Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d9aa1d16-4213-43bf-a661-00cb484c18c9/e40c095df5c6bb3c603e545d6508d661a5308ebd.roa
File: e40c095df5c6bb3c603e545d6508d661a5308ebd.roa (raw, json)
Hash identifier: s+m9/UV3qcMpKFIaUTc5FaMMkoQHE52hfJPefzdRspI=
Subject key identifier: 22:01:4B:C6:92:2C:13:F4:48:D5:1B:05:3F:88:11:6F:A9:A4:2E:D3
Certificate issuer: /CN=7e80f91e780a625cca35dfc27d18ede75da0bb6a
Certificate serial: 0F2782
Authority key identifier: B3:55:22:80:71:A0:E2:A3:40:29:8B:26:9D:32:86:4F:A3:40:4B:72
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7e80f91e780a625cca35dfc27d18ede75da0bb6a.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/d9aa1d16-4213-43bf-a661-00cb484c18c9/e40c095df5c6bb3c603e545d6508d661a5308ebd.roa
Signing time: Fri 25 Jun 2021 08:16:21 +0000
ROA not before: Fri 25 Jun 2021 03:00:00 +0000
ROA not after: Thu 25 Jun 2026 03:00:00 +0000
asID: 263222
IP address blocks: 138.94.240.0/22 maxlen: 24
143.137.192.0/22 maxlen: 24
161.0.112.0/21 maxlen: 24
170.0.244.0/22 maxlen: 24
170.82.216.0/22 maxlen: 24
2803:4680::/32 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 993154 (0xf2782)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e80f91e780a625cca35dfc27d18ede75da0bb6a
Validity
Not Before: Jun 25 03:00:00 2021 GMT
Not After : Jun 25 03:00:00 2026 GMT
Subject: CN=e40c095df5c6bb3c603e545d6508d661a5308ebd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:73:81:a6:88:02:66:7f:41:ac:42:d7:45:c1:
1b:5f:07:9f:46:62:e5:de:52:40:70:cc:8d:b3:d9:
52:a0:8a:f5:40:2e:32:20:3c:cc:fe:bd:69:d7:b5:
e1:66:d2:8d:fc:44:c7:74:62:db:05:1f:e5:b2:01:
9e:87:54:4f:0f:66:0d:86:c9:97:8c:c4:79:a4:8d:
13:e9:4c:a2:38:9e:ec:9d:52:9c:64:f2:a0:69:7d:
8e:23:c4:7f:13:4f:dc:37:39:10:25:b2:5d:6a:00:
f8:c1:a4:82:05:95:7b:d5:aa:5a:e0:86:3c:50:46:
91:34:e4:a0:6f:dc:31:5e:1f:d7:44:65:6f:b4:62:
83:62:d9:29:c9:5d:b0:dc:aa:99:25:c2:6e:67:aa:
24:14:52:b0:b5:98:b7:58:c7:b3:e9:15:7f:40:d7:
79:cd:b8:c7:c2:28:8c:9c:11:9e:da:05:b9:9c:3a:
1f:1b:f6:91:a3:83:b6:58:18:a8:e4:21:f4:15:29:
eb:48:3e:8c:33:eb:f7:22:60:0b:a2:95:05:4d:d6:
eb:eb:60:4c:22:84:8e:f7:83:e5:41:0b:86:1d:2a:
07:cf:ab:b1:2a:b9:e3:83:de:dc:47:8d:be:d8:d1:
ab:44:5f:12:a0:99:d7:3d:1e:c4:e7:5e:e0:7d:b5:
80:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:01:4B:C6:92:2C:13:F4:48:D5:1B:05:3F:88:11:6F:A9:A4:2E:D3
X509v3 Authority Key Identifier:
keyid:B3:55:22:80:71:A0:E2:A3:40:29:8B:26:9D:32:86:4F:A3:40:4B:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7e80f91e780a625cca35dfc27d18ede75da0bb6a.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d9aa1d16-4213-43bf-a661-00cb484c18c9/e40c095df5c6bb3c603e545d6508d661a5308ebd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/d9aa1d16-4213-43bf-a661-00cb484c18c9/7e80f91e780a625cca35dfc27d18ede75da0bb6a.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.94.240.0/22
143.137.192.0/22
161.0.112.0/21
170.0.244.0/22
170.82.216.0/22
IPv6:
2803:4680::/32
Signature Algorithm: sha256WithRSAEncryption
93:1c:2c:a6:bb:46:61:35:cf:b6:00:95:e3:34:5c:88:91:7e:
0a:ce:36:10:f8:df:95:4f:64:9e:02:8d:13:9d:f7:53:cf:47:
50:53:3e:23:5a:5c:a8:3b:18:79:1b:47:43:db:4a:f0:4d:ef:
a1:4c:bc:53:96:dd:5a:aa:4a:21:30:32:e9:95:1a:d6:bf:48:
aa:9c:8e:9f:0e:16:f4:4b:9f:dd:ab:d7:14:f9:93:c7:0c:87:
4d:50:ec:14:2d:03:ff:ea:a2:fe:ee:f6:c6:f6:53:c4:90:66:
ce:e4:16:26:32:cb:9c:65:4f:b4:8b:43:27:da:ae:d8:3d:e1:
dc:08:e0:12:90:92:ad:86:2d:c3:27:2e:4b:09:00:ff:9a:d7:
43:9c:e0:5b:0d:ef:c9:f5:dd:7a:9d:8a:cb:3e:7f:97:4d:db:
fb:3d:ec:81:f8:16:44:4c:b0:63:ca:59:58:f5:c2:18:e0:3f:
77:2d:32:47:54:40:4c:8e:39:e0:00:4f:19:f7:95:05:b0:44:
b1:d0:6f:17:96:46:55:51:b4:8f:b3:72:38:5f:d9:b4:86:ba:
3f:56:a9:66:9e:71:ed:d5:6a:4e:31:8e:e3:84:f2:49:52:66:
e9:43:4f:c0:f4:fe:30:71:c7:29:7a:36:63:ae:4f:39:a9:eb:
3c:19:b4:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:08 2024 by rpki-client on console-fra.rpki-client.org