Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8a76d4e4-c054-4ad2-ae81-5610155a6ea3/795dbcadf192d927529700cc3609891b4007fc48.roa
File: 795dbcadf192d927529700cc3609891b4007fc48.roa (raw, json)
Hash identifier: d7N8kti6g2WOn43pa38kVuHfLOn6UUJ8mXgu/e29rAc=
Subject key identifier: 9D:30:00:99:4C:CB:66:97:87:B7:DB:8A:AD:F2:45:5B:50:BD:A6:5F
Certificate issuer: /CN=23392513f47d61c0f12dc66bb0d069fed5378524
Certificate serial: 1DC235
Authority key identifier: 3C:89:F0:67:EB:7D:D4:43:8F:12:76:A2:BA:04:A3:4B:62:11:70:4A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/23392513f47d61c0f12dc66bb0d069fed5378524.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8a76d4e4-c054-4ad2-ae81-5610155a6ea3/795dbcadf192d927529700cc3609891b4007fc48.roa
Signing time: Thu 11 Apr 2024 14:43:35 +0000
ROA not before: Thu 11 Apr 2024 14:43:34 +0000
ROA not after: Sat 11 Apr 2026 14:43:34 +0000
asID: 41095
IP address blocks: 138.204.13.0/24 maxlen: 24
138.204.14.0/24 maxlen: 24
138.204.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1950261 (0x1dc235)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23392513f47d61c0f12dc66bb0d069fed5378524
Validity
Not Before: Apr 11 14:43:34 2024 GMT
Not After : Apr 11 14:43:34 2026 GMT
Subject: CN=795dbcadf192d927529700cc3609891b4007fc48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ed:56:85:e5:fc:32:2d:9c:d0:3a:f7:90:5d:
50:50:41:49:11:3e:7c:54:57:2c:fd:a3:60:13:68:
80:80:39:43:c4:a4:d2:35:3a:3b:75:24:81:7c:00:
4c:96:0c:4c:61:38:a1:69:a2:4e:f4:02:db:fe:ac:
7f:b8:58:84:c7:a3:65:d5:ac:ab:05:ff:cd:e8:9b:
35:a4:cd:3c:69:97:bb:15:40:e4:b0:42:6a:b8:bd:
0d:6b:e5:58:29:88:01:f0:ea:9b:4b:d4:3a:c0:7d:
c2:ed:98:65:09:4e:7b:e3:ca:e4:48:02:98:ac:ab:
78:10:af:81:70:69:14:41:4d:c1:03:bc:55:f7:3e:
60:55:7a:c9:5f:2e:aa:8f:ef:d5:96:ad:8d:2b:50:
e4:13:3e:70:e5:00:ce:fe:33:64:14:19:4d:e3:f7:
3d:e0:1d:dd:9f:e7:8e:f5:e8:94:4c:b2:a0:06:9e:
ab:59:36:25:52:bb:8b:23:e3:7a:60:00:ec:82:97:
5f:6f:23:73:1e:df:14:bb:6a:07:45:00:17:f3:ba:
b0:7c:46:cb:99:a0:83:0f:fa:0d:9a:42:0c:a8:0a:
e2:be:f3:9f:5e:17:50:ea:63:fd:64:79:db:de:ae:
de:da:d6:3b:13:cb:70:39:2c:0c:cd:15:61:b3:1e:
82:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:30:00:99:4C:CB:66:97:87:B7:DB:8A:AD:F2:45:5B:50:BD:A6:5F
X509v3 Authority Key Identifier:
keyid:3C:89:F0:67:EB:7D:D4:43:8F:12:76:A2:BA:04:A3:4B:62:11:70:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/23392513f47d61c0f12dc66bb0d069fed5378524.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8a76d4e4-c054-4ad2-ae81-5610155a6ea3/795dbcadf192d927529700cc3609891b4007fc48.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/8a76d4e4-c054-4ad2-ae81-5610155a6ea3/23392513f47d61c0f12dc66bb0d069fed5378524.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.204.13.0-138.204.15.255
Signature Algorithm: sha256WithRSAEncryption
68:23:09:47:d2:a1:96:03:e3:0b:4c:a1:03:a3:0e:9c:37:32:
8a:72:69:62:e8:aa:82:3e:93:17:b7:56:d7:fb:d7:8f:37:f8:
ae:54:81:81:32:01:8e:d3:4d:df:ad:21:1e:03:dc:62:f0:e1:
a3:13:2e:2f:55:78:e9:8d:3a:c2:33:f3:f1:27:9e:6d:84:63:
73:14:f1:d2:bb:0a:13:f4:08:ad:05:5a:1d:90:55:09:4a:e9:
b3:cd:cd:a7:16:67:15:f5:36:12:b9:4e:81:20:19:c3:1f:fe:
7c:4f:3b:56:0a:21:d5:97:a5:58:03:e6:e6:bf:af:e2:e5:d9:
c9:aa:7b:a3:77:fb:22:63:eb:63:4a:9f:57:e9:5e:30:44:e7:
e5:9a:82:fd:11:ec:af:92:ea:6a:fb:5e:10:fe:79:89:e7:e3:
17:44:b3:92:b9:2e:47:89:b6:ba:71:28:80:4d:c4:c1:54:f4:
00:97:61:1d:63:9d:07:22:16:cf:e5:59:27:eb:76:59:0f:16:
bc:6f:db:17:a5:1f:74:fc:49:ca:39:d6:a6:e4:ee:4f:e8:0e:
14:0e:c0:42:fd:fb:ee:e7:2d:a6:44:85:c8:48:23:ea:64:92:
b5:3f:de:db:d2:1d:b2:3c:20:9a:ac:1c:25:2c:98:42:1d:66:
a0:cc:e6:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:23 2024 by rpki-client on console-fra.rpki-client.org