Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e4941998-c538-4433-84b5-e7b17baf7138/6413de088276138b22a001c67ef4dc539539d2e3.roa
File: 6413de088276138b22a001c67ef4dc539539d2e3.roa (raw, json)
Hash identifier: s62Z4qq4f9wrb7/kabyAC1n08chGuyWYdsHuzyBFeSQ=
Subject key identifier: 84:3F:3E:39:7B:F8:5E:7A:57:29:E7:E4:B3:08:FC:BE:16:36:86:62
Certificate issuer: /CN=5a3953635c673af09ceb6d4d9a4dbe357e4aef64
Certificate serial: 0DD382
Authority key identifier: EB:C9:C8:0B:3F:4B:19:F3:EE:BF:EE:85:29:FD:07:29:A2:E0:A5:DA
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5a3953635c673af09ceb6d4d9a4dbe357e4aef64.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/e4941998-c538-4433-84b5-e7b17baf7138/6413de088276138b22a001c67ef4dc539539d2e3.roa
Signing time: Wed 24 Mar 2021 14:32:26 +0000
ROA not before: Wed 24 Mar 2021 14:32:26 +0000
ROA not after: Tue 24 Mar 2026 14:32:26 +0000
asID: 52312
IP address blocks: 138.94.12.0/22 maxlen: 24
170.84.124.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 906114 (0xdd382)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a3953635c673af09ceb6d4d9a4dbe357e4aef64
Validity
Not Before: Mar 24 14:32:26 2021 GMT
Not After : Mar 24 14:32:26 2026 GMT
Subject: CN=6413de088276138b22a001c67ef4dc539539d2e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:de:e3:7e:e7:0a:33:0d:5d:ac:67:d0:a5:b5:
03:b2:30:97:8d:8c:84:30:5b:5c:ea:ae:1b:65:80:
6f:ac:6d:39:ca:b1:f6:0f:29:5e:e2:cf:aa:a7:e5:
17:8c:b1:60:07:e0:17:7b:fe:cc:a3:72:f9:22:1c:
9f:af:27:ec:af:00:53:a3:47:e8:31:23:df:a5:09:
21:cb:10:72:e5:9a:68:4f:09:1f:da:53:e8:f1:dd:
cd:c9:d9:41:ec:41:b1:7b:99:2c:7e:20:c2:78:10:
ba:cb:e4:70:90:4f:d0:c2:90:8b:8b:37:15:5c:a8:
3c:6f:46:23:ca:ab:d0:4b:1d:98:49:1b:54:bc:6d:
5e:f4:94:73:a4:3c:47:14:23:d3:3a:4c:e3:6d:2d:
6f:59:fc:7f:7a:fa:8f:87:e0:68:db:82:09:c4:e1:
55:1f:cb:c9:cb:84:ad:d4:99:c8:b5:58:d3:10:8d:
e1:a5:ba:54:18:30:ef:f4:61:70:0a:a5:a4:01:53:
7f:bf:3c:1f:96:2e:20:7c:81:b0:5a:7f:88:a4:3e:
93:f2:14:2e:36:24:67:50:d6:42:e4:a0:f6:47:f2:
94:f4:0d:cd:ff:7c:43:26:4f:38:d3:a6:2e:b2:af:
67:d9:8f:78:5c:08:3e:9c:f3:53:b8:34:47:1d:42:
3e:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:3F:3E:39:7B:F8:5E:7A:57:29:E7:E4:B3:08:FC:BE:16:36:86:62
X509v3 Authority Key Identifier:
keyid:EB:C9:C8:0B:3F:4B:19:F3:EE:BF:EE:85:29:FD:07:29:A2:E0:A5:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5a3953635c673af09ceb6d4d9a4dbe357e4aef64.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e4941998-c538-4433-84b5-e7b17baf7138/6413de088276138b22a001c67ef4dc539539d2e3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/e4941998-c538-4433-84b5-e7b17baf7138/5a3953635c673af09ceb6d4d9a4dbe357e4aef64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.94.12.0/22
170.84.124.0/22
Signature Algorithm: sha256WithRSAEncryption
0b:ab:4d:9a:9d:2a:57:db:7d:eb:47:ac:c3:de:ca:e9:07:88:
6e:07:5b:3b:ec:a5:41:c4:ac:53:8a:b8:09:8e:34:42:26:4c:
d1:25:1b:2f:db:8b:f5:db:1e:90:72:f4:b3:5e:a7:6e:61:81:
e1:75:f6:12:8b:fe:0f:1b:ab:7f:0b:c7:8e:09:6f:22:56:08:
17:d9:b1:b7:65:6a:13:4a:c2:07:aa:94:46:49:27:d9:af:ca:
08:20:1a:51:32:b8:09:bf:07:8f:38:10:69:59:fe:e0:51:0c:
df:60:ec:0b:8d:aa:5d:50:4e:6c:d3:c4:71:8e:2f:cd:05:ed:
01:95:e4:0e:2e:34:b0:e9:22:4f:41:b2:7f:f2:5b:de:1b:f7:
e7:8a:c5:e0:e4:f6:fe:03:6f:55:af:29:b1:17:41:61:ed:c0:
cc:e0:60:47:05:5c:48:38:a4:ea:23:46:77:46:1d:e0:f0:fe:
8e:0d:b6:38:4a:a9:02:f6:e1:70:c6:a6:67:5d:2b:40:7b:c8:
27:c5:85:5a:2c:a1:d7:94:62:d0:81:13:e2:f9:75:84:bd:3d:
42:a8:23:95:bc:6e:99:ed:9c:32:79:57:c5:fa:86:fd:6e:70:
17:4d:f1:58:0e:ac:3d:67:0d:5e:a9:2c:b2:9b:75:56:b6:83:
72:3e:95:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:50 2024 by rpki-client on console-ams.rpki-client.org