Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b343a245-7eaf-4955-90fa-8e6d6fd43ab8/40a84b34ddbcff85e2c9adfbc1eb1da6fa9f321f.roa
File: 40a84b34ddbcff85e2c9adfbc1eb1da6fa9f321f.roa (raw, json)
Hash identifier: dB5ADFC/9edkRf6GGh8xWYE0HJARvYX6/JQ9U+7os6Q=
Subject key identifier: 23:AF:62:B1:08:36:59:B4:1D:F2:F3:D6:7D:C5:29:D1:B9:A9:62:1F
Certificate issuer: /CN=a5db578ddaaedcf4375740e85f5f51db4e193706
Certificate serial: 288487
Authority key identifier: 77:12:68:55:B2:AC:ED:4F:18:E8:4D:88:E8:D2:AF:63:B0:18:27:82
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a5db578ddaaedcf4375740e85f5f51db4e193706.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/b343a245-7eaf-4955-90fa-8e6d6fd43ab8/40a84b34ddbcff85e2c9adfbc1eb1da6fa9f321f.roa
Signing time: Tue 26 Mar 2024 05:10:52 +0000
ROA not before: Tue 26 Mar 2024 05:10:52 +0000
ROA not after: Thu 26 Mar 2026 05:10:52 +0000
asID: 52468
IP address blocks: 138.117.141.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2655367 (0x288487)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5db578ddaaedcf4375740e85f5f51db4e193706
Validity
Not Before: Mar 26 05:10:52 2024 GMT
Not After : Mar 26 05:10:52 2026 GMT
Subject: CN=40a84b34ddbcff85e2c9adfbc1eb1da6fa9f321f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:67:1f:d4:34:89:fa:56:89:3e:0a:9d:ac:a7:
b0:c0:a9:6d:d9:ed:22:15:a1:05:60:1a:b9:d1:44:
8d:a3:3e:67:cc:cd:88:4a:13:7b:00:40:4e:e7:6f:
f1:64:31:76:51:09:e1:ec:33:aa:85:1a:4a:ea:0d:
96:45:c7:47:0c:95:96:d5:a0:3b:c0:52:08:22:54:
23:70:4f:d9:5a:44:88:33:c2:48:1e:40:6a:23:e4:
14:00:f5:7d:33:5b:7c:06:ed:94:82:c6:0d:7e:8d:
e7:23:85:0d:d4:26:90:0f:0a:56:fa:c5:66:81:fa:
27:6c:36:72:b3:a3:25:90:d2:fb:6d:28:6e:59:ec:
20:16:8f:83:a5:05:67:8a:f0:7d:bc:7b:a9:c6:aa:
88:19:81:51:b6:a8:14:ce:66:30:bc:e7:63:80:07:
cc:31:fc:50:f8:d4:20:49:3b:6f:12:32:d9:8e:3b:
29:f3:78:ac:90:3f:d4:a0:db:d4:fd:85:36:6e:ac:
8b:ad:d6:2f:10:c4:df:06:32:09:db:1d:d3:e7:53:
7b:b1:eb:b9:9a:16:e3:f2:79:6c:bc:da:21:c1:59:
05:40:06:d3:91:4d:85:c0:04:9b:d6:6d:35:8a:4b:
c5:ef:1d:4c:cc:72:57:26:c8:e8:20:92:a3:c9:b3:
20:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:AF:62:B1:08:36:59:B4:1D:F2:F3:D6:7D:C5:29:D1:B9:A9:62:1F
X509v3 Authority Key Identifier:
keyid:77:12:68:55:B2:AC:ED:4F:18:E8:4D:88:E8:D2:AF:63:B0:18:27:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a5db578ddaaedcf4375740e85f5f51db4e193706.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b343a245-7eaf-4955-90fa-8e6d6fd43ab8/40a84b34ddbcff85e2c9adfbc1eb1da6fa9f321f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/b343a245-7eaf-4955-90fa-8e6d6fd43ab8/a5db578ddaaedcf4375740e85f5f51db4e193706.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.117.141.0/24
Signature Algorithm: sha256WithRSAEncryption
94:35:d4:55:31:f1:c9:32:b8:d0:76:b0:c2:6b:7e:4b:e4:7d:
b2:3f:92:38:bc:f6:a5:26:9b:d2:85:a8:c9:98:93:f3:09:fe:
7e:df:c3:b5:a3:80:19:5a:bd:8a:9f:19:e8:6b:00:d7:92:b5:
91:33:d8:16:9e:71:81:2e:29:7a:3d:e4:65:a8:77:3f:9d:5b:
cc:53:17:6a:82:80:37:0b:82:3b:e4:da:74:b2:77:16:66:21:
98:7e:22:a6:bc:c3:c4:23:ec:68:48:87:ec:f5:72:f2:63:0d:
c8:3d:79:c9:a6:82:ba:aa:42:b8:ab:d6:5b:6d:39:8f:66:e1:
d6:ae:82:2c:de:8e:e9:89:4c:d4:03:85:2f:64:23:b7:54:b4:
d6:00:ee:71:a7:7a:0d:b7:e9:8d:cd:de:68:43:64:ca:77:15:
8c:b5:f3:fd:4a:be:ae:a5:ec:c6:cf:6c:e0:f1:83:a1:a9:b6:
a9:29:73:d6:6c:45:a3:e2:86:78:da:54:db:82:0e:10:62:ab:
9e:b6:ff:87:e1:0e:18:cf:9c:a4:59:bb:7f:8d:2e:c7:de:c9:
e3:35:fa:49:fc:d0:c1:bc:36:5e:17:65:92:af:d3:a7:fd:ee:
26:a1:68:b1:a5:94:13:77:14:f4:3c:4a:e9:9b:ec:72:1b:4f:
f2:11:d1:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:45 2024 by rpki-client on console-ams.rpki-client.org