17:58:12:1c:1e:65:fa:33:7b:15:98:45:9d:9b:
e5:66:5e:bc:08:eb:73:4a:d1:3a:ed:06:48:8a:7c:
fb:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:E9:C4:DC:E9:DE:2F:7B:28:85:48:B5:7F:76:74:CD:79:1B:F4:AA
X509v3 Authority Key Identifier:
keyid:79:57:67:3E:6A:82:19:69:11:89:9E:C0:97:BB:FF:E6:51:A1:02:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/79aa997c3add235597a12ab7bfcd7908569d5f30.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7d48c231-5123-4237-96c2-e2e3b41b58aa/4ac41b176c4d69d95c705684a533649f29fe4b4d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/7d48c231-5123-4237-96c2-e2e3b41b58aa/79aa997c3add235597a12ab7bfcd7908569d5f30.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.221.164.0/22
138.99.224.0/22
167.250.52.0/22
170.82.188.0/22
170.150.156.0/22
207.248.192.0/19
Signature Algorithm: sha256WithRSAEncryption
75:4f:fe:b5:d7:c5:da:27:a1:a7:45:e4:c3:d0:e0:15:33:41:
9a:97:ef:76:ed:e4:45:9f:c7:c2:41:47:e5:08:c4:ef:26:01:
25:45:be:86:c4:a3:a1:cd:b3:c6:43:22:9f:35:36:11:4d:a3:
50:0e:d9:b3:8d:09:e6:fc:4d:98:52:9b:f2:00:1c:9a:f7:00:
c7:ec:2d:80:38:f5:18:57:fa:b7:5f:73:e4:14:aa:64:b6:b1:
40:c6:5a:48:8f:2f:36:37:e0:5f:28:1e:ae:e0:70:67:89:72:
7d:9f:7d:34:0c:04:80:af:56:a5:cd:9b:9e:da:2c:ac:e4:45:
8b:07:c2:2a:ca:c9:f7:03:3d:6d:77:8f:f1:75:10:6a:4b:e9:
a4:1a:a9:ce:1c:57:08:6c:b9:29:13:4a:9e:27:cd:bb:fc:b0:
79:07:f3:22:c2:ba:a8:e0:d9:94:e4:92:35:02:5e:f4:e2:a2:
7d:4c:dd:1f:9d:a6:be:29:7c:7b:5d:cb:b4:3e:b7:f2:ad:0a:
5d:a6:a2:8e:58:bb:72:b2:ef:fb:da:75:b1:76:8b:f9:84:de:
14:d0:0e:2f:2d:f7:a2:32:64:7d:d8:94:74:6e:79:d4:92:58:
7b:90:3d:50:82:aa:03:7d:c7:82:62:9d:b6:1c:0b:36:3b:43:
0c:72:34:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:39 2024 by rpki-client on console-ams.rpki-client.org