Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b343a245-7eaf-4955-90fa-8e6d6fd43ab8/9c81a04eb4ebecdaf8d2c33a8d0913079f453f8b.roa
File: 9c81a04eb4ebecdaf8d2c33a8d0913079f453f8b.roa (raw, json)
Hash identifier: ej7o9Rx/XkVu90voVnBCADZUaqcTu0BM18AnOW20Td0=
Subject key identifier: 2E:F2:A9:32:A9:39:CA:48:C3:56:0C:0C:CD:58:5A:FE:79:FC:65:6C
Certificate issuer: /CN=a5db578ddaaedcf4375740e85f5f51db4e193706
Certificate serial: 288183
Authority key identifier: 77:12:68:55:B2:AC:ED:4F:18:E8:4D:88:E8:D2:AF:63:B0:18:27:82
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a5db578ddaaedcf4375740e85f5f51db4e193706.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/b343a245-7eaf-4955-90fa-8e6d6fd43ab8/9c81a04eb4ebecdaf8d2c33a8d0913079f453f8b.roa
Signing time: Tue 26 Mar 2024 05:08:29 +0000
ROA not before: Tue 26 Mar 2024 05:08:29 +0000
ROA not after: Thu 26 Mar 2026 05:08:29 +0000
asID: 52468
IP address blocks: 138.117.140.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2654595 (0x288183)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5db578ddaaedcf4375740e85f5f51db4e193706
Validity
Not Before: Mar 26 05:08:29 2024 GMT
Not After : Mar 26 05:08:29 2026 GMT
Subject: CN=9c81a04eb4ebecdaf8d2c33a8d0913079f453f8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:5b:6a:35:0b:fe:d9:0a:47:cc:15:e9:88:b6:
96:d3:a5:15:80:aa:64:94:c2:aa:2d:4e:6d:47:fe:
e1:af:98:97:30:90:41:ce:46:43:5e:a4:04:78:47:
49:fe:2b:34:c6:b8:60:b8:08:48:be:1a:86:b7:c9:
c1:b3:36:8e:0d:45:94:5e:a3:a4:15:e1:6e:14:5c:
5c:30:fd:c9:3e:b5:64:5c:75:6a:da:46:a7:57:a8:
0c:64:ac:69:72:47:e0:88:42:76:d3:27:28:6c:03:
ad:83:84:ea:95:a9:9f:df:67:d5:f0:fe:ba:b0:be:
3d:5b:f1:64:7c:db:28:bb:27:d7:a5:ad:9f:cf:4a:
89:b2:bd:9a:c4:93:af:b1:1e:8b:e0:7e:a8:7d:96:
cc:ac:40:c7:99:35:e2:79:d7:b5:90:4e:89:bf:de:
fe:68:b3:40:05:12:b3:e9:37:93:22:73:7f:54:11:
63:45:a0:21:26:f8:d8:a8:ef:ac:25:3b:00:e2:03:
aa:b6:ab:c5:bf:3a:94:c2:f7:e4:28:32:8c:e3:6f:
b8:07:1a:78:27:7a:55:a7:11:9a:f4:cc:d5:68:70:
09:d7:11:47:07:ee:0f:b0:97:96:ea:82:d1:18:7f:
e1:65:7a:40:55:6b:51:03:71:a9:28:5b:e1:62:13:
43:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:F2:A9:32:A9:39:CA:48:C3:56:0C:0C:CD:58:5A:FE:79:FC:65:6C
X509v3 Authority Key Identifier:
keyid:77:12:68:55:B2:AC:ED:4F:18:E8:4D:88:E8:D2:AF:63:B0:18:27:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a5db578ddaaedcf4375740e85f5f51db4e193706.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b343a245-7eaf-4955-90fa-8e6d6fd43ab8/9c81a04eb4ebecdaf8d2c33a8d0913079f453f8b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/b343a245-7eaf-4955-90fa-8e6d6fd43ab8/a5db578ddaaedcf4375740e85f5f51db4e193706.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.117.140.0/24
Signature Algorithm: sha256WithRSAEncryption
31:f3:96:a4:4b:94:87:20:88:fe:8e:c3:78:69:a3:f7:a5:82:
78:84:e8:91:6a:86:4f:ec:13:fc:0b:82:c3:39:86:f1:c0:34:
7b:8c:b1:9e:22:0e:db:2b:9b:fd:e9:ff:4d:b6:c9:3c:6e:b9:
23:80:47:85:04:73:bf:2b:5a:7b:37:fe:1b:59:9d:21:c8:d4:
80:22:7f:74:be:c4:29:d1:4d:7b:8b:43:49:8f:01:00:ff:62:
d2:60:13:4d:7a:e7:27:6a:3d:f7:13:64:dd:1a:bc:e4:11:6e:
bc:27:fb:57:a3:6d:17:e6:ec:7e:37:fd:46:b0:e5:f4:6f:ba:
53:1c:c7:ef:71:87:f7:f0:52:69:d3:4e:ef:b2:4e:22:67:a4:
07:91:63:12:da:5d:79:5a:9a:28:64:01:c3:dc:ac:dc:69:4c:
3a:55:11:a6:03:f6:3d:ff:97:be:fb:58:08:5f:10:17:da:f9:
c9:b2:83:f0:77:29:17:8c:ea:d5:df:c0:b2:b8:dc:1b:32:24:
a0:05:22:9c:c9:af:61:98:32:5b:b1:53:cc:46:c2:9e:86:d6:
9e:f2:67:e0:48:98:af:c1:10:88:bb:13:4d:60:7e:be:65:c8:
65:b0:1b:61:98:84:7e:83:4a:0d:15:cc:91:9b:b1:af:17:17:
5a:bf:c8:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:45 2024 by rpki-client on console-ams.rpki-client.org