Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/04841012-b3cb-457a-9996-a67defb549d5/aa75e7e2d99aa319fb3dc95faec55367367e1727.roa
File: aa75e7e2d99aa319fb3dc95faec55367367e1727.roa (raw, json)
Hash identifier: H7dMmeJrBTszkWRLuGlVaLs1j1msthYdPb7loq7I3D0=
Subject key identifier: 9F:10:B6:74:AA:88:BD:65:82:E0:06:1F:56:E9:D3:C4:7A:CE:A5:C4
Certificate issuer: /CN=ba308093e64c97bdb011354807c2065ac693e761
Certificate serial: 1CD107
Authority key identifier: 1F:A4:88:C7:E0:14:0D:16:40:3E:4F:18:67:4A:3E:C2:70:F9:F2:10
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ba308093e64c97bdb011354807c2065ac693e761.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/04841012-b3cb-457a-9996-a67defb549d5/aa75e7e2d99aa319fb3dc95faec55367367e1727.roa
Signing time: Thu 29 Dec 2022 16:52:28 +0000
ROA not before: Mon 22 Mar 2021 03:00:00 +0000
ROA not after: Tue 24 Mar 2026 03:00:00 +0000
asID: 23520
IP address blocks: 45.167.124.0/24 maxlen: 24
45.167.125.0/24 maxlen: 24
45.167.126.0/24 maxlen: 24
2803:b5a0::/32 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1888519 (0x1cd107)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba308093e64c97bdb011354807c2065ac693e761
Validity
Not Before: Mar 22 03:00:00 2021 GMT
Not After : Mar 24 03:00:00 2026 GMT
Subject: CN=aa75e7e2d99aa319fb3dc95faec55367367e1727
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:d5:21:eb:96:bb:cf:b4:83:25:a0:ac:ec:30:
7d:87:74:17:84:c1:9f:57:ff:a3:0f:6b:d1:f8:52:
58:35:42:fe:07:56:80:97:15:0d:ed:12:53:05:4e:
ed:ba:82:2f:31:6d:cc:34:01:db:1a:b1:75:b0:d1:
f1:6d:a1:19:12:f5:43:49:8e:77:d3:10:60:e8:0e:
0f:a3:25:aa:36:02:47:00:94:8a:28:c4:b9:ee:33:
cc:c0:42:f8:c4:94:e4:f8:24:b0:ce:f4:8a:53:2e:
c5:96:d4:d0:a0:93:67:53:c3:bd:b2:10:d5:0b:a6:
5b:ac:14:07:b0:df:a8:9e:1f:77:2f:f0:05:73:59:
d5:a4:4f:c9:62:94:3e:36:28:9f:52:c0:4b:ef:0a:
e8:f9:af:98:8f:ca:c2:fc:c1:bb:a2:7b:b8:e9:a8:
18:fd:3b:bc:3a:6b:f8:5e:6f:5f:fd:be:49:dc:e7:
29:a5:ee:5d:52:e9:59:3e:a9:b3:92:38:a8:2e:3d:
6c:10:6b:99:75:34:f4:6e:e4:dc:be:4d:e4:38:b8:
39:63:5b:cb:d4:ca:99:66:d1:34:7d:79:8e:55:01:
12:e9:67:0f:20:4a:91:1a:35:d9:74:32:02:94:4d:
f7:0f:95:be:03:40:27:2b:4e:f5:f9:4e:85:bb:30:
c4:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:10:B6:74:AA:88:BD:65:82:E0:06:1F:56:E9:D3:C4:7A:CE:A5:C4
X509v3 Authority Key Identifier:
keyid:1F:A4:88:C7:E0:14:0D:16:40:3E:4F:18:67:4A:3E:C2:70:F9:F2:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ba308093e64c97bdb011354807c2065ac693e761.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/04841012-b3cb-457a-9996-a67defb549d5/aa75e7e2d99aa319fb3dc95faec55367367e1727.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/04841012-b3cb-457a-9996-a67defb549d5/ba308093e64c97bdb011354807c2065ac693e761.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.167.124.0-45.167.126.255
IPv6:
2803:b5a0::/32
Signature Algorithm: sha256WithRSAEncryption
34:5b:37:51:53:73:3f:2e:7a:d3:7a:49:b6:f3:fe:c4:4b:f5:
59:46:48:da:8a:0b:9f:a7:11:d2:bd:13:e5:07:54:90:86:62:
32:ab:11:12:8c:dc:53:16:f2:0e:07