Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b9ba4996-db87-4743-8873-9093046c3273/2a3314a1c2ac6035bdee13e1c7ddfa76b567fcc9.roa
File: 2a3314a1c2ac6035bdee13e1c7ddfa76b567fcc9.roa (raw, json)
Hash identifier: eY+s2sIAZhw53y3DHyfSjm7z6BqrbFOXAqxfDrDI2k0=
Subject key identifier: 9A:F6:D3:9C:A4:A1:93:A9:D2:14:FD:C9:A2:F2:BF:27:91:F5:1F:08
Certificate issuer: /CN=fffdaf9f66bb88ef40010d7ad90a6d20ab14ed4c
Certificate serial: 27E4A3
Authority key identifier: E9:04:9F:BD:E0:65:A3:72:D2:B6:C4:AE:F9:EB:3A:67:F4:11:D2:C9
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fffdaf9f66bb88ef40010d7ad90a6d20ab14ed4c.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/b9ba4996-db87-4743-8873-9093046c3273/2a3314a1c2ac6035bdee13e1c7ddfa76b567fcc9.roa
Signing time: Fri 05 Apr 2024 15:11:49 +0000
ROA not before: Fri 05 Apr 2024 15:11:49 +0000
ROA not after: Sun 05 Apr 2026 15:11:49 +0000
asID: 265688
IP address blocks: 138.117.84.0/22 maxlen: 22
138.117.84.0/23 maxlen: 23
138.117.86.0/23 maxlen: 23
138.117.84.0/24 maxlen: 24
138.117.85.0/24 maxlen: 24
138.117.86.0/24 maxlen: 24
138.117.87.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2614435 (0x27e4a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fffdaf9f66bb88ef40010d7ad90a6d20ab14ed4c
Validity
Not Before: Apr 5 15:11:49 2024 GMT
Not After : Apr 5 15:11:49 2026 GMT
Subject: CN=2a3314a1c2ac6035bdee13e1c7ddfa76b567fcc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:8d:95:6f:33:86:ad:7c:c6:30:e2:ad:b5:d8:
4b:96:f9:35:63:b8:f1:6e:78:fc:fd:18:17:55:04:
fe:ab:7b:4b:d5:c8:ad:d7:91:20:2b:b0:9a:96:bc:
d4:98:c6:29:94:62:fc:b5:92:33:69:96:b3:75:ab:
01:ff:8d:1a:77:c0:0b:49:fc:30:bc:ef:6a:68:47:
40:3a:7c:80:fc:dc:fa:1d:53:51:0f:a7:2b:d4:8a:
68:16:62:92:3c:6d:14:14:46:6a:b1:20:22:4c:56:
74:b2:5a:a6:2f:f5:b0:c2:91:5f:2d:46:ef:a4:f6:
39:cf:3b:c0:1c:7b:62:0c:f8:e0:8e:05:c4:1c:f0:
15:61:9f:3c:1e:96:13:e3:f2:c1:75:4d:bb:d2:e9:
b0:4d:37:f6:2b:f8:8a:ee:fb:56:71:62:b4:ab:cb:
b7:8a:ce:64:10:00:c8:49:30:e6:ab:96:3a:24:e8:
6c:c1:7c:78:26:23:6c:ac:a8:0f:bf:a1:07:4c:74:
1a:a2:73:60:55:08:e0:47:57:76:0d:ab:35:93:7d:
9c:d2:4c:e6:31:69:ee:ce:94:b6:d6:e4:ee:e5:29:
22:5f:d6:ea:7b:bb:a4:69:62:8d:52:a2:4b:48:11:
67:83:b8:7c:12:63:86:ca:9e:c7:58:09:76:5b:d4:
2a:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:F6:D3:9C:A4:A1:93:A9:D2:14:FD:C9:A2:F2:BF:27:91:F5:1F:08
X509v3 Authority Key Identifier:
keyid:E9:04:9F:BD:E0:65:A3:72:D2:B6:C4:AE:F9:EB:3A:67:F4:11:D2:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fffdaf9f66bb88ef40010d7ad90a6d20ab14ed4c.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b9ba4996-db87-4743-8873-9093046c3273/2a3314a1c2ac6035bdee13e1c7ddfa76b567fcc9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/b9ba4996-db87-4743-8873-9093046c3273/fffdaf9f66bb88ef40010d7ad90a6d20ab14ed4c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.117.84.0/22
Signature Algorithm: sha256WithRSAEncryption
19:18:e1:d1:22:77:1f:f9:28:d4:9e:68:81:39:47:26:03:28:
cd:0d:2f:9a:a2:e8:e9:b0:60:92:2a:ac:41:59:bc:66:12:e7:
c1:84:48:c3:76:9a:75:e4:b6:9c:e4:34:a4:f6:dd:b4:53:ed:
08:c7:61:8a:75:ba:c0:ce:59:83:29:5c:55:6d:29:43:14:2a:
e9:bc:38:65:77:69:bc:37:b8:de:ee:71:42:9e:bc:e6:4c:7f:
6d:93:99:78:ca:f1:81:17:ec:65:53:46:2c:55:6a:2f:43:87:
71:a0:09:6d:32:fb:45:35:71:02:98:49:fe:68:ba:b9:62:11:
28:b2:e9:40:12:ec:ac:82:d2:77:3e:79:1f:71:9f:d7:33:b9:
df:e1:ce:49:d6:31:0b:83:c6:f7:e1:0d:b2:a8:88:9e:d4:d2:
bd:b0:2a:f6:2d:90:77:71:41:fc:e4:6d:da:95:8f:be:a9:ed:
5e:78:69:6d:e6:c3:17:80:f5:c2:a8:44:73:b5:b0:dc:0e:84:
aa:24:51:26:e6:62:f3:6a:37:f5:57:9b:89:55:c5:ba:79:b6:
8b:71:e9:48:45:e4:96:1f:a2:c6:62:da:f4:b2:a6:33:63:aa:
c6:df:31:7a:97:84:7e:39:27:f1:af:14:ce:4d:aa:6a:f1:95:
1f:79:b3:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:30 2024 by rpki-client on console-fra.rpki-client.org