Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/bc852b68-310e-416e-8aef-e77c33973f65/19741e64366153935a57718f24030bc3256e652b.roa
File: 19741e64366153935a57718f24030bc3256e652b.roa (raw, json)
Hash identifier: mH7Wc/y722k2Kj7AMDwbuEyQrUki/GJ3GwUofEKWu3g=
Subject key identifier: 53:53:50:BA:35:6E:1D:F0:F1:A7:6D:70:CA:DA:31:11:3F:FE:F7:D7
Certificate issuer: /CN=9ff432522dffd64924cbcac442118f937ddfadbc
Certificate serial: 0DECD7
Authority key identifier: 20:7C:58:18:14:11:86:FB:BD:51:3C:5B:6B:6E:72:67:DE:80:AB:9E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9ff432522dffd64924cbcac442118f937ddfadbc.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/bc852b68-310e-416e-8aef-e77c33973f65/19741e64366153935a57718f24030bc3256e652b.roa
Signing time: Wed 24 Mar 2021 14:30:12 +0000
ROA not before: Wed 24 Mar 2021 14:30:12 +0000
ROA not after: Tue 24 Mar 2026 14:30:12 +0000
asID: 52364
IP address blocks: 138.185.80.0/22 maxlen: 24
186.148.112.0/21 maxlen: 24
190.94.160.0/20 maxlen: 24
191.102.40.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 912599 (0xdecd7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ff432522dffd64924cbcac442118f937ddfadbc
Validity
Not Before: Mar 24 14:30:12 2021 GMT
Not After : Mar 24 14:30:12 2026 GMT
Subject: CN=19741e64366153935a57718f24030bc3256e652b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:98:13:ac:3f:ca:fd:f4:f6:82:64:a6:79:04:
39:34:48:f2:2e:a3:37:40:dd:a3:8e:ca:58:1c:72:
f3:5b:6a:c8:44:8a:46:26:2c:96:f6:aa:4d:8d:f8:
b4:f5:73:9c:90:0d:0e:b8:5c:3a:77:db:a7:a0:e0:
27:ce:5d:29:70:08:32:6e:37:0c:b6:42:91:b6:2a:
de:25:05:a1:22:f2:7f:af:a0:27:41:d8:90:a1:b7:
d2:eb:f0:00:4e:1a:94:69:6f:4a:27:43:48:dc:f9:
41:71:e7:5e:3d:58:10:60:5b:8a:d5:32:63:ce:63:
19:8d:8c:a6:59:68:71:82:d3:d6:be:36:a8:99:5f:
c1:8d:70:b3:69:85:0d:83:31:7b:83:fe:ac:93:3a:
70:6c:26:48:b7:76:61:86:1c:7f:c4:20:b6:e6:3c:
47:b7:c4:c6:02:25:fc:78:3d:dc:37:9d:1a:59:e7:
c0:a7:6a:79:76:2e:03:d2:c8:d2:ef:fc:d6:af:03:
01:05:01:8f:70:3c:3a:d1:0d:00:ad:2d:b5:d1:53:
c0:7a:4c:74:89:18:40:3b:60:f8:6d:11:db:43:c8:
9f:c0:6f:c0:b3:34:a4:c5:79:4b:f3:d4:fa:96:32:
57:98:01:4e:15:ab:5f:5c:89:e8:88:60:f4:de:64:
be:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:53:50:BA:35:6E:1D:F0:F1:A7:6D:70:CA:DA:31:11:3F:FE:F7:D7
X509v3 Authority Key Identifier:
keyid:20:7C:58:18:14:11:86:FB:BD:51:3C:5B:6B:6E:72:67:DE:80:AB:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9ff432522dffd64924cbcac442118f937ddfadbc.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/bc852b68-310e-416e-8aef-e77c33973f65/19741e64366153935a57718f24030bc3256e652b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/bc852b68-310e-416e-8aef-e77c33973f65/9ff432522dffd64924cbcac442118f937ddfadbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.185.80.0/22
186.148.112.0/21
190.94.160.0/20
191.102.40.0/21
Signature Algorithm: sha256WithRSAEncryption
00:59:64:ba:d2:3c:10:03:13:8f:6c:cb:58:82:68:c1:69:c7:
db:45:45:6b:2f:c4:f3:7a:0e:3f:06:cf:66:f8:67:7b:d9:1e:
be:81:39:98:e7:3a:68:85:14:91:ec:08:b7:9e:58:37:ad:e4:
53:a8:45:8f:bf:40:31:60:6a:0a:40:32:e7:b3:19:0b:f0:2a:
45:2c:c9:02:08:54:07:ba:01:11:1b:a7:44:39:0f:89:e9:51:
c8:aa:97:00:3a:c6:1a:ba:3a:a4:da:9a:8a:13:a5:03:a8:ec:
37:20:70:03:dd:06:d4:ff:01:6e:ef:b4:b7:14:07:71:6b:63:
c0:19:dd:d5:3e:d6:2e:67:b2:4d:6c:5a:2b:5e:06:1a:d4:ec:
88:dc:7f:61:db:37:e6:9c:47:e1:2c:42:0e:0f:b6:e0:8d:61:
4a:6b:f2:54:07:f9:be:e2:c5:f0:2f:fc:21:b4:64:07:56:ad:
c5:08:89:c2:a4:2b:09:8f:81:7a:83:b9:8a:73:d3:f9:f3:56:
df:02:33:9b:80:73:c4:5a:74:ee:d3:7f:8c:6a:bf:aa:f5:5b:
c7:10:8f:ac:b3:6e:7d:9c:b1:11:c8:c1:25:99:2a:9a:5a:c3:
73:66:20:c5:ad:be:ee:e7:86:ae:0d:58:5a:93:6f:f8:49:aa:
6c:47:14:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:46 2024 by rpki-client on console-ams.rpki-client.org