Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ebb9a9a9-8864-43db-9a4b-6df67c73fdee/4be7671680138c23be09a261da2242b144bd58e8.roa
File: 4be7671680138c23be09a261da2242b144bd58e8.roa (raw, json)
Hash identifier: 5l5QAYP/+6PDLufNELXzzd1ver11PdWzOtCHymtj7yA=
Subject key identifier: 95:74:B6:11:A2:3C:E6:3E:47:E4:E2:8C:05:09:7E:10:D8:FE:6C:B3
Certificate issuer: /CN=b698b12c769bcfc856d5f3728b1c9b42d5bf4724
Certificate serial: 213949
Authority key identifier: D4:15:74:FC:9D:30:FF:74:72:33:D3:A3:20:4C:B5:E5:30:17:3D:EC
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b698b12c769bcfc856d5f3728b1c9b42d5bf4724.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/ebb9a9a9-8864-43db-9a4b-6df67c73fdee/4be7671680138c23be09a261da2242b144bd58e8.roa
Signing time: Fri 12 Apr 2024 20:11:08 +0000
ROA not before: Fri 12 Apr 2024 20:11:08 +0000
ROA not after: Sun 12 Apr 2026 20:11:08 +0000
asID: 263726
IP address blocks: 138.36.96.0/22 maxlen: 22
138.36.96.0/24 maxlen: 24
138.36.97.0/24 maxlen: 24
138.36.98.0/24 maxlen: 24
138.36.99.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2177353 (0x213949)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b698b12c769bcfc856d5f3728b1c9b42d5bf4724
Validity
Not Before: Apr 12 20:11:08 2024 GMT
Not After : Apr 12 20:11:08 2026 GMT
Subject: CN=4be7671680138c23be09a261da2242b144bd58e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:35:73:93:7f:c2:bc:a3:93:49:37:1b:7c:29:
16:b8:7e:0b:4b:6b:ac:1d:92:7d:b7:2f:1d:0c:59:
a0:56:a9:46:a5:c3:a9:d5:09:e0:17:92:d7:f5:82:
15:51:d4:c2:12:f2:e4:f2:90:7f:98:3e:33:ac:22:
c7:1d:e5:25:e2:16:d3:10:a5:68:f2:30:91:dc:c5:
3f:05:fe:ea:4a:98:e5:48:7e:d4:36:5c:d5:43:ae:
ac:53:33:ce:e3:25:34:da:25:0a:f3:b6:17:cb:c8:
12:81:89:33:8f:93:b3:e2:c8:6e:70:f5:3e:15:ff:
0f:70:6e:1a:c5:d3:d1:90:32:25:b5:df:3b:44:2c:
c4:3c:44:69:01:4e:84:78:7f:d3:fe:7b:6b:ec:2b:
23:9a:da:bd:da:47:2d:2c:57:d4:d1:48:85:7c:ba:
fb:12:cd:88:5e:17:05:45:07:73:94:cd:f9:f1:8c:
20:3e:d6:29:26:68:7c:fc:e9:7f:b0:c3:2d:d0:c7:
95:9b:ea:be:37:05:30:c3:ed:ca:d1:f7:bc:9d:45:
7e:95:c0:29:d5:28:72:a2:5b:3e:63:dc:38:05:2e:
70:e3:44:09:72:18:3e:84:cc:ae:51:1f:c2:ba:6f:
76:8b:6a:5b:2f:ca:e2:91:6a:6b:e5:5d:95:58:08:
ff:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:74:B6:11:A2:3C:E6:3E:47:E4:E2:8C:05:09:7E:10:D8:FE:6C:B3
X509v3 Authority Key Identifier:
keyid:D4:15:74:FC:9D:30:FF:74:72:33:D3:A3:20:4C:B5:E5:30:17:3D:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b698b12c769bcfc856d5f3728b1c9b42d5bf4724.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ebb9a9a9-8864-43db-9a4b-6df67c73fdee/4be7671680138c23be09a261da2242b144bd58e8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/ebb9a9a9-8864-43db-9a4b-6df67c73fdee/b698b12c769bcfc856d5f3728b1c9b42d5bf4724.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.36.96.0/22
Signature Algorithm: sha256WithRSAEncryption
2c:71:89:5b:dd:eb:d0:bf:8c:37:88:c8:55:3d:8f:50:68:19:
a0:e7:ce:3d:91:06:17:a7:42:c7:76:15:49:5a:ee:04:0b:6e:
4d:21:21:d1:87:21:62:8d:33:fc:4f:ab:ba:87:86:a1:83:e2:
b0:69:2c:d4:36:b2:37:93:a9:3c:1e:b4:e6:b9:b9:12:16:27:
61:f4:3c:32:e0:3b:2d:46:1b:c2:ed:3c:0f:3b:da:b7:14:96:
b5:55:57:de:b2:31:ed:05:8a:a3:9c:72:aa:97:6d:a0:46:00:
16:2a:02:22:be:58:6d:f3:71:71:5f:95:8b:b7:99:6f:74:51:
a6:49:a7:7b:bd:65:01:68:0b:01:6b:a7:18:3c:c8:30:57:e7:
77:f7:3b:c5:6f:77:b5:50:88:cc:98:9a:84:9d:40:76:ac:43:
a9:4e:4a:f9:fb:b7:2b:01:da:52:50:45:1f:da:8c:5b:7a:55:
eb:1f:8e:56:01:50:be:fa:6e:0a:f9:34:bb:6d:7f:e4:ca:2b:
07:5e:c0:99:9d:b4:b2:90:52:ef:58:f4:18:ba:20:15:a4:d5:
df:14:ba:38:1e:e9:f0:7b:1e:56:60:f8:80:c7:90:64:28:1a:
6f:a9:62:81:6f:ea:53:f9:c3:70:e0:c4:ed:5e:63:87:dd:a5:
f5:8f:09:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:51 2024 by rpki-client on console-ams.rpki-client.org