Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a012ae49-8e25-4206-a83e-2e70a675e6f4/8a3ec15765b532fb53fbf3939e27cf22a362b7ec.roa
File: 8a3ec15765b532fb53fbf3939e27cf22a362b7ec.roa (raw, json)
Hash identifier: bZVvs8G2ncqj8vE+lJjyjs0sZrfm70BaeepQo6Ik9O0=
Subject key identifier: 2E:66:64:38:EA:1C:D0:79:73:21:DA:BC:A4:81:A2:70:8C:1D:5D:84
Certificate issuer: /CN=e6ea4e7f96925035be6071195a9d8fe1439fcbd6
Certificate serial: 23DD76
Authority key identifier: 15:99:A9:2E:57:E3:FB:F1:0C:EB:DF:1C:5E:D9:62:DE:E9:25:C3:5D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e6ea4e7f96925035be6071195a9d8fe1439fcbd6.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/a012ae49-8e25-4206-a83e-2e70a675e6f4/8a3ec15765b532fb53fbf3939e27cf22a362b7ec.roa
Signing time: Tue 14 Nov 2023 13:05:54 +0000
ROA not before: Tue 14 Nov 2023 13:05:54 +0000
ROA not after: Fri 14 Nov 2025 13:05:54 +0000
asID: 263725
IP address blocks: 138.0.228.0/24 maxlen: 24
138.0.229.0/24 maxlen: 24
138.0.230.0/24 maxlen: 24
138.0.231.0/24 maxlen: 24
168.228.192.0/24 maxlen: 24
168.228.193.0/24 maxlen: 24
168.228.194.0/24 maxlen: 24
168.228.195.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2350454 (0x23dd76)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6ea4e7f96925035be6071195a9d8fe1439fcbd6
Validity
Not Before: Nov 14 13:05:54 2023 GMT
Not After : Nov 14 13:05:54 2025 GMT
Subject: CN=8a3ec15765b532fb53fbf3939e27cf22a362b7ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:88:0f:fb:33:ae:89:de:ea:eb:1c:f2:a9:65:
33:07:6b:bf:56:87:b1:f6:51:ea:c8:40:7d:24:a3:
6e:2b:a9:ea:2d:5b:84:15:8f:77:85:83:c6:58:5d:
3d:8a:1e:eb:ef:b1:c1:c2:66:23:84:e7:1d:4c:d3:
ae:d4:a9:83:c2:66:93:c0:00:96:18:a3:c1:ae:61:
61:aa:44:91:8b:44:27:9f:5b:be:e8:11:a9:7d:20:
62:55:d9:a0:f7:c4:e0:52:a1:09:f7:79:b7:ac:78:
e5:dc:38:40:b1:3e:e9:64:7d:0a:6d:4d:ae:bb:d2:
95:3b:79:52:84:65:f1:29:58:f0:90:a1:55:68:9a:
8d:ef:86:a3:98:e8:a3:19:0f:6c:12:87:1f:e3:a2:
dd:1a:f4:e6:31:25:35:37:7e:76:91:0d:40:2e:81:
1d:33:c9:9d:06:c3:fd:db:d0:03:83:81:87:61:fe:
bd:f3:a7:82:bc:4c:88:bb:f1:8e:91:c7:43:8d:09:
ea:01:0b:b0:44:ff:66:de:98:74:a2:42:e6:5b:06:
d8:3c:b5:5a:9d:8a:3c:b3:34:e5:f8:b9:7a:df:fc:
bb:d7:80:d2:60:85:83:f9:47:c6:f6:c5:d1:7b:9f:
67:e0:fd:67:96:51:1e:9d:fc:45:a3:2b:d5:aa:f3:
a8:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:66:64:38:EA:1C:D0:79:73:21:DA:BC:A4:81:A2:70:8C:1D:5D:84
X509v3 Authority Key Identifier:
keyid:15:99:A9:2E:57:E3:FB:F1:0C:EB:DF:1C:5E:D9:62:DE:E9:25:C3:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e6ea4e7f96925035be6071195a9d8fe1439fcbd6.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a012ae49-8e25-4206-a83e-2e70a675e6f4/8a3ec15765b532fb53fbf3939e27cf22a362b7ec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/a012ae49-8e25-4206-a83e-2e70a675e6f4/e6ea4e7f96925035be6071195a9d8fe1439fcbd6.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.0.228.0/22
168.228.192.0/22
Signature Algorithm: sha256WithRSAEncryption
63:dd:e6:f6:7a:12:ac:44:00:28:b5:b1:66:f1:68:22:02:4b:
0a:20:fa:23:65:80:8c:15:78:6e:9a:51:d3:66:e2:37:34:24:
bd:24:78:0c:aa:f7:a5:0f:46:82:81:bc:31:6a:5e:7e:8b:86:
ec:85:3b:f3:00:32:60:29:67:01:cb:c8:54:52:25:3f:18:ab:
64:f4:6f:a0:9c:34:cb:b7:c9:19:8b:b3:8e:d1:78:ab:33:95:
9f:8f:53:4c:c4:88:4b:45:7a:4d:b7:01:92:f7:b9:95:30:20:
7b:a8:79:c8:29:f4:b0:38:94:c9:8c:76:7f:64:e3:fb:d3:a5:
34:ad:34:00:56:ff:0e:48:6a:17:fa:e9:bb:34:dc:8a:9f:dc:
e5:f9:c0:96:c7:48:d5:46:98:9d:9b:0d:eb:60:dd:60:97:ca:
ca:a8:50:27:20:c5:e8:e3:0a:fe:52:64:d5:7d:9b:1a:c4:e6:
99:49:c8:6b:3f:f5:d7:25:d7:95:9b:70:29:7d:0b:ab:87:dd:
ac:a2:93:6c:11:de:48:75:90:ba:c0:e5:63:20:2b:9e:e7:ea:
43:ba:eb:dd:bc:be:87:eb:3f:db:cf:22:45:88:82:82:6d:c0:
81:07:7c:ca:c7:c3:74:75:bd:6d:8f:ab:9d:15:9e:87:42:da:
66:37:7d:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:28 2024 by rpki-client on console-fra.rpki-client.org