Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a0134565-9f3c-49b1-aaf6-dff2ea3146fe/7278ff49c5b438145dd364a376abe753cc389e40.roa
File: 7278ff49c5b438145dd364a376abe753cc389e40.roa (raw, json)
Hash identifier: 1S+92irFyOlDZELSAcKaQABn4pQb5APkRUv7SkzSUEU=
Subject key identifier: 15:D9:5B:E8:75:B6:11:BB:B9:FC:ED:37:FD:D7:E8:FC:69:14:84:47
Certificate issuer: /CN=c42687bcebd27d6fd68fc0f95a18fd8af8b436bb
Certificate serial: 22F6EF
Authority key identifier: BE:3E:AB:7A:10:6B:40:B0:F6:42:8F:4B:70:13:51:7C:9C:66:64:E0
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c42687bcebd27d6fd68fc0f95a18fd8af8b436bb.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/a0134565-9f3c-49b1-aaf6-dff2ea3146fe/7278ff49c5b438145dd364a376abe753cc389e40.roa
Signing time: Sun 06 Aug 2023 00:59:43 +0000
ROA not before: Sat 05 Aug 2023 00:59:43 +0000
ROA not after: Wed 06 Aug 2025 00:59:43 +0000
asID: 269918
IP address blocks: 131.72.168.0/22 maxlen: 22
131.72.168.0/23 maxlen: 23
131.72.168.0/24 maxlen: 24
131.72.169.0/24 maxlen: 24
131.72.170.0/23 maxlen: 23
131.72.170.0/24 maxlen: 24
131.72.171.0/24 maxlen: 24
2803:dd80::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2291439 (0x22f6ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c42687bcebd27d6fd68fc0f95a18fd8af8b436bb
Validity
Not Before: Aug 5 00:59:43 2023 GMT
Not After : Aug 6 00:59:43 2025 GMT
Subject: CN=7278ff49c5b438145dd364a376abe753cc389e40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:34:54:b0:e7:51:67:45:e4:d3:5d:87:d5:0e:
1c:5f:55:d5:10:9d:55:8d:73:64:98:b9:10:bd:0f:
4f:a5:4e:ac:43:ee:d9:31:8d:4b:e0:23:5f:d2:ce:
90:f7:c0:b6:ce:a1:53:75:26:d0:bb:af:7c:2b:58:
45:6f:2e:38:59:5d:96:57:9d:52:f7:5c:a6:60:3c:
31:1d:cc:c5:72:86:f1:7b:95:12:ce:00:40:57:c9:
a1:d2:00:fe:67:60:96:40:09:56:ac:8a:0a:fc:57:
61:4b:5a:55:68:d3:e5:f7:27:64:68:92:09:bb:83:
0f:d5:eb:a9:b2:a9:62:f9:66:94:71:d1:4f:c3:8a:
53:33:df:5a:f1:26:62:10:ab:17:14:bb:1f:08:22:
cd:a6:b9:c3:e3:89:9a:42:35:5e:24:2c:b2:5e:1a:
b9:00:50:35:73:6c:b9:9b:b2:f6:9d:7e:86:c4:d5:
c0:04:07:f1:ce:bf:3e:47:fc:f4:41:33:87:42:7b:
f1:52:ac:9d:91:fe:e1:65:80:f1:c5:70:b8:6e:20:
bb:20:d3:e9:6e:57:66:e4:4a:60:dc:72:d9:d7:88:
fd:69:a8:66:08:7c:2a:38:da:85:cf:62:c4:f4:f2:
ad:d9:00:cb:7f:1b:55:d7:43:90:41:dc:50:13:3b:
a2:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:D9:5B:E8:75:B6:11:BB:B9:FC:ED:37:FD:D7:E8:FC:69:14:84:47
X509v3 Authority Key Identifier:
keyid:BE:3E:AB:7A:10:6B:40:B0:F6:42:8F:4B:70:13:51:7C:9C:66:64:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c42687bcebd27d6fd68fc0f95a18fd8af8b436bb.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a0134565-9f3c-49b1-aaf6-dff2ea3146fe/7278ff49c5b438145dd364a376abe753cc389e40.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/a0134565-9f3c-49b1-aaf6-dff2ea3146fe/c42687bcebd27d6fd68fc0f95a18fd8af8b436bb.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.72.168.0/22
IPv6:
2803:dd80::/32
Signature Algorithm: sha256WithRSAEncryption
55:1f:3e:a2:b1:df:71:75:0b:12:72:5d:ff:62:c2:99:20:21:
d1:f6:17:3e:6c:2f:64:1e:50:bf:1a:25:6f:bf:11:c8:1d:ec:
70:8c:31:4f:f4:f7:2f:13:83:09:b6:0d:c4:dc:a3:28:b2:ae:
c5:94:b4:f4:02:b9:bc:d8:c2:4f:bf:29:73:1f:bb:78:a0:14:
a7:14:b9:68:1a:99:6f:17:47:3a:d0:fb:0a:4e:af:7c:a6:f5:
53:33:4a:89:59:e6:2f:3c:9e:15:b9:57:bc:93:5d:4e:23:df:
b8:fd:b1:a8:9d:bf:9b:ba:11:5e:62:0c:de:2e:e0:ae:d2:48:
ca:2e:85:46:4b:7f:b8:13:0c:e8:8e:99:ac:33:83:91:8d:aa:
20:e2:60:77:f4:2f:49:72:25:de:d2:4e:fe:d6:84:01:4d:be:
1e:55:08:ba:b1:bc:bb:42:7b:6c:c9:67:bf:fd:94:e5:4c:d9:
5f:0a:a8:a9:2a:7b:03:ff:1e:50:ea:72:d2:a5:80:44:07:fe:
25:f4:db:c0:45:b2:01:73:fd:2f:1d:de:a4:7d:6b:69:8c:21:
13:23:2e:e0:dc:98:dd:38:9f:c9:5f:29:35:cf:99:0c:38:39:
9e:d3:a4:e4:be:c0:c4:e8:8c:32:1a:42:30:22:51:df:f1:a2:
b1:30:7b:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:59 2024 by rpki-client on console-fra.rpki-client.org