Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/994b0d04-17cb-46b8-a337-c16214ac8a31/742cd10c763d29638bfac40f126cac0b61ab0bf3.roa
File: 742cd10c763d29638bfac40f126cac0b61ab0bf3.roa (raw, json)
Hash identifier: n+Aj4UKCCuDlv08/544wXfG9dkpcsjkXX7fIcyaVU60=
Subject key identifier: 3C:5E:31:51:CA:EE:6F:78:5F:76:52:B9:57:C9:C3:4E:7B:AD:E4:37
Certificate issuer: /CN=94997e9738eb4843477b7a8b538303d62f97978d
Certificate serial: 21DB8B
Authority key identifier: 97:DA:8C:47:FE:77:ED:09:BC:AC:B4:04:A4:C3:AD:57:49:0E:4B:A8
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/94997e9738eb4843477b7a8b538303d62f97978d.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/994b0d04-17cb-46b8-a337-c16214ac8a31/742cd10c763d29638bfac40f126cac0b61ab0bf3.roa
Signing time: Wed 05 Jul 2023 01:49:26 +0000
ROA not before: Tue 04 Jul 2023 01:49:26 +0000
ROA not after: Sat 05 Jul 2025 01:49:26 +0000
asID: 52468
IP address blocks: 131.196.112.0/23 maxlen: 23
131.196.114.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2218891 (0x21db8b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94997e9738eb4843477b7a8b538303d62f97978d
Validity
Not Before: Jul 4 01:49:26 2023 GMT
Not After : Jul 5 01:49:26 2025 GMT
Subject: CN=742cd10c763d29638bfac40f126cac0b61ab0bf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:d5:6e:bb:15:a3:84:3e:d2:c8:89:9a:c8:4b:
56:d6:63:9f:a2:64:0c:c9:53:06:c0:56:36:fc:7a:
77:c6:ae:e9:71:96:c6:59:d0:47:9e:3b:17:a0:11:
17:e5:96:8d:67:9d:c1:55:75:ec:00:91:cc:3f:db:
69:40:7e:ef:2a:6f:29:a5:57:5f:14:2b:e5:60:04:
94:e7:1b:8d:a1:28:e3:76:b5:46:81:b5:3a:b0:9a:
0e:0a:a3:90:59:d7:c1:4b:11:01:47:93:af:68:76:
e6:e4:09:ec:01:7f:3f:24:d7:6e:7c:a1:52:a4:a3:
61:97:1b:a3:96:99:f6:b2:e2:53:0b:6b:8c:2b:9c:
7f:be:75:8e:d8:11:5c:e3:b5:14:3f:85:ba:17:42:
14:b0:8d:7e:8f:c3:79:5f:8a:49:42:b9:dd:f9:d2:
01:14:bb:dc:96:7d:f4:33:95:33:9f:28:f1:8a:53:
a5:78:7e:7f:e6:bb:3b:82:24:73:0a:e8:57:bb:b6:
68:06:c8:1c:2e:2b:ff:47:25:2d:91:72:c7:88:0a:
c9:28:7b:c4:e6:d0:cb:6c:ef:ec:80:16:11:a9:14:
95:0b:3a:be:d6:1d:ba:0a:0a:04:c7:8f:32:80:f0:
b7:3d:77:00:70:30:54:63:f4:be:ba:df:2e:ee:cf:
ca:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:5E:31:51:CA:EE:6F:78:5F:76:52:B9:57:C9:C3:4E:7B:AD:E4:37
X509v3 Authority Key Identifier:
keyid:97:DA:8C:47:FE:77:ED:09:BC:AC:B4:04:A4:C3:AD:57:49:0E:4B:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/94997e9738eb4843477b7a8b538303d62f97978d.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/994b0d04-17cb-46b8-a337-c16214ac8a31/742cd10c763d29638bfac40f126cac0b61ab0bf3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/994b0d04-17cb-46b8-a337-c16214ac8a31/94997e9738eb4843477b7a8b538303d62f97978d.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.196.112.0/22
Signature Algorithm: sha256WithRSAEncryption
3c:89:dd:6a:02:01:8d:fe:66:dd:71:0b:7d:d7:30:b9:1d:56:
8a:ad:b1:1a:68:60:01:5c:e5:00:a4:ba:24:01:2f:6e:a7:4a:
f8:59:59:f3:54:ad:98:3c:87:d6:6c:3c:91:f7:d5:76:ca:87:
5f:1a:06:6d:40:30:48:ad:04:a0:e3:cc:f3:4e:fc:eb:07:70:
f8:b0:31:c8:4e:46:33:38:9e:da:14:b5:56:e3:be:7c:e9:57:
0a:b5:fd:03:2e:3c:1d:60:85:3a:5a:41:9d:4f:30:fd:c2:d4:
33:29:b7:e5:c8:7d:e6:e3:6c:d4:d6:c9:5b:26:42:33:f2:59:
ec:5c:ce:69:d5:be:f3:aa:3e:13:98:48:4f:10:21:8e:25:d2:
ad:33:ab:06:dd:91:81:bf:d5:05:fd:49:62:dd:26:9b:0e:58:
5c:95:f7:dd:9b:f3:bf:f0:86:df:74:57:e3:39:b7:b5:7a:84:
c5:ec:4d:1b:80:d1:29:b3:dd:55:86:7b:b1:5b:68:a9:a7:68:
6a:0d:b3:2a:56:61:8c:87:ff:33:e3:18:0f:a2:6d:4d:45:1f:
31:50:58:31:d8:56:0f:0d:23:37:ae:58:ab:84:df:28:5f:24:
0a:a1:af:50:3c:ab:ea:47:e3:1a:b5:20:3c:84:85:a1:55:f8:
28:73:68:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:16 2024 by rpki-client on console-ams.rpki-client.org