Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ce70e6b8-9013-4bd6-9c8f-dfbbfa3bc112/0685d69f418c17a2a300e34f771e832f995fc64f.roa
File: 0685d69f418c17a2a300e34f771e832f995fc64f.roa (raw, json)
Hash identifier: 2xjMKK8X+JTv3RWQt+ZSMFDbiAQpxmq7WQQhw1nE00E=
Subject key identifier: 7D:8E:65:B9:F5:9B:50:A6:DA:A7:69:81:49:DF:29:67:66:E8:B4:66
Certificate issuer: /CN=a79f7c916be3a1ea7251327afacd5a877554edc2
Certificate serial: 278EC9
Authority key identifier: 72:FE:A5:0E:06:DE:B4:49:AE:7A:DE:6D:E0:3A:29:CA:3D:AA:DF:1B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a79f7c916be3a1ea7251327afacd5a877554edc2.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/ce70e6b8-9013-4bd6-9c8f-dfbbfa3bc112/0685d69f418c17a2a300e34f771e832f995fc64f.roa
Signing time: Wed 21 Feb 2024 08:30:56 +0000
ROA not before: Wed 21 Feb 2024 08:30:56 +0000
ROA not after: Fri 20 Feb 2026 08:30:56 +0000
asID: 52327
IP address blocks: 131.72.240.0/23 maxlen: 24
131.72.241.0/24 maxlen: 24
131.72.242.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2592457 (0x278ec9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a79f7c916be3a1ea7251327afacd5a877554edc2
Validity
Not Before: Feb 21 08:30:56 2024 GMT
Not After : Feb 20 08:30:56 2026 GMT
Subject: CN=0685d69f418c17a2a300e34f771e832f995fc64f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:9f:81:77:95:0b:7e:f1:39:25:25:2b:70:21:
c3:e6:2e:c0:2a:eb:f2:c9:6b:39:ba:10:84:9c:c8:
2d:bb:e9:18:c0:47:a0:36:7e:45:61:04:fd:dc:6c:
31:1b:f9:77:b0:9b:5c:3e:a9:b5:37:1e:12:18:b3:
09:34:f3:a3:d3:8b:35:14:fd:2f:cb:d4:21:d2:c5:
5d:40:73:71:6b:6e:61:df:59:98:22:d1:3e:6c:8c:
16:03:04:e3:58:48:95:5e:90:f2:02:5d:67:08:ed:
ca:71:0f:fe:9c:ff:3c:59:58:3b:8c:56:43:54:60:
5c:15:1c:76:7e:d8:b8:00:ba:f8:ad:8a:c6:6a:46:
19:24:bc:1c:3e:c7:1e:b5:a2:de:08:f3:6d:b7:b4:
ed:2e:7f:c6:2d:1e:7c:76:10:67:8f:48:2f:30:fd:
a7:8c:75:bf:ab:64:80:82:87:bd:8e:5b:ad:a6:c8:
85:4d:94:b5:ac:26:2d:be:68:25:bc:46:ee:36:4f:
90:86:00:c7:54:78:dc:64:d7:eb:26:8d:18:ac:d6:
1c:f2:48:e8:42:1b:44:29:48:60:89:9a:61:af:f1:
7e:e9:cb:24:f2:58:dd:d8:b7:b2:b6:34:eb:3d:e1:
2f:27:fa:b2:8d:bd:71:cc:77:86:b6:03:88:eb:80:
48:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:8E:65:B9:F5:9B:50:A6:DA:A7:69:81:49:DF:29:67:66:E8:B4:66
X509v3 Authority Key Identifier:
keyid:72:FE:A5:0E:06:DE:B4:49:AE:7A:DE:6D:E0:3A:29:CA:3D:AA:DF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a79f7c916be3a1ea7251327afacd5a877554edc2.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ce70e6b8-9013-4bd6-9c8f-dfbbfa3bc112/0685d69f418c17a2a300e34f771e832f995fc64f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/ce70e6b8-9013-4bd6-9c8f-dfbbfa3bc112/a79f7c916be3a1ea7251327afacd5a877554edc2.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.72.240.0-131.72.242.255
