Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/84c637c6-aa79-4141-891e-68dc0a906a14/6d6600f97d3942be25ffcb704a4a88e445bb6c83.roa
File: 6d6600f97d3942be25ffcb704a4a88e445bb6c83.roa (raw, json)
Hash identifier: 6JPsSwpcCRZEvt70qXgFguxAyidW+g6JZwSqacshuKs=
Subject key identifier: 0A:9C:B3:AC:BE:99:2D:8D:5F:D4:19:CF:2C:B3:DC:03:43:52:4E:C0
Certificate issuer: /CN=fbcc8ded40bc24937a2ae4fb7a521bd388ee024b
Certificate serial: 238391
Authority key identifier: 81:44:D0:EE:20:41:EA:AA:3B:7A:D7:C3:4E:65:02:F9:6F:AB:F8:5C
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fbcc8ded40bc24937a2ae4fb7a521bd388ee024b.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/84c637c6-aa79-4141-891e-68dc0a906a14/6d6600f97d3942be25ffcb704a4a88e445bb6c83.roa
Signing time: Fri 20 Oct 2023 04:31:43 +0000
ROA not before: Fri 20 Oct 2023 04:31:40 +0000
ROA not after: Mon 20 Oct 2025 04:31:40 +0000
asID: 52439
IP address blocks: 138.185.12.0/22 maxlen: 24
191.98.200.0/21 maxlen: 24
132.255.236.0/22 maxlen: 24
168.90.156.0/22 maxlen: 24
168.194.168.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2327441 (0x238391)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbcc8ded40bc24937a2ae4fb7a521bd388ee024b
Validity
Not Before: Oct 20 04:31:40 2023 GMT
Not After : Oct 20 04:31:40 2025 GMT
Subject: CN=6d6600f97d3942be25ffcb704a4a88e445bb6c83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:a6:71:59:cf:55:e2:bc:4b:46:ab:d2:41:36:
d2:f1:1b:7f:8b:9a:9b:12:cd:a3:6f:a8:c8:4f:b4:
38:9d:66:70:9e:82:34:55:8a:da:2c:ed:a7:b4:65:
ef:05:72:d4:e7:68:be:96:a8:a8:2a:3d:e4:62:7a:
5e:73:a3:b8:87:b5:eb:28:b3:c9:0f:c9:92:44:7e:
62:e4:04:94:6a:bf:c1:8e:67:3f:4e:ce:69:6a:79:
9a:9f:a9:78:46:ec:d0:98:15:95:49:73:ab:7a:40:
29:f9:11:fc:d3:74:fa:76:ea:84:88:2f:cb:d3:66:
83:a8:d7:1d:5e:47:18:df:cd:0c:75:e1:f1:a5:84:
fd:2f:5f:8a:dd:ad:7d:dd:8b:bc:42:26:d4:96:4f:
32:76:c2:e9:b9:37:79:8b:dd:9a:60:d2:25:21:44:
f2:b9:70:bc:f7:a0:fb:92:d7:37:71:d5:8b:6d:35:
e7:3c:92:ad:12:1b:24:b0:90:01:dc:e0:2c:e9:8e:
df:9a:a1:28:c3:73:6e:b6:c3:5d:4c:c3:6e:c1:6c:
0d:f1:ff:1a:aa:20:21:49:ef:b1:de:2b:3b:67:02:
01:a4:c1:59:2d:0a:72:4a:9e:0c:d5:47:a6:b6:be:
94:0b:92:7d:c1:72:22:77:3b:e6:60:73:f1:78:46:
cb:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:9C:B3:AC:BE:99:2D:8D:5F:D4:19:CF:2C:B3:DC:03:43:52:4E:C0
X509v3 Authority Key Identifier:
keyid:81:44:D0:EE:20:41:EA:AA:3B:7A:D7:C3:4E:65:02:F9:6F:AB:F8:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fbcc8ded40bc24937a2ae4fb7a521bd388ee024b.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/84c637c6-aa79-4141-891e-68dc0a906a14/6d6600f97d3942be25ffcb704a4a88e445bb6c83.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/84c637c6-aa79-4141-891e-68dc0a906a14/fbcc8ded40bc24937a2ae4fb7a521bd388ee024b.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
132.255.236.0/22
138.185.12.0/22
168.90.156.0/22
168.194.168.0/22
191.98.200.0/21
Signature Algorithm: sha256WithRSAEncryption
bb:15:a5:e5:c3:d5:ef:cb:ed:88:29:51:8e:58:04:39:6c:55:
f3:58:dc:89:33:a8:53:9b:78:e9:4f:f6:d9:f0:63:05:ba:7b:
37:ca:bb:8c:7e:08:2c:e1:b8:8e:30:34:aa:90:5e:ae:7b:ad:
8e:17:17:51:f2:73:c8:72:a5:a6:1c:63:14:60:62:21:9f:e4:
1c:29:74:75:9d:be:e9:60:5e:aa:e2:3e:59:a8:fb:af:03:7f:
d4:8a:4e:9c:56:fd:fd:07:2e:67:18:9b:17:a9:dd:61:40:18:
ad:c8:e7:25:cf:a5:77:8f:3e:3b:dc:4e:2d:15:db:69:33:4d:
05:cd:87:52:92:d9:47:a7:8e:45:92:24:1c:94:e7:c7:5c:0e:
da:98:6b:f1:42:36:64:64:67:f8:a4:08:75:2b:0f:24:db:74:
88:9e:40:c6:76:ea:1e:ef:31:a0:77:b9:c3:f7:6d:c5:32:6b:
6c:eb:e7:ab:1b:dd:76:91:70:cc:4d:89:40:7d:59:8f:1e:e4:
1d:88:68:01:83:15:81:96:f3:50:6b:27:ad:78:af:f9:08:2c:
e8:5c:e7:13:96:e3:c8:20:2c:f4:5a:f8:1e:6f:aa:02:15:49:
ac:20:53:f5:9e:7b:25:68:5a:f7:92:53:04:37:90:c8:18:fe:
78:4a:36:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:23 2024 by rpki-client on console-fra.rpki-client.org