Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b343a245-7eaf-4955-90fa-8e6d6fd43ab8/afb2db37cfce39b04d912ba7607baf03eb45d900.roa
File: afb2db37cfce39b04d912ba7607baf03eb45d900.roa (raw, json)
Hash identifier: hezIxgNqTVP1ijjpFdE/gjxcjsnltx/AozpGAQuf9BE=
Subject key identifier: 50:00:F8:71:D6:E0:7D:B7:FA:7D:1E:D4:4F:23:EC:65:AA:21:C0:C5
Certificate issuer: /CN=a5db578ddaaedcf4375740e85f5f51db4e193706
Certificate serial: 1F3C8D
Authority key identifier: 77:12:68:55:B2:AC:ED:4F:18:E8:4D:88:E8:D2:AF:63:B0:18:27:82
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a5db578ddaaedcf4375740e85f5f51db4e193706.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/b343a245-7eaf-4955-90fa-8e6d6fd43ab8/afb2db37cfce39b04d912ba7607baf03eb45d900.roa
Signing time: Fri 24 Mar 2023 09:51:32 +0000
ROA not before: Sat 20 Mar 2021 14:41:42 +0000
ROA not after: Tue 24 Mar 2026 14:41:42 +0000
asID: 263761
IP address blocks: 138.117.142.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2047117 (0x1f3c8d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5db578ddaaedcf4375740e85f5f51db4e193706
Validity
Not Before: Mar 20 14:41:42 2021 GMT
Not After : Mar 24 14:41:42 2026 GMT
Subject: CN=afb2db37cfce39b04d912ba7607baf03eb45d900
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:2e:24:38:56:ad:32:db:10:d8:2c:62:36:65:
bd:58:6c:5a:98:5a:65:f2:a7:b7:bb:9d:1c:db:37:
fa:22:35:35:60:66:8b:c1:02:4a:a7:c7:4f:69:08:
f7:17:8b:bf:a1:21:9f:7e:4a:d6:58:72:28:ac:c3:
99:10:29:28:95:86:1f:a2:06:f2:09:b5:8c:03:bc:
0b:ac:f3:1d:08:38:a0:ef:33:87:7d:6c:62:8c:d2:
28:c0:36:fa:63:68:8b:72:41:07:bf:97:49:d2:d1:
30:24:22:01:4e:18:a2:bd:96:63:41:b1:43:95:67:
84:ee:a7:2c:ac:32:11:57:8e:8e:63:76:64:bc:31:
30:87:b8:a5:14:59:a3:36:64:0e:da:0c:bc:2a:64:
17:f9:8a:25:d0:43:e0:d4:30:50:98:37:cb:63:c1:
ed:19:99:30:5b:5f:e2:e2:e5:6c:16:19:f4:54:e0:
4e:7a:7c:d1:1d:e1:16:11:4f:2b:16:32:e4:02:13:
7b:f3:72:87:23:07:a2:84:d2:65:91:81:76:66:8f:
47:a3:75:77:31:36:95:6d:6c:a7:68:38:df:39:d1:
59:fe:58:22:bf:41:e6:ac:24:70:ed:7f:e0:2c:d7:
58:33:10:b3:2a:3a:46:0d:79:a0:4f:d7:72:94:24:
cc:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:00:F8:71:D6:E0:7D:B7:FA:7D:1E:D4:4F:23:EC:65:AA:21:C0:C5
X509v3 Authority Key Identifier:
keyid:77:12:68:55:B2:AC:ED:4F:18:E8:4D:88:E8:D2:AF:63:B0:18:27:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a5db578ddaaedcf4375740e85f5f51db4e193706.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b343a245-7eaf-4955-90fa-8e6d6fd43ab8/afb2db37cfce39b04d912ba7607baf03eb45d900.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/b343a245-7eaf-4955-90fa-8e6d6fd43ab8/a5db578ddaaedcf4375740e85f5f51db4e193706.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.117.142.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:e7:8f:de:c8:47:6e:dc:e2:d6:7d:98:35:55:57:bb:03:0e:
99:02:58:6f:bd:da:71:ab:9b:6d:76:80:63:1f:ee:3f:8f:9d:
c1:f9:c4:57:87:d3:d4:e3:72:db:9b:62:0c:d1:4b:f2:ec:77:
a5:7b:58:8e:2d:9a:91:d4:56:e8:d9:cb:4e:ba:be:18:75:12:
a0:01:87:2c:d8:b3:f2:e6:15:ff:89:a0:9b:1e:c5:b6:1b:67:
5e:68:fc:9a:93:d2:65:77:59:10:d2:a5:0f:04:11:2f:8c:aa:
1d:3e:f8:d5:02:d8:ca:bf:09:a0:32:5d:30:db:74:f7:57:ef:
63:28:34:c8:9f:17:19:1e:68:62:4f:c8:5f:f7:0d:9e:9c:1c:
32:be:a4:0e:83:e4:93:7c:55:bf:e1:b4:1e:b5:6d:1c:0e:94:
5d:f2:d4:f3:e5:cc:54:59:2f:ff:e9:06:c7:b3:93:4a:90:5b:
6c:02:fb:3b:c6:ce:83:f8:62:f7:a6:d8:cf:6e:47:c6:d3:96:
cb:b6:f0:d2:9f:a5:57:30:48:6d:e5:96:f4:b3:73:8c:59:c9:
75:b4:60:dd:55:9d:a4:1c:09:a2:dc:69:a1:1a:04:f0:c0:cd:
63:8a:63:b9:f2:b1:da:0e:cc:ad:ee:e5:86:c6:e5:2d:10:01:
44:cf:ee:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:23 2024 by rpki-client on console-ams.rpki-client.org