Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e8f626fd-da9a-4119-b860-c13de47f8be1/f1329b6c4429552dfa7b60bd4689da136fcd9e7a.roa
File: f1329b6c4429552dfa7b60bd4689da136fcd9e7a.roa (raw, json)
Hash identifier: InZ46qzV8El3Zdhl1J4fiLTi0RixVF/hiEkA9Zjd3zQ=
Subject key identifier: 81:A9:CF:CA:B7:02:34:9C:AB:0C:AC:F4:A8:13:39:85:B7:87:47:02
Certificate issuer: /CN=5842a35efb02d60e07426e0d03b3de78f9d908db
Certificate serial: 19EFEE
Authority key identifier: ED:8B:CA:8A:42:45:08:D7:40:0B:74:41:B1:45:0A:49:10:D8:6E:30
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5842a35efb02d60e07426e0d03b3de78f9d908db.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/e8f626fd-da9a-4119-b860-c13de47f8be1/f1329b6c4429552dfa7b60bd4689da136fcd9e7a.roa
Signing time: Fri 26 Jan 2024 19:00:34 +0000
ROA not before: Fri 26 Jan 2024 19:00:34 +0000
ROA not after: Mon 26 Jan 2026 19:00:34 +0000
asID: 265704
IP address blocks: 168.181.176.0/22 maxlen: 24
138.36.220.0/22 maxlen: 24
2803:cf80::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1699822 (0x19efee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5842a35efb02d60e07426e0d03b3de78f9d908db
Validity
Not Before: Jan 26 19:00:34 2024 GMT
Not After : Jan 26 19:00:34 2026 GMT
Subject: CN=f1329b6c4429552dfa7b60bd4689da136fcd9e7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:25:36:7e:5e:cc:cd:61:90:ae:7e:18:91:1d:
64:8b:05:81:5d:a1:23:8b:8b:cc:66:8f:e9:cb:59:
c5:a0:cc:d7:d7:41:45:fd:b4:e3:13:fe:5f:5a:c3:
00:17:fa:b9:d9:47:f3:87:0a:2b:1d:55:47:35:17:
c4:a2:a7:4e:88:92:ec:b0:cf:c5:df:7d:32:1b:af:
08:70:2b:37:7f:f5:0d:b5:10:6e:49:7d:6a:c1:c4:
92:43:53:cf:e1:8c:06:8c:da:45:4a:b8:35:3e:6a:
af:d5:16:2e:e0:09:af:4a:4d:5c:dd:31:6b:a8:be:
b5:6c:ef:2e:2f:b0:f4:9d:6d:3b:3f:bc:41:8d:f8:
a5:30:b3:9b:77:b1:a5:04:aa:e7:8c:45:38:be:99:
11:73:a5:2f:5e:5c:1e:02:bb:19:37:ce:19:89:2f:
56:48:9a:e8:2f:c2:65:c3:c0:83:a6:a1:62:02:05:
ad:67:63:da:1c:78:ac:c2:86:45:b3:86:58:49:b0:
a2:4b:03:e1:95:dc:4b:ff:ba:84:29:10:4c:17:50:
04:26:6f:a6:3b:4f:1d:a0:1e:cd:3d:a1:3b:b8:f4:
b9:a9:57:27:27:e8:ab:3e:a3:72:45:65:b3:e4:12:
28:56:9e:1f:07:5b:b9:52:b2:00:80:2d:7d:c3:c7:
6f:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:A9:CF:CA:B7:02:34:9C:AB:0C:AC:F4:A8:13:39:85:B7:87:47:02
X509v3 Authority Key Identifier:
keyid:ED:8B:CA:8A:42:45:08:D7:40:0B:74:41:B1:45:0A:49:10:D8:6E:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5842a35efb02d60e07426e0d03b3de78f9d908db.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e8f626fd-da9a-4119-b860-c13de47f8be1/f1329b6c4429552dfa7b60bd4689da136fcd9e7a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/e8f626fd-da9a-4119-b860-c13de47f8be1/5842a35efb02d60e07426e0d03b3de78f9d908db.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.36.220.0/22
168.181.176.0/22
IPv6:
2803:cf80::/32
Signature Algorithm: sha256WithRSAEncryption
58:5a:5f:32:3e:bb:ec:9f:4e:73:a6:bf:6d:34:b4:05:2c:7c:
f2:1f:65:0e:66:ed:f7:88:9c:71:d9:25:d6:25:d9:76:b9:17:
cd:e4:68:f4:e7:f6:4c:f6:4e:1c:14:68:4a:65:6d:4a:cf:e5:
e3:48:a6:a4:c0:5e:42:d9:52:ef:7e:71:71:3b:20:a5:10:48:
b7:a6:34:ce:76:93:2a:1b:ab:27:22:5f:d3:52:1e:b5:04:5d:
4a:5b:d6:83:ef:fb:17:7f:d0:eb:79:cb:92:88:6c:dc:47:09:
13:de:09:d8:ce:ad:dd:1e:1e:4a:15:9c:9c:83:e4:c0:72:b8:
40:1c:2a:01:84:0f:89:0c:27:02:6c:b6:31:b0:db:bc:2e:85:
3f:77:b5:08:be:9e:80:04:b6:89:63:be:5d:b6:ec:9d:f4:33:
61:23:5b:d5:51:1b:29:35:d1:de:f0:f9:53:29:a4:ab:3e:f6:
2a:b1:85:43:48:26:97:ea:49:f3:04:fd:96:3c:21:4f:a5:43:
1a:90:58:ca:8f:91:7d:e6:f6:7b:8e:27:53:09:6f:89:33:3b:
22:cc:f3:0b:11:4f:e8:6a:fb:d0:be:d7:b4:c6:51:62:ba:c5:
55:06:14:66:c4:c3:98:56:f1:03:b2:09:57:11:03:11:ab:ff:
13:64:21:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:41 2024 by rpki-client on console-ams.rpki-client.org