Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9345d2eb-3055-4252-ae4e-d0b991baf5cb/40da009416cbb6c6a5ab165238d7d4697d7fe860.roa
File: 40da009416cbb6c6a5ab165238d7d4697d7fe860.roa (raw, json)
Hash identifier: NprNsaof/6n/MkQL1lGHH8RpCPzEGB+ZtvRQU4y/sCs=
Subject key identifier: 0B:3C:97:AD:EA:94:AE:F6:5E:C8:E5:DB:33:CF:40:B4:76:E5:52:A8
Certificate issuer: /CN=50029dd9024c2c49dc8eb4a48df44bfd015f8874
Certificate serial: 244C34
Authority key identifier: 20:AC:FA:1F:E1:98:6E:0F:ED:0F:E5:A7:4A:56:2A:1F:92:FD:DC:4B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/50029dd9024c2c49dc8eb4a48df44bfd015f8874.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9345d2eb-3055-4252-ae4e-d0b991baf5cb/40da009416cbb6c6a5ab165238d7d4697d7fe860.roa
Signing time: Sat 16 Sep 2023 06:41:27 +0000
ROA not before: Fri 15 Sep 2023 06:41:27 +0000
ROA not after: Tue 16 Sep 2025 06:41:27 +0000
asID: 262234
IP address blocks: 131.108.232.0/22 maxlen: 24
170.245.56.0/22 maxlen: 24
179.49.112.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2378804 (0x244c34)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50029dd9024c2c49dc8eb4a48df44bfd015f8874
Validity
Not Before: Sep 15 06:41:27 2023 GMT
Not After : Sep 16 06:41:27 2025 GMT
Subject: CN=40da009416cbb6c6a5ab165238d7d4697d7fe860
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:61:41:22:c6:11:24:f0:e5:b0:5d:d5:b1:cb:
60:c2:94:f0:af:60:93:0a:06:cc:d0:9b:e6:f1:d0:
a7:6e:24:32:c1:de:ee:d6:1f:b1:92:2a:af:90:9b:
79:ab:1e:28:2a:60:76:44:76:dc:02:bc:fc:c2:f6:
83:c5:91:c9:9d:d6:15:86:b0:57:02:c2:71:22:f8:
42:96:4c:44:4f:ed:2e:36:b8:c7:c7:55:5e:6a:c5:
f6:d2:c8:c8:cc:20:fa:cf:19:9e:ca:fc:4d:cc:d5:
fe:2a:24:2c:89:bd:75:8d:27:5e:8b:06:8b:34:78:
d7:a5:5b:d1:95:30:41:a8:11:57:82:bf:92:91:ef:
16:c0:d1:8e:99:e5:fd:bc:0c:2c:e9:12:40:8c:74:
ed:44:a4:f1:03:49:c0:66:09:fe:04:8b:ba:db:d3:
a8:4e:8b:da:f4:09:4e:07:4b:9a:ef:52:91:e6:70:
3e:05:4e:18:46:0b:46:a8:fc:e8:9f:a6:b6:17:b5:
02:66:25:84:12:e3:6c:2d:62:c4:9f:fe:39:32:89:
e3:eb:68:46:57:e7:b5:de:ea:22:f2:ef:78:02:3d:
50:0b:dd:a0:8c:22:e5:4d:4e:56:d0:5c:45:12:e1:
ee:31:1c:b9:90:28:41:17:a5:76:6d:4f:3e:84:25:
9e:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:3C:97:AD:EA:94:AE:F6:5E:C8:E5:DB:33:CF:40:B4:76:E5:52:A8
X509v3 Authority Key Identifier:
keyid:20:AC:FA:1F:E1:98:6E:0F:ED:0F:E5:A7:4A:56:2A:1F:92:FD:DC:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/50029dd9024c2c49dc8eb4a48df44bfd015f8874.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9345d2eb-3055-4252-ae4e-d0b991baf5cb/40da009416cbb6c6a5ab165238d7d4697d7fe860.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9345d2eb-3055-4252-ae4e-d0b991baf5cb/50029dd9024c2c49dc8eb4a48df44bfd015f8874.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.108.232.0/22
170.245.56.0/22
179.49.112.0/21
Signature Algorithm: sha256WithRSAEncryption
56:dc:77:fd:b9:be:6b:f5:24:cc:d8:4b:66:13:c1:37:de:c9:
25:c3:d8:9d:a7:8e:53:e3:98:ca:bd:27:58:9c:74:6f:5f:9f:
63:88:f0:37:17:51:81:de:31:41:70:63:f1:3c:fb:52:a3:4b:
6e:d0:2d:1b:dd:6b:01:95:b8:d7:11:d6:e6:2e:b9:0d:80:62:
c0:93:66:96:8d:f0:59:65:fb:9e:4c:2c:70:4a:98:8d:5e:5f:
33:18:24:ad:37:df:93:5b:d8:66:63:bb:4b:22:6d:cf:38:6e:
93:09:1b:fa:3f:bb:6f:0f:6b:1b:3b:b2:45:2e:9d:ba:ed:31:
f6:56:7c:2a:99:80:26:b8:d9:8e:7a:cd:9a:8f:d7:86:1c:68:
83:02:73:67:b0:93:c8:03:2d:69:31:61:80:a5:d2:9b:2e:fa:
90:40:40:b0:e9:f8:67:8f:5d:0c:11:36:ad:b1:61:4c:fb:71:
48:a9:95:3b:e6:60:0e:42:2f:be:92:b9:1f:67:2f:66:a1:61:
c9:83:e1:0d:4d:68:7b:ee:e5:ee:d6:b8:2c:c1:76:94:f2:cd:
3a:24:4f:8a:98:d0:e0:ac:b6:31:32:03:d0:ba:cf:42:c8:13:
ca:f1:96:16:9b:74:b3:60:3b:c0:37:dd:b5:d5:2e:7c:aa:5b:
81:24:12:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:24 2024 by rpki-client on console-fra.rpki-client.org