Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ff79bff4-e3d4-49e2-9e42-454af92034f6/394f67fa11dc8778d8850e52b5bb2848183cd26e.roa
File: 394f67fa11dc8778d8850e52b5bb2848183cd26e.roa (raw, json)
Hash identifier: 4f5RzPpRPGQakLdkavjCWBaVQSzI7bSlentsr729Vzc=
Subject key identifier: E7:36:34:BB:39:C9:D9:54:15:64:AE:AE:BB:0F:E1:55:C2:6E:B8:71
Certificate issuer: /CN=986ea0f5c8cffc44df21b81b038b788b536d285b
Certificate serial: 0D5F42
Authority key identifier: 05:43:30:37:75:78:C3:ED:77:46:AB:1E:45:B3:C5:86:0B:0A:C3:89
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/986ea0f5c8cffc44df21b81b038b788b536d285b.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/ff79bff4-e3d4-49e2-9e42-454af92034f6/394f67fa11dc8778d8850e52b5bb2848183cd26e.roa
Signing time: Wed 24 Mar 2021 14:35:00 +0000
ROA not before: Wed 24 Mar 2021 14:35:00 +0000
ROA not after: Tue 24 Mar 2026 14:35:00 +0000
asID: 52467
IP address blocks: 138.36.64.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 876354 (0xd5f42)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=986ea0f5c8cffc44df21b81b038b788b536d285b
Validity
Not Before: Mar 24 14:35:00 2021 GMT
Not After : Mar 24 14:35:00 2026 GMT
Subject: CN=394f67fa11dc8778d8850e52b5bb2848183cd26e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:11:ca:21:a9:c8:83:1a:ea:90:09:42:b4:34:
80:32:5e:c4:fe:3f:5f:e4:f3:bd:26:d8:f7:84:10:
33:69:51:49:51:6b:47:83:be:33:53:42:53:2d:bf:
88:bb:42:c2:c8:12:ea:9e:18:84:2f:36:72:f0:d3:
31:72:73:71:45:36:ad:ec:85:fb:77:ed:37:a5:c5:
20:39:82:fc:20:7c:b6:fd:f6:bb:8f:e3:d9:23:29:
fd:ff:83:b2:3a:f8:56:e5:40:90:23:f0:3d:60:24:
c3:f7:2f:2a:d2:7e:68:34:c6:09:1d:51:42:f0:f8:
e7:c8:8b:9d:2b:47:b0:2b:05:bc:ed:5b:d6:32:ae:
9e:b9:f6:65:a2:33:e0:c3:d2:07:89:48:69:53:5a:
26:2c:1f:a2:ea:93:23:e4:f4:40:47:bf:69:98:de:
83:fb:8f:10:1a:42:80:2c:5a:76:63:f1:0a:9e:07:
4c:79:0d:3f:66:1a:23:57:12:ab:40:99:cf:0d:25:
00:c2:82:91:d7:3f:2d:75:de:64:5e:33:dc:61:fb:
b7:61:d3:0c:f8:3c:12:20:9d:d6:21:22:33:b9:ac:
df:55:31:60:78:46:12:f2:36:ef:63:6d:f9:e3:59:
58:89:1c:15:c9:52:ee:bd:54:eb:16:19:36:d9:53:
74:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:36:34:BB:39:C9:D9:54:15:64:AE:AE:BB:0F:E1:55:C2:6E:B8:71
X509v3 Authority Key Identifier:
keyid:05:43:30:37:75:78:C3:ED:77:46:AB:1E:45:B3:C5:86:0B:0A:C3:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/986ea0f5c8cffc44df21b81b038b788b536d285b.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ff79bff4-e3d4-49e2-9e42-454af92034f6/394f67fa11dc8778d8850e52b5bb2848183cd26e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/ff79bff4-e3d4-49e2-9e42-454af92034f6/986ea0f5c8cffc44df21b81b038b788b536d285b.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.36.64.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:54:35:19:68:82:26:44:8a:f6:9f:e0:29:f0:28:82:05:97:
9f:dc:67:98:37:bb:77:b9:9f:8d:cd:c3:ec:2f:86:af:e3:6f:
be:67:65:de:06:f0:da:e9:19:6a:0d:6e:b1:55:6e:7a:d5:23:
2d:cd:e3:e0:6c:ee:ba:79:2c:97:65:b2:61:b2:b5:88:cc:07:
b1:7b:26:fc:bd:6f:ce:2f:0d:02:32:69:4a:a3:9e:82:d1:98:
fe:16:8a:25:2d:11:6d:b0:d7:e5:4a:31:62:31:7e:0a:f7:b1:
e6:15:67:2b:74:c7:1a:93:ff:fb:13:02:4c:de:63:6d:0e:6b:
75:ae:12:4c:ea:9b:cb:f9:79:7f:e6:b7:49:7b:03:6c:f1:09:
7a:44:86:67:dd:a8:fc:0d:02:29:97:cf:49:5f:c7:91:95:83:
af:ec:36:c3:9f:e2:8b:a8:93:f6:dc:e0:85:e9:e4:ef:12:87:
11:8f:41:3c:ed:4b:c9:b7:ed:06:af:c1:d2:1c:7a:d2:ba:14:
63:b8:cb:77:9b:59:ec:78:f2:a5:9d:10:70:64:36:24:e6:22:
9d:a1:14:95:bd:11:0d:65:bd:57:b9:7e:db:67:17:5b:f7:7e:
8c:d8:e3:22:bf:a4:21:db:1c:e5:cc:83:b8:47:ab:66:79:e7:
72:11:5e:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:37 2024 by rpki-client on console-fra.rpki-client.org