Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7d48c231-5123-4237-96c2-e2e3b41b58aa/dbb7ddc707fe4b630e61b2ae6467b241f4f02c86.roa
File: dbb7ddc707fe4b630e61b2ae6467b241f4f02c86.roa (raw, json)
Hash identifier: j+PqhrM+211ONZQSQQBcyC2l7V1uKcTeEy/RwJh+H+U=
Subject key identifier: 6B:4F:60:AE:DE:3A:DC:8F:9F:B9:FD:4B:03:92:05:34:65:4B:5E:AC
Certificate issuer: /CN=79aa997c3add235597a12ab7bfcd7908569d5f30
Certificate serial: 0D5BCE
Authority key identifier: 79:57:67:3E:6A:82:19:69:11:89:9E:C0:97:BB:FF:E6:51:A1:02:43
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/79aa997c3add235597a12ab7bfcd7908569d5f30.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/7d48c231-5123-4237-96c2-e2e3b41b58aa/dbb7ddc707fe4b630e61b2ae6467b241f4f02c86.roa
Signing time: Wed 24 Mar 2021 14:34:09 +0000
ROA not before: Wed 24 Mar 2021 14:34:07 +0000
ROA not after: Tue 24 Mar 2026 14:34:07 +0000
asID: 27901
IP address blocks: 131.221.164.0/22 maxlen: 24
138.99.224.0/22 maxlen: 24
167.250.52.0/22 maxlen: 24
207.248.192.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 875470 (0xd5bce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79aa997c3add235597a12ab7bfcd7908569d5f30
Validity
Not Before: Mar 24 14:34:07 2021 GMT
Not After : Mar 24 14:34:07 2026 GMT
Subject: CN=dbb7ddc707fe4b630e61b2ae6467b241f4f02c86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:61:2d:2d:32:1d:c0:70:08:5e:55:3a:d8:42:
d7:3d:bf:c6:3b:45:a3:6d:23:59:5f:ec:18:80:2f:
a8:c8:64:e9:c3:3e:2a:5f:b9:f5:9f:54:18:58:26:
e0:f9:38:67:2b:59:44:99:b0:53:02:97:f7:b1:50:
a7:7e:ad:b7:23:66:05:8d:35:d1:be:71:4a:b7:28:
b0:84:de:c4:11:e5:03:d0:da:15:a0:ba:67:46:ea:
63:2d:f8:40:ae:e1:fe:d1:b5:b3:ef:9b:a5:42:ce:
76:5e:ac:27:bd:be:c7:2d:74:79:6f:77:72:10:45:
91:8a:dc:f4:ab:8b:41:ba:b4:a1:ff:d7:be:f9:0b:
6a:15:9e:30:30:3e:ce:a8:25:73:46:c0:d7:9a:17:
94:10:88:89:21:ea:6b:fb:0a:f5:bd:f7:89:6c:3f:
ae:aa:4f:cd:19:55:b4:68:92:6e:70:17:dd:50:fc:
61:ca:c7:80:9c:e7:6f:71:8f:73:0d:c9:10:e6:01:
b1:90:62:9a:61:b1:a5:ca:89:6e:35:b6:ed:19:0b:
07:e5:b6:58:44:c3:51:8b:7d:09:ad:6d:61:34:cf:
09:67:fa:4b:b7:3c:d4:d2:d7:2d:55:8e:86:a9:be:
bf:18:50:1c:0a:ad:24:8b:fd:ac:a7:16:ef:01:98:
dc:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:4F:60:AE:DE:3A:DC:8F:9F:B9:FD:4B:03:92:05:34:65:4B:5E:AC
X509v3 Authority Key Identifier:
keyid:79:57:67:3E:6A:82:19:69:11:89:9E:C0:97:BB:FF:E6:51:A1:02:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/79aa997c3add235597a12ab7bfcd7908569d5f30.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7d48c231-5123-4237-96c2-e2e3b41b58aa/dbb7ddc707fe4b630e61b2ae6467b241f4f02c86.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/7d48c231-5123-4237-96c2-e2e3b41b58aa/79aa997c3add235597a12ab7bfcd7908569d5f30.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.221.164.0/22
138.99.224.0/22
167.250.52.0/22
207.248.192.0/19
Signature Algorithm: sha256WithRSAEncryption
4f:05:c6:4d:70:c3:62:b8:0f:eb:bd:a0:c1:bf:bd:c3:7c:bd:
ff:5d:81:dd:cf:86:69:e3:8e:a1:97:b1:91:5e:45:74:ba:73:
b1:19:4b:c3:3d:de:23:ff:6a:f4:bd:af:9c:7a:34:61:e9:7e:
8c:05:58:5e:39:13:5b:d1:3f:27:55:82:e3:b4:04:48:59:6a:
dc:32:45:5e:92:7a:92:ba:bd:1d:5b:7f:49:27:24:2c:09:d6:
af:11:a4:67:57:51:ad:51:dd:c1:79:44:65:9c:65:34:e2:21:
bc:6e:19:b7:71:7f:64:89:61:b8:eb:15:d0:02:40:bd:1f:5c:
c8:9f:eb:04:31:1b:63:fb:3a:50:3b:a4:2a:99:3d:88:82:47:
a4:00:90:78:1a:42:92:1d:e6:90:3a:a1:04:1b:c8:b2:d0:2d:
45:14:a5:f4:be:92:55:3b:4b:f2:3f:25:02:b8:1e:c5:d4:ce:
87:e0:9f:42:63:f3:30:33:64:2f:e8:9a:1c:a2:66:b2:33:d1:
1f:b5:66:63:ad:cd:21:3d:36:fb:68:61:3b:1d:86:5d:f4:6f:
3d:7d:58:53:de:57:2b:b6:a0:63:b9:6f:bb:a2:e3:c2:8c:20:
53:4f:92:55:d7:cf:63:4e:4a:3f:e7:8c:3a:6d:04:05:e8:f6:
40:7a:ae:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:23 2024 by rpki-client on console-fra.rpki-client.org