Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a4486ecf-5590-4e73-a29d-28083272ba5a/5103dfea1c9bbf705d60c836949e49176fd588cd.roa
File: 5103dfea1c9bbf705d60c836949e49176fd588cd.roa (raw, json)
Hash identifier: Uusa63L+8f3EGwTy3ugzSig/KDWL0UfXh1rpLfhWmLE=
Subject key identifier: 3E:04:7C:A2:01:03:0D:AA:F9:86:58:F9:75:1F:25:28:5B:BA:42:F3
Certificate issuer: /CN=ada0a8b1b46121d8dca07b4e5e1efd20b50d60d8
Certificate serial: 131A12
Authority key identifier: 89:45:5B:B7:4F:80:8D:EB:D1:D4:05:DA:C8:34:E4:27:DC:2B:30:54
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ada0a8b1b46121d8dca07b4e5e1efd20b50d60d8.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/a4486ecf-5590-4e73-a29d-28083272ba5a/5103dfea1c9bbf705d60c836949e49176fd588cd.roa
Signing time: Wed 03 Nov 2021 21:00:24 +0000
ROA not before: Wed 03 Nov 2021 21:00:23 +0000
ROA not after: Tue 03 Nov 2026 21:00:23 +0000
asID: 265696
IP address blocks: 131.196.208.0/22 maxlen: 23
2801:19:3000::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1251858 (0x131a12)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ada0a8b1b46121d8dca07b4e5e1efd20b50d60d8
Validity
Not Before: Nov 3 21:00:23 2021 GMT
Not After : Nov 3 21:00:23 2026 GMT
Subject: CN=5103dfea1c9bbf705d60c836949e49176fd588cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:40:6c:1e:5a:c5:e4:45:fe:82:3b:f4:71:47:
6e:44:da:13:cc:7d:d3:bc:5e:22:ec:20:77:e8:fa:
cb:0e:59:07:3e:fa:87:9d:ff:e6:3b:d1:fa:46:a9:
4c:a4:4e:df:2a:89:15:16:60:db:77:71:31:2d:74:
d1:2c:22:46:67:05:af:2c:99:4b:d0:50:74:c7:e4:
d3:0e:b2:16:cd:c0:33:71:d3:88:66:74:5d:9b:d4:
db:df:c8:89:e2:6c:da:43:33:0b:b7:bc:45:51:0c:
ec:3e:c7:91:05:1c:89:5f:28:b7:bd:23:29:38:a3:
6e:a4:45:35:54:f8:66:90:e1:a5:78:6e:96:8b:64:
61:02:9d:c1:8a:bc:b4:86:16:74:8d:cc:2a:52:d2:
53:42:9c:72:6b:13:85:97:97:16:0a:7f:5d:c2:52:
bf:7d:8b:8b:f4:7c:40:bc:4f:9d:32:e3:7c:64:64:
85:1f:2c:74:1c:ad:a9:10:43:32:04:d5:48:78:74:
e7:72:2b:69:94:ef:ae:41:8d:33:84:2c:54:73:4f:
54:90:2d:ea:b9:10:ec:5d:11:85:7e:6d:07:91:df:
d3:99:ad:78:ee:2b:28:42:33:f4:73:54:53:cb:11:
08:1d:49:36:07:70:e6:31:0c:04:75:12:b4:53:fc:
23:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:04:7C:A2:01:03:0D:AA:F9:86:58:F9:75:1F:25:28:5B:BA:42:F3
X509v3 Authority Key Identifier:
keyid:89:45:5B:B7:4F:80:8D:EB:D1:D4:05:DA:C8:34:E4:27:DC:2B:30:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ada0a8b1b46121d8dca07b4e5e1efd20b50d60d8.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a4486ecf-5590-4e73-a29d-28083272ba5a/5103dfea1c9bbf705d60c836949e49176fd588cd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/a4486ecf-5590-4e73-a29d-28083272ba5a/ada0a8b1b46121d8dca07b4e5e1efd20b50d60d8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.196.208.0/22
IPv6:
2801:19:3000::/48
Signature Algorithm: sha256WithRSAEncryption
74:bc:f5:e2:c0:93:ce:e8:52:c2:58:c5:43:ce:4a:74:58:f3:
6b:08:06:28:18:74:ec:bd:96:5f:74:5f:6f:27:f1:9f:94:2a:
a0:98:f9:fe:f8:83:7f:45:bb:6e:50:7b:41:ca:25:71:91:3d:
df:4f:9b:ba:4b:4e:60:aa:f4:41:3b:19:98:8b:8b:dd:9c:3a:
6c:5a:bf:0b:9f:27:68:b5:62:eb:09:90:a4:97:69:9f:de:b6:
37:1b:15:52:bd:bc:36:cf:57:99:7d:ff:cb:9b:80:33:b2:b6:
f7:11:ae:91:a6:2e:01:fc:ed:1a:65:eb:4a:b5:68:46:3b:84:
c2:c3:c1:1e:9e:26:69:a4:77:f3:d1:7b:49:d0:02:27:86:42:
23:6c:ad:75:9f:74:bb:97:3a:c2:2a:50:95:32:60:ec:9e:93:
0d:f1:99:12:1d:f4:8a:88:eb:3f:fb:a7:6d:c5:08:09:37:00:
c9:86:35:24:fb:f8:cc:13:13:5f:70:a6:f7:d3:86:54:b0:96:
a9:ed:3d:08:3a:c8:6d:e9:40:84:d4:0f:93:1f:af:aa:8e:5a:
bf:ff:a4:80:48:8d:72:33:f0:f4:9a:12:a2:8f:bc:35:ca:79:
87:e0:09:48:67:f3:9d:c1:b7:fb:16:26:5b:e2:5c:4a:fb:53:
69:f9:a8:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:00 2024 by rpki-client on console-fra.rpki-client.org