Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/cabf9a9f-342b-4b73-87d2-3c767ae2101d/7c685a4185efe83c791053a103ded33cae9d8ff6.roa
File: 7c685a4185efe83c791053a103ded33cae9d8ff6.roa (raw, json)
Hash identifier: /4F+VmbCi4QBQyne0gS8WeeCPeAJF8iruHRgpjcdt9k=
Subject key identifier: 76:AD:03:5F:5A:F5:FD:30:83:51:3E:42:BF:F7:72:4E:E9:64:9A:72
Certificate issuer: /CN=1a88658a27071695cf06a4d90d6df905871a233a
Certificate serial: 12633C
Authority key identifier: 1A:D8:E3:FE:32:13:C7:51:55:FB:E4:F8:A7:4E:79:6A:C8:A6:D8:39
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1a88658a27071695cf06a4d90d6df905871a233a.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/cabf9a9f-342b-4b73-87d2-3c767ae2101d/7c685a4185efe83c791053a103ded33cae9d8ff6.roa
Signing time: Fri 18 Aug 2023 08:30:00 +0000
ROA not before: Thu 17 Aug 2023 08:30:00 +0000
ROA not after: Sat 16 Aug 2025 08:30:00 +0000
asID: 265501
IP address blocks: 138.255.118.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1205052 (0x12633c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a88658a27071695cf06a4d90d6df905871a233a
Validity
Not Before: Aug 17 08:30:00 2023 GMT
Not After : Aug 16 08:30:00 2025 GMT
Subject: CN=7c685a4185efe83c791053a103ded33cae9d8ff6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a9:ee:0d:36:c9:1b:f3:76:c8:68:e1:56:91:
5c:44:2e:78:fe:dd:00:8f:f5:32:aa:c7:4d:64:48:
07:7c:c9:aa:59:5d:cd:75:48:e6:65:5c:c5:56:e3:
5a:be:96:3b:f3:0f:1d:cb:6e:6a:82:11:ad:b9:f7:
a6:d8:89:49:b6:37:53:2c:ee:71:ae:77:c8:0a:e2:
59:aa:29:d2:0d:61:fb:32:5f:ef:9f:32:81:06:85:
ef:86:a9:3c:7f:62:07:8a:f3:ce:1b:18:c9:76:34:
b0:3e:d4:e9:6b:1d:5f:52:3f:42:46:0b:36:fe:a4:
ea:97:35:fa:f7:48:d9:2a:98:f5:0d:50:01:42:d7:
f2:0d:09:2c:68:8a:ab:ea:58:0d:38:6f:4e:9b:13:
09:34:a7:43:e5:14:d6:ba:cf:32:18:56:e1:95:c1:
84:6a:d5:a3:21:97:0d:5e:63:fe:ea:2d:a0:23:33:
0b:2b:1b:f0:84:0f:b3:f2:9a:29:88:03:e2:df:0b:
19:03:cb:bb:63:5b:af:6a:ef:31:b5:58:f6:22:2b:
56:c6:12:8c:b6:e2:57:f5:fc:4d:67:f9:ed:5f:4c:
b6:c3:0e:8f:6b:44:94:ff:e5:4f:1e:d4:35:a0:43:
7e:a6:2b:38:b5:5b:18:1e:73:2a:fc:b7:a9:bd:62:
ac:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:AD:03:5F:5A:F5:FD:30:83:51:3E:42:BF:F7:72:4E:E9:64:9A:72
X509v3 Authority Key Identifier:
keyid:1A:D8:E3:FE:32:13:C7:51:55:FB:E4:F8:A7:4E:79:6A:C8:A6:D8:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1a88658a27071695cf06a4d90d6df905871a233a.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/cabf9a9f-342b-4b73-87d2-3c767ae2101d/7c685a4185efe83c791053a103ded33cae9d8ff6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/cabf9a9f-342b-4b73-87d2-3c767ae2101d/1a88658a27071695cf06a4d90d6df905871a233a.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.255.118.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:b5:6f:0a:ef:36:96:48:87:bc:eb:12:88:d0:1a:07:6f:72:
a8:fb:4b:02:19:f8:25:a3:74:0e:d2:ab:dc:e6:8f:67:74:64:
f4:63:a7:5a:b8:1b:88:26:6e:6d:32:96:dd:8e:ff:fb:d0:6d:
ae:98:b2:a1:87:bd:fc:7f:1d:7f:b7:23:a3:92:75:b6:26:e0:
4b:80:11:5d:55:ec:b6:53:e2:98:a3:8b:88:8d:91:b8:c8:53:
9c:84:1a:50:21:04:81:99:dc:36:91:0b:c3:89:e1:7b:3e:67:
90:ca:04:21:23:a9:19:63:5d:1f:2c:7c:9f:02:f3:79:37:86:
32:27:02:97:48:28:a4:81:b3:23:30:cd:b2:ad:f0:b7:8c:4e:
e0:4a:a2:00:cc:50:e4:a4:24:38:e4:fa:49:cf:1f:e5:d9:d0:
93:6f:65:02:f6:49:4b:ff:ca:0f:c6:71:ab:11:d5:33:22:82:
e5:e1:c3:25:1b:74:d3:84:f5:cb:19:1e:d2:6e:4f:44:a8:59:
24:95:7c:43:de:8b:90:b7:7f:31:e8:fc:b5:de:08:72:31:9b:
96:b5:84:97:c5:a9:d9:c9:02:51:6e:f9:a2:0d:85:82:e7:40:
aa:e8:dc:c1:0c:2e:43:4e:4c:d6:de:48:5a:74:72:2a:eb:88:
1f:53:29:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:07 2024 by rpki-client on console-fra.rpki-client.org