Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d6e1f083-cd72-40f5-aee0-6c1b7fafe441/66c733de594293557ace52f7cec1af541a65ba47.roa
File: 66c733de594293557ace52f7cec1af541a65ba47.roa (raw, json)
Hash identifier: x/h5G+DgIJnQUGAkooNSjmDL4Om2k668NCPnMb1TsGU=
Subject key identifier: E5:36:BB:EF:00:A1:F9:66:97:BB:42:C8:FE:87:57:34:2E:D4:5E:BC
Certificate issuer: /CN=d9a06b12727bc0ed97a16a645ac286bdc41e63dc
Certificate serial: 0366
Authority key identifier: C5:6C:A0:40:97:DB:4E:D9:37:61:A5:3F:4B:DF:23:0C:1A:E5:78:28
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d9a06b12727bc0ed97a16a645ac286bdc41e63dc.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/d6e1f083-cd72-40f5-aee0-6c1b7fafe441/66c733de594293557ace52f7cec1af541a65ba47.roa
Signing time: Mon 04 Oct 2021 22:48:26 +0000
ROA not before: Mon 04 Oct 2021 03:00:00 +0000
ROA not after: Wed 04 Oct 2023 03:00:00 +0000
asID: 263829
IP address blocks: 138.36.136.0/22 maxlen: 22
138.219.72.0/22 maxlen: 22
168.181.228.0/22 maxlen: 22
170.82.0.0/22 maxlen: 22
2803:8f80::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 870 (0x366)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9a06b12727bc0ed97a16a645ac286bdc41e63dc
Validity
Not Before: Oct 4 03:00:00 2021 GMT
Not After : Oct 4 03:00:00 2023 GMT
Subject: CN=66c733de594293557ace52f7cec1af541a65ba47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:94:0a:7f:92:77:eb:d5:69:c6:05:a1:7a:a6:
0a:ef:0f:00:1a:bd:e5:8b:b2:c2:f7:08:20:54:49:
fa:60:2f:af:8a:6d:6f:e7:05:b2:b3:12:ca:5f:38:
ea:14:3e:2d:8c:e4:83:4f:54:f4:d9:f1:61:c0:0d:
2a:5c:ca:c7:62:58:e2:72:49:ee:d0:40:a0:bd:91:
23:a6:05:52:d7:63:db:6d:4e:89:43:5a:32:6d:52:
5f:f1:40:08:aa:c1:f6:2a:99:a9:16:19:7b:13:3a:
04:82:09:de:a6:49:01:7d:ca:57:6e:80:b6:09:41:
ac:15:9c:ab:72:2e:8d:30:17:9e:99:bd:6b:de:61:
39:3e:1b:72:c0:a8:f1:40:c1:77:61:77:3a:c1:4c:
56:c4:23:84:bf:61:55:ac:c9:c5:9e:dc:20:b4:70:
ee:5c:59:07:8d:48:a7:7a:44:3d:1e:36:41:11:a8:
48:c4:06:63:d0:97:42:44:48:0c:0b:ec:e0:c2:74:
4e:26:95:7f:d9:4a:43:71:d7:3a:1a:88:ec:2f:38:
c0:93:94:d1:69:4d:e8:7a:92:b3:6b:3b:fd:59:94:
d0:0e:3c:2f:9e:e5:7e:b6:f3:34:79:e1:34:6c:f2:
12:98:05:85:fa:71:5c:22:31:20:61:2f:9a:54:38:
68:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:36:BB:EF:00:A1:F9:66:97:BB:42:C8:FE:87:57:34:2E:D4:5E:BC
X509v3 Authority Key Identifier:
keyid:C5:6C:A0:40:97:DB:4E:D9:37:61:A5:3F:4B:DF:23:0C:1A:E5:78:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d9a06b12727bc0ed97a16a645ac286bdc41e63dc.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d6e1f083-cd72-40f5-aee0-6c1b7fafe441/66c733de594293557ace52f7cec1af541a65ba47.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/d6e1f083-cd72-40f5-aee0-6c1b7fafe441/d9a06b12727bc0ed97a16a645ac286bdc41e63dc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.36.136.0/22
138.219.72.0/22
168.181.228.0/22
170.82.0.0/22
IPv6:
2803:8f80::/32
Signature Algorithm: sha256WithRSAEncryption
14:20:aa:93:77:68:fc:17:52:04:4f:29:7e:01:f6:ed:a4:15:
bf:d2:a2:a9:43:72:d9:49:bc:a0:91:40:1c:8c:71:3e:12:8d:
be:ea:5a:cb:c9:0b:9a:e8:5f:88:33:5d:78:b8:24:53:5a:44:
a9:16:e5:b2:4b:80:c7:ac:77:54:00:17:7d:61:b8:5b:1b:e5:
84:6e:bc:f9:1f:fc:76:06:00:09:0e:09:3d:fd:9d:f8:16:1b:
26:91:12:3c:14:7f:19:30:86:53:b9:ca:79:71:34:eb:52:93:
49:0a:c2:61:5b:18:4b:d6:18:25:76:70:59:aa:6d:a8:fc:13:
07:15:af:93:9c:8f:fa:58:83:6b:a2:77:ef:78:d4:dd:e4:85:
e4:f3:2d:d3:fd:34:55:52:66:3b:71:d2:5b:df:ad:06:c6:35:
84:c6:2e:d9:9e:8e:95:a1:e5:b9:a4:34:10:a1:07:3f:36:7f:
e4:59:95:0b:6b:60:8d:06:75:fc:16:4d:29:89:af:91:f7:c2:
da:b5:41:80:20:4d:05:c2:86:e7:0a:99:2d:d9:58:66:3b:0b:
c3:0f:df:fa:d3:19:4d:9c:64:84:30:7b:33:d9:9a:de:53:70:
a6:32:27:e9:4c:7f:54:02:b8:e4:63:32:72:3b:91:97:bc:d0:
40:df:81:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:08 2024 by rpki-client on console-fra.rpki-client.org