Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b1030823-9dc0-44ce-a111-352f21488340/2ea893dfe688d9fdf5c15a505264799747971e54.roa
File: 2ea893dfe688d9fdf5c15a505264799747971e54.roa (raw, json)
Hash identifier: 3RDw40iLxx/k06piW9ONAvRh+/iDfKGKTeNzO6FI5/c=
Subject key identifier: 1B:D0:9B:05:42:A0:33:EB:EE:A6:80:B3:4F:9A:76:65:31:76:54:5F
Certificate issuer: /CN=b201a19cd604f299d9163ea1142421d9e34c2d41
Certificate serial: 0D1E7B
Authority key identifier: A8:49:EE:44:5F:56:7B:F6:97:3B:26:53:38:C1:6C:17:FE:30:AC:2D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b201a19cd604f299d9163ea1142421d9e34c2d41.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/b1030823-9dc0-44ce-a111-352f21488340/2ea893dfe688d9fdf5c15a505264799747971e54.roa
Signing time: Wed 24 Mar 2021 14:40:02 +0000
ROA not before: Wed 24 Mar 2021 14:40:02 +0000
ROA not after: Tue 24 Mar 2026 14:40:02 +0000
asID: 14420
IP address blocks: 138.59.108.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 859771 (0xd1e7b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b201a19cd604f299d9163ea1142421d9e34c2d41
Validity
Not Before: Mar 24 14:40:02 2021 GMT
Not After : Mar 24 14:40:02 2026 GMT
Subject: CN=2ea893dfe688d9fdf5c15a505264799747971e54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:37:a2:cd:d0:b4:50:dd:1f:6a:21:84:db:5a:
b8:63:e7:58:d6:34:68:8d:a2:3f:58:61:ee:bd:60:
2f:74:ce:50:e8:c7:a4:6b:33:cb:63:99:13:21:da:
d8:71:a8:07:6f:e0:49:88:78:3c:97:13:a2:cb:44:
ca:d7:65:5f:dc:61:23:60:b2:ce:4f:96:25:d5:a3:
26:d3:2e:75:14:7b:78:2f:8d:39:99:01:c3:f4:62:
88:ab:e0:66:84:25:21:fb:35:fd:a3:8b:75:38:c0:
2d:ff:24:41:1c:55:51:9a:2b:14:53:4d:19:c9:6e:
55:8c:89:28:5b:21:02:c6:e3:a8:23:3e:d8:57:d7:
f5:63:03:6b:81:87:49:34:23:f7:cd:1a:b7:23:4b:
c8:c1:3b:a7:47:20:80:9a:4e:51:4c:36:ad:6f:b2:
0f:b2:69:0a:1d:75:33:06:96:ea:16:79:d9:14:e3:
b5:a8:8c:a0:eb:21:53:52:3c:ec:65:b3:48:67:77:
96:4c:eb:3c:45:3d:3d:b5:de:37:c0:bc:22:fc:d5:
07:e2:f1:5a:e2:22:74:0e:27:ac:2e:8e:2a:00:90:
5b:99:7d:c4:db:23:8a:07:ec:f0:06:2e:00:92:8a:
6e:b3:6d:b6:fa:24:c9:4c:58:23:78:ce:be:cd:ba:
30:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:D0:9B:05:42:A0:33:EB:EE:A6:80:B3:4F:9A:76:65:31:76:54:5F
X509v3 Authority Key Identifier:
keyid:A8:49:EE:44:5F:56:7B:F6:97:3B:26:53:38:C1:6C:17:FE:30:AC:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b201a19cd604f299d9163ea1142421d9e34c2d41.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b1030823-9dc0-44ce-a111-352f21488340/2ea893dfe688d9fdf5c15a505264799747971e54.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/b1030823-9dc0-44ce-a111-352f21488340/b201a19cd604f299d9163ea1142421d9e34c2d41.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.59.108.0/22
Signature Algorithm: sha256WithRSAEncryption
1c:05:f8:3b:00:4a:a4:d7:0d:b4:57:8a:45:e9:76:1d:a5:09:
de:44:3c:cd:bc:f0:45:0b:ee:f7:8b:77:fc:72:93:8d:90:9b:
46:69:47:23:38:29:e5:fe:98:be:c7:57:b2:43:3c:72:f4:df:
96:38:a9:29:2c:51:f6:df:66:d0:78:f0:4e:6f:bf:81:4c:22:
9b:b0:58:cc:aa:d9:03:17:57:8d:6f:19:2a:a9:46:7c:05:d1:
96:f0:7d:58:f1:b3:f2:3d:f0:2e:c8:ed:24:aa:a9:1e:89:4f:
b0:0c:db:4f:05:c8:d4:27:43:f4:23:60:ee:07:c7:43:45:60:
3f:b4:bf:84:e9:3f:79:42:a7:0e:7a:91:a3:e9:d7:bb:ea:90:
85:ac:95:d7:e6:f7:2a:1a:63:af:67:64:a3:d8:c9:81:2e:d3:
eb:e3:b4:b3:4c:0b:ba:66:0a:28:ee:f1:85:08:63:e2:0f:b3:
d2:a5:64:fc:95:9f:3e:f0:d6:c5:28:a3:10:4e:28:d8:43:fe:
3a:9c:62:8a:3f:dd:cb:2c:0c:f2:91:26:54:a5:2f:6c:08:1b:
d3:b3:91:62:fb:45:b4:9d:ae:f4:0c:6c:57:ae:63:06:a4:3c:
8c:bd:e8:7d:5c:88:f7:74:46:6e:08:4c:bb:28:0a:3d:8b:f1:
b0:4a:3a:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:45 2024 by rpki-client on console-ams.rpki-client.org