Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7ff7a6c7-f889-44e7-8c59-11dbe0a2440f/f15026b344c50f7f3544bedd76d5469eb5eb0305.roa
File: f15026b344c50f7f3544bedd76d5469eb5eb0305.roa (raw, json)
Hash identifier: 7E/CZRYKNdC6gZR+m2e2Dld8FDQK/qpYdaGnCspEl78=
Subject key identifier: 6A:2C:D3:16:5C:8E:D4:C8:18:8A:E4:BD:E6:43:0C:80:D9:27:F0:26
Certificate issuer: /CN=108230d2c0c6803dc49b4b2c6dece1c0d627941b
Certificate serial: 1218B5
Authority key identifier: F3:CD:09:4C:F7:EB:2F:97:FD:30:FB:92:37:0C:D6:93:7A:B4:8B:6E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/108230d2c0c6803dc49b4b2c6dece1c0d627941b.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/7ff7a6c7-f889-44e7-8c59-11dbe0a2440f/f15026b344c50f7f3544bedd76d5469eb5eb0305.roa
Signing time: Wed 30 Aug 2023 08:30:01 +0000
ROA not before: Tue 29 Aug 2023 08:30:01 +0000
ROA not after: Thu 28 Aug 2025 08:30:01 +0000
asID: 263821
IP address blocks: 138.59.4.0/22 maxlen: 22
138.219.120.0/22 maxlen: 22
161.0.68.0/22 maxlen: 22
168.181.52.0/22 maxlen: 22
170.244.144.0/22 maxlen: 22
177.234.136.0/21 maxlen: 21
200.0.60.0/23 maxlen: 23
200.71.124.0/22 maxlen: 22
200.189.44.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1185973 (0x1218b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=108230d2c0c6803dc49b4b2c6dece1c0d627941b
Validity
Not Before: Aug 29 08:30:01 2023 GMT
Not After : Aug 28 08:30:01 2025 GMT
Subject: CN=f15026b344c50f7f3544bedd76d5469eb5eb0305
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:6a:94:84:28:8f:a7:08:05:6a:68:ef:5d:b1:
ea:c2:bd:da:19:99:18:9c:4f:d9:12:2f:73:68:83:
ce:6e:ee:84:6e:d2:42:7f:c0:79:7f:0c:c5:67:af:
7f:49:bc:d0:88:d0:cc:c5:8a:c4:4a:f4:06:b7:dc:
5b:74:dc:05:b7:8c:83:81:d3:9b:30:9d:e4:77:41:
dc:e6:cb:90:ed:08:df:7e:b1:b4:32:eb:7f:3c:b2:
4d:5e:62:69:ed:36:d9:73:5d:8a:06:7f:ed:c4:74:
28:8d:52:e5:04:08:e4:cf:3f:7d:c4:4f:47:f7:cb:
1f:13:11:bf:0b:d1:bb:55:e6:f2:e1:8a:6e:da:2e:
24:83:59:7e:85:ec:57:31:ac:ac:bc:a5:73:0f:19:
42:01:13:8d:54:31:31:ac:1d:83:0a:ee:44:e7:bc:
c9:79:e0:b2:2c:c1:0e:dc:80:62:02:d9:58:59:fc:
a9:93:22:95:d8:f9:b1:d0:b8:be:3a:fb:97:52:ac:
8b:d8:77:b7:b4:be:59:e8:72:63:64:96:31:d8:52:
73:86:05:41:ab:69:40:7f:bc:cc:b6:88:e3:47:90:
03:0c:70:3b:92:38:06:25:a3:57:72:65:02:19:00:
ca:9f:05:03:7b:e0:ad:d4:19:59:f5:50:3e:89:be:
3e:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:2C:D3:16:5C:8E:D4:C8:18:8A:E4:BD:E6:43:0C:80:D9:27:F0:26
X509v3 Authority Key Identifier:
keyid:F3:CD:09:4C:F7:EB:2F:97:FD:30:FB:92:37:0C:D6:93:7A:B4:8B:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/108230d2c0c6803dc49b4b2c6dece1c0d627941b.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7ff7a6c7-f889-44e7-8c59-11dbe0a2440f/f15026b344c50f7f3544bedd76d5469eb5eb0305.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/7ff7a6c7-f889-44e7-8c59-11dbe0a2440f/108230d2c0c6803dc49b4b2c6dece1c0d627941b.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.59.4.0/22
138.219.120.0/22
161.0.68.0/22
168.181.52.0/22
170.244.144.0/22
177.234.136.0/21
200.0.60.0/23
200.71.124.0/22
200.189.44.0/22
Signature Algorithm: sha256WithRSAEncryption
22:ed:d4:b3:06:27:16:49:b4:c8:a3:dd:5e:a6:7c:fc:13:2c:
86:83:e0:06:12:33:58:e2:f8:30:51:43:6a:dd:54:28:96:a6:
37:cf:78:90:e8:08:c7:21:10:c9:7f:56:71:28:04:36:29:40:
93:c5:66:f4:2e:31:11:3b:3c:91:c6:36:98:05:fa:06:79:3e:
26:d1:e0:bc:1b:a3:6e:3b:a9:b8:7f:d5:2a:6a:0b:a7:4a:d5:
7e:7f:86:b9:11:a2:e2:11:df:c1:99:b1:c6:61:b7:3c:de:cb:
8f:08:30:90:83:bb:51:cd:46:ab:c3:ed:a0:b4:43:75:5b:f4:
4f:5b:c7:23:79:14:cd:53:56:17:75:d2:05:68:2d:5c:84:8e:
f1:be:0c:4b:bf:da:72:3c:e9:a7:b4:5a:26:f2:61:97:be:ec:
3c:14:32:c0:2a:bf:f8:fb:58:cd:b4:5e:ad:5f:05:79:ca:06:
80:a9:ed:48:34:76:98:70:52:fc:12:31:c4:58:b9:69:8d:ad:
63:15:59:73:1e:b3:ab:13:a6:8b:c4:4d:ae:1e:66:94:14:4a:
a2:6c:39:5b:6a:a5:0f:c5:ae:1b:05:e1:58:89:ba:bb:eb:14:
7a:0f:88:26:c2:ec:63:84:a0:3e:01:ce:01:11:8f:ab:a0:ce:
9c:b6:c5:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:23 2024 by rpki-client on console-fra.rpki-client.org