Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f86609fd-08b0-4c7a-942b-4df5918d5d89/de5862cd83bc6977e61516db53a1ca6f9539800d.roa
File: de5862cd83bc6977e61516db53a1ca6f9539800d.roa (raw, json)
Hash identifier: xK6IP9p9fmn9F/1OnXbKijHdd+8rrYIn8/ZAUWKPy/s=
Subject key identifier: 4F:D0:FA:FA:F9:3E:24:D3:02:EE:9E:FF:63:74:41:70:BD:20:B0:CE
Certificate issuer: /CN=f9eff36fdd5b194b91d8e33f9693f1cb9c6fe77f
Certificate serial: 0B7B42
Authority key identifier: 5C:B6:F6:15:7C:12:35:A2:E9:DD:69:BB:F9:AA:5A:73:AE:45:77:E4
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f9eff36fdd5b194b91d8e33f9693f1cb9c6fe77f.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/f86609fd-08b0-4c7a-942b-4df5918d5d89/de5862cd83bc6977e61516db53a1ca6f9539800d.roa
Signing time: Wed 24 Mar 2021 14:31:15 +0000
ROA not before: Wed 24 Mar 2021 14:31:15 +0000
ROA not after: Tue 24 Mar 2026 14:31:15 +0000
asID: 52465
IP address blocks: 168.121.36.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 752450 (0xb7b42)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9eff36fdd5b194b91d8e33f9693f1cb9c6fe77f
Validity
Not Before: Mar 24 14:31:15 2021 GMT
Not After : Mar 24 14:31:15 2026 GMT
Subject: CN=de5862cd83bc6977e61516db53a1ca6f9539800d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:21:a3:8f:95:31:72:c5:f1:9a:eb:5c:b8:6a:
a0:3e:14:c5:2d:05:ee:84:cf:46:45:9e:7e:03:06:
7c:5e:da:dd:cd:15:9e:fc:44:eb:cd:f2:ea:13:af:
58:47:e0:75:f0:ec:42:1c:29:16:59:37:df:cf:b0:
cd:2e:a6:c7:92:97:d5:1f:4d:0b:e1:d4:f0:b2:0d:
01:5d:28:72:b4:cc:e5:b6:a2:eb:5b:aa:3e:07:ab:
3d:af:d0:18:75:ed:00:44:2a:b5:51:c6:12:1a:39:
9b:6f:c8:e1:c5:1a:a9:99:d1:89:48:51:3b:7b:1c:
44:99:cf:97:55:66:64:fd:21:7a:b8:f9:80:e7:5d:
0f:fb:ff:6e:d4:a8:59:77:dc:fb:fd:e6:67:be:c6:
41:d0:e0:42:8d:fe:52:cf:b3:72:48:c7:19:f7:0c:
af:6f:76:6c:be:ef:9b:10:21:ca:26:85:8b:10:b6:
40:88:d3:64:fc:30:44:13:81:05:f0:b1:9a:cd:ae:
da:13:8e:4a:45:1f:d6:b8:a2:db:4f:34:41:98:18:
e9:82:ca:22:b1:5d:5a:17:b5:68:b3:66:df:bc:c2:
0d:a2:1e:25:f0:26:07:de:f0:b7:ac:b6:63:e8:a5:
32:31:7f:80:53:41:7f:01:00:f4:cb:80:c4:28:5c:
f4:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:D0:FA:FA:F9:3E:24:D3:02:EE:9E:FF:63:74:41:70:BD:20:B0:CE
X509v3 Authority Key Identifier:
keyid:5C:B6:F6:15:7C:12:35:A2:E9:DD:69:BB:F9:AA:5A:73:AE:45:77:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f9eff36fdd5b194b91d8e33f9693f1cb9c6fe77f.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f86609fd-08b0-4c7a-942b-4df5918d5d89/de5862cd83bc6977e61516db53a1ca6f9539800d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/f86609fd-08b0-4c7a-942b-4df5918d5d89/f9eff36fdd5b194b91d8e33f9693f1cb9c6fe77f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.121.36.0/22
Signature Algorithm: sha256WithRSAEncryption
3f:7e:70:29:10:02:bf:a2:e8:d2:86:5f:3b:8d:06:c4:be:a5:
28:95:09:61:5b:f8:78:fc:37:a9:3d:12:9b:69:8e:61:28:52:
ef:e8:04:38:d6:92:23:da:6f:1e:27:14:4f:fc:08:ca:c1:99:
36:79:15:0f:d6:c1:48:73:8f:81:44:e7:07:73:ae:5d:f4:32:
de:e0:d1:70:08:2b:7e:d9:34:8a:64:b3:35:4e:7a:34:da:09:
8f:80:f2:e1:f9:d1:19:5d:a1:e6:a0:30:e1:13:7c:27:dc:58:
4e:99:36:6e:1e:99:87:14:7e:47:62:61:fd:71:3a:e0:5a:2b:
dd:3e:2f:4a:d4:f2:9e:2d:da:15:f2:3e:cd:8a:92:d2:b5:7e:
bc:d0:62:f0:a8:c1:9e:0b:42:63:1b:c3:54:4a:5d:b1:73:6d:
04:38:c7:9a:cd:2f:1d:09:3a:cb:7a:56:16:9f:f3:09:0c:c6:
34:a4:9c:83:7e:fc:b7:d8:46:92:b6:63:e8:12:42:98:02:76:
40:c4:cf:39:ef:fb:45:c4:c9:25:7f:55:34:85:81:89:b9:21:
c5:b8:fc:ff:e2:5b:a6:3e:06:31:86:af:0f:ea:5a:89:ce:1a:
ed:d6:c1:e8:89:37:8d:cc:4a:00:0e:04:93:96:83:fb:e6:f8:
55:bd:b0:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:36 2024 by rpki-client on console-fra.rpki-client.org