Signature Algorithm: sha256WithRSAEncryption
2b:87:d3:d9:d2:cc:65:72:8d:f1:cb:da:fd:4e:92:00:61:86:
53:73:71:b7:b5:7d:56:0a:ae:bf:5b:55:8f:f7:53:3f:46:51:
9d:c6:d2:aa:4a:e1:75:8e:f0:0d:5d:6b:ac:49:b8:d4:50:5e:
6f:d5:7c:bf:e4:a3:28:23:6f:79:ab:3f:7d:0f:b8:2c:13:ab:
8a:cb:0a:f8:67:c1:a6:26:58:49:47:00:5f:52:ab:40:0d:fb:
bf:5e:78:ed:08:ee:38:4f:93:90:62:66:a8:bf:fa:62:e0:9a:
d2:ba:6a:61:20:ea:df:59:0c:9b:bb:95:43:10:4b:11:02:4e:
29:6a:47:67:d9:33:9a:29:5b:85:8e:ea:dd:7c:6d:76:8b:68:
90:0a:c3:9a:f7:1b:a9:49:c1:55:3e:a9:e1:31:2f:c4:c1:b0:
cf:e0:db:88:f3:c8:f2:c2:95:66:96:7a:93:06:0b:1f:79:20:
06:df:ba:56:07:00:a8:60:ab:53:a9:3d:e9:52:07:3c:82:d4:
7b:ab:5f:78:a3:b4:3a:2d:68:08:23:77:2c:fe:de:0d:55:e5:
38:47:27:b4:16:a9:ad:26:f2:e5:44:ec:06:82:43:46:43:86:
7c:04:c2:79:62:52:17:7d:04:59:23:9b:c0:2a:35:15:95:cc:
73:65:04:0c
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIDJ47JMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGE3
OWY3YzkxNmJlM2ExZWE3MjUxMzI3YWZhY2Q1YTg3NzU1NGVkYzIwHhcNMjQwMjIx
MDgzMDU2WhcNMjYwMjIwMDgzMDU2WjAzMTEwLwYDVQQDEygwNjg1ZDY5ZjQxOGMx
N2EyYTMwMGUzNGY3NzFlODMyZjk5NWZjNjRmMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAq5+Bd5ULfvE5JSUrcCHD5i7AKuvyyWs5uhCEnMgtu+kYwEeg
Nn5FYQT93GwxG/l3sJtcPqm1Nx4SGLMJNPOj04s1FP0vy9Qh0sVdQHNxa25h31mY
ItE+bIwWAwTjWEiVXpDyAl1nCO3KcQ/+nP88WVg7jFZDVGBcFRx2fti4ALr4rYrG
akYZJLwcPscetaLeCPNtt7TtLn/GLR58dhBnj0gvMP2njHW/q2SAgoe9jlutpsiF
TZS1rCYtvmglvEbuNk+QhgDHVHjcZNfrJo0YrNYc8kjoQhtEKUhgiZphr/F+6csk
8ljd2LeytjTrPeEvJ/qyjb1xzHeGtgOI64BITwIDAQABo4ICYzCCAl8wHQYDVR0O
BBYEFH2OZbn1m1Cm2qdpgUnfKWdm6LRmMB8GA1UdIwQYMBaAFHL+pQ4G3rRJrnre
beA6Kco9qt8bMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYTc5Zjdj
OTE2YmUzYTFlYTcyNTEzMjdhZmFjZDVhODc3NTU0ZWRjMi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvY2U3MGU2YjgtOTAxMy00YmQ2LTljOGYtZGZiYmZh
M2JjMTEyLzA2ODVkNjlmNDE4YzE3YTJhMzAwZTM0Zjc3MWU4MzJmOTk1ZmM2NGYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9jZTcwZTZiOC05MDEzLTRiZDYtOWM4Zi1kZmJi
ZmEzYmMxMTIvYTc5ZjdjOTE2YmUzYTFlYTcyNTEzMjdhZmFjZDVhODc3NTU0ZWRj
Mi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAnBggrBgEFBQcBBwEB/wQY
MBYwFAQCAAEwDjAMAwQEg0jwAwQAg0jyMA0GCSqGSIb3DQEBCwUAA4IBAQArh9PZ
0sxlco3xy9r9TpIAYYZTc3G3tX1WCq6/W1WP91M/RlGdxtKqSuF1jvANXWusSbjU
UF5v1Xy/5KMoI295qz99D7gsE6uKywr4Z8GmJlhJRwBfUqtADfu/XnjtCO44T5OQ
Ymaov/pi4JrSumphIOrfWQybu5VDEEsRAk4pakdn2TOaKVuFjurdfG12i2iQCsOa
9xupScFVPqnhMS/EwbDP4NuI88jywpVmlnqTBgsfeSAG37pWBwCoYKtTqT3pUgc8
gtR7q194o7Q6LWgII3cs/t4NVeU4Rye0FqmtJvLlROwGgkNGQ4Z8BMJ5YlIXfQRZ
I5vAKjUVlcxzZQQM
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:31 2024 by rpki-client on console-fra.rpki-client.org