Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/debb61c0-6400-46d2-a41c-7346a80fe05c/dd9aa11814d79586a06bc0f4eeff966136d1656f.roa
File: dd9aa11814d79586a06bc0f4eeff966136d1656f.roa (raw, json)
Hash identifier: EXXzsRXzj/Ld3mLUB6vx6r5e3lnDFMbMmLY4yC8t73A=
Subject key identifier: 84:C1:B3:F6:4F:66:DD:8B:0D:C1:0B:54:E4:55:0A:31:3E:FD:0B:52
Certificate issuer: /CN=8d55ec90e8b6e5eca6a4060a9a18532fe1f391b5
Certificate serial: 0C58
Authority key identifier: D9:5B:B7:5B:CC:D6:84:81:82:30:92:AF:E5:A7:96:77:9D:89:1B:63
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8d55ec90e8b6e5eca6a4060a9a18532fe1f391b5.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/debb61c0-6400-46d2-a41c-7346a80fe05c/dd9aa11814d79586a06bc0f4eeff966136d1656f.roa
Signing time: Fri 04 Jun 2021 02:31:14 +0000
ROA not before: Thu 03 Jun 2021 03:00:00 +0000
ROA not after: Sat 03 Jun 2023 03:00:00 +0000
asID: 263833
IP address blocks: 138.255.171.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3160 (0xc58)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d55ec90e8b6e5eca6a4060a9a18532fe1f391b5
Validity
Not Before: Jun 3 03:00:00 2021 GMT
Not After : Jun 3 03:00:00 2023 GMT
Subject: CN=dd9aa11814d79586a06bc0f4eeff966136d1656f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a6:09:7f:73:e4:51:06:13:8f:51:05:4d:ac:
5b:cc:49:af:49:f5:bd:68:70:07:85:1a:93:78:9b:
7e:d1:79:e0:17:4d:6f:02:aa:93:f3:69:41:c3:d5:
b4:78:b1:24:4e:72:cb:0c:07:42:da:9c:5a:b8:cc:
4b:8b:a2:92:d8:89:03:24:18:82:51:e7:db:5a:ae:
69:6b:dc:14:ff:c4:01:e4:16:32:6f:f6:1f:69:ff:
2f:8a:5b:04:9b:68:b8:e2:91:d0:ed:2e:5f:8d:60:
2e:d5:ed:53:21:e0:ec:b5:b9:63:b5:d2:77:20:97:
89:ca:45:dc:bf:ed:b1:43:bd:5b:8c:61:4c:d0:40:
ba:64:15:b5:98:9e:5a:30:6c:a5:db:bc:5b:ea:0e:
cb:83:76:f7:be:cf:df:5e:0a:66:50:f2:27:8b:fc:
7e:29:f0:31:85:f3:f2:f2:1d:c5:b8:23:12:44:4b:
6a:ba:a4:35:1c:10:d4:55:ff:92:f6:56:79:a4:19:
fd:4b:c2:e5:c1:ac:3a:6a:46:da:69:49:9a:67:70:
bb:62:75:20:9a:70:19:da:39:17:90:b3:ba:71:09:
fd:6b:a7:3e:1b:c5:03:3f:18:f1:52:80:06:e5:d7:
6a:4e:84:a6:7f:5c:90:c2:81:a5:38:4a:95:2b:88:
be:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:C1:B3:F6:4F:66:DD:8B:0D:C1:0B:54:E4:55:0A:31:3E:FD:0B:52
X509v3 Authority Key Identifier:
keyid:D9:5B:B7:5B:CC:D6:84:81:82:30:92:AF:E5:A7:96:77:9D:89:1B:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8d55ec90e8b6e5eca6a4060a9a18532fe1f391b5.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/debb61c0-6400-46d2-a41c-7346a80fe05c/dd9aa11814d79586a06bc0f4eeff966136d1656f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/debb61c0-6400-46d2-a41c-7346a80fe05c/8d55ec90e8b6e5eca6a4060a9a18532fe1f391b5.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.255.171.0/24
Signature Algorithm: sha256WithRSAEncryption
82:b4:89:6d:56:82:11:5a:0d:e1:99:27:93:b7:5c:31:59:74:
fa:ed:26:78:b0:09:37:e0:12:7f:dd:22:85:bd:f3:f1:78:27:
72:9b:a3:9c:0c:37:f1:b3:d3:be:3c:13:1c:8d:e1:9d:41:d4:
d0:65:16:89:59:cf:75:08:55:0c:2d:52:19:7e:b7:15:7a:32:
b3:08:39:d3:88:91:58:5a:0d:c1:d0:ad:15:08:04:6b:16:1d:
92:d9:62:df:81:ce:98:93:5c:45:64:31:d1:ab:6b:51:d1:6d:
59:6e:89:a4:a2:82:8a:d2:4b:3f:84:be:73:33:ab:aa:b9:40:
01:0c:72:ff:7c:38:6a:e2:25:91:a9:e5:fd:dc:14:a2:d3:ae:
bd:77:b8:20:6c:13:1e:b9:7c:37:1d:59:42:35:34:86:5c:c9:
60:fd:fb:e0:cd:e8:92:b0:c6:6d:d2:e8:7a:41:0b:31:7d:e8:
3c:ee:7b:f1:ff:ae:dd:1b:33:cc:f2:5c:84:4e:2a:52:f0:a7:
dd:94:19:77:2b:6b:18:6c:46:55:6e:54:da:c8:00:1f:ec:c8:
b7:a5:6a:a8:da:10:f1:4e:e9:c0:e9:0d:21:8d:03:73:8a:9b:
06:83:b7:fb:c9:ec:bf:0e:a8:96:05:27:99:db:70:6a:f5:02:
22:e5:99:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:37 2024 by rpki-client on console-ams.rpki-client.org