Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e5948434-4056-4394-b7a7-433f5175173a/38d462026f7d15505eaff120f62a1ce9b052c7b0.roa
File: 38d462026f7d15505eaff120f62a1ce9b052c7b0.roa (raw, json)
Hash identifier: 294nXBlt+zoajpDk3PZSWekfggys6E5Q5vflE+7Ncj0=
Subject key identifier: 11:58:A1:AD:7D:22:13:2F:F6:68:61:51:EE:35:54:6F:F6:B7:56:9F
Certificate issuer: /CN=701ea5e2aba4c6c0929eabf0a14b88f403a726e2
Certificate serial: 236D33
Authority key identifier: B6:3F:DC:95:C1:3C:6E:F5:BD:51:84:5A:09:64:BF:E0:0B:14:9E:8E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/701ea5e2aba4c6c0929eabf0a14b88f403a726e2.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/e5948434-4056-4394-b7a7-433f5175173a/38d462026f7d15505eaff120f62a1ce9b052c7b0.roa
Signing time: Tue 26 Sep 2023 17:32:11 +0000
ROA not before: Mon 25 Sep 2023 17:32:11 +0000
ROA not after: Fri 26 Sep 2025 17:32:11 +0000
asID: 19114
IP address blocks: 157.100.118.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2321715 (0x236d33)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=701ea5e2aba4c6c0929eabf0a14b88f403a726e2
Validity
Not Before: Sep 25 17:32:11 2023 GMT
Not After : Sep 26 17:32:11 2025 GMT
Subject: CN=38d462026f7d15505eaff120f62a1ce9b052c7b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:a6:07:5e:1e:dd:ca:ff:93:4b:2e:7e:74:df:
8e:de:8a:3c:12:bf:09:67:33:4c:64:b4:7e:7b:3c:
89:3b:a1:6b:d4:ec:47:c2:48:d1:6c:df:0f:00:30:
2d:f5:45:4a:4f:a7:07:b7:eb:90:3b:c0:da:20:3d:
38:9b:35:cb:7b:40:50:cf:65:93:a0:d2:94:ba:51:
6a:bd:69:69:5f:4c:dd:1f:e0:ab:3b:2a:63:22:de:
0c:b7:5b:f9:fe:95:11:c3:22:68:81:0a:3b:eb:54:
58:46:76:18:73:5b:80:1f:98:cf:9c:9f:d7:43:0b:
f6:b3:c3:fc:75:91:48:f5:a3:b8:a2:6a:03:bd:88:
e8:df:64:dd:af:eb:08:f8:55:e4:b8:e4:4d:bb:53:
2c:5d:97:fa:38:06:79:49:0c:55:d6:49:dd:b4:a7:
99:fa:98:7a:da:24:37:19:d1:93:81:38:02:1b:51:
aa:a8:7d:90:a5:2c:5c:60:bb:45:d4:48:d2:50:55:
7d:8b:56:ce:39:5f:86:72:d5:ae:65:43:9f:75:59:
49:52:b8:33:c3:54:e7:6e:6a:af:47:8b:2f:6b:74:
aa:90:36:6f:f9:4d:1c:63:cf:01:60:78:c1:ea:e7:
58:75:11:f1:fa:52:45:c6:60:33:df:67:fd:d3:21:
26:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:58:A1:AD:7D:22:13:2F:F6:68:61:51:EE:35:54:6F:F6:B7:56:9F
X509v3 Authority Key Identifier:
keyid:B6:3F:DC:95:C1:3C:6E:F5:BD:51:84:5A:09:64:BF:E0:0B:14:9E:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/701ea5e2aba4c6c0929eabf0a14b88f403a726e2.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e5948434-4056-4394-b7a7-433f5175173a/38d462026f7d15505eaff120f62a1ce9b052c7b0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/e5948434-4056-4394-b7a7-433f5175173a/701ea5e2aba4c6c0929eabf0a14b88f403a726e2.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.100.118.0/24
Signature Algorithm: sha256WithRSAEncryption
24:a2:bb:48:b5:cc:92:13:97:c0:7b:4f:a8:a8:12:61:78:eb:
c4:cc:9d:fa:33:c0:d0:e5:24:c3:56:a8:53:a4:6d:62:bc:6d:
83:6b:1d:e6:43:ff:89:5b:29:f4:a2:de:ba:08:af:20:46:1e:
e1:05:31:ce:ce:69:db:43:12:0d:c3:48:07:64:f2:35:66:50:
49:43:b4:3f:5c:ca:11:d9:1e:93:48:34:57:75:77:d6:43:88:
64:3f:4e:36:94:99:80:2b:b5:69:be:2e:b3:90:c2:28:c5:60:
d3:76:8f:86:26:8f:86:46:b4:11:0a:32:18:dc:fc:7e:e9:4d:
8e:81:89:ed:5f:1d:f3:16:50:4a:78:75:75:c0:90:0b:73:56:
fb:9c:85:6d:a5:f5:5d:68:10:7c:9c:ee:79:31:e9:27:ef:30:
4b:da:8f:46:29:92:c1:fe:5b:9e:13:b8:cb:78:74:bd:d7:5d:
c2:f1:cf:0c:57:60:48:d3:3e:28:8e:c4:19:ad:a0:63:98:58:
bc:8a:58:d6:9d:25:90:48:a4:3a:ac:54:d1:4e:57:b3:9c:1a:
e0:14:12:54:02:2c:73:5c:44:fe:97:c3:47:4c:98:dc:b1:f0:
e7:4b:e5:35:ae:b2:6a:05:6e:98:1d:fd:2a:5a:a2:b3:f4:dc:
bb:ae:06:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:33 2024 by rpki-client on console-fra.rpki-client.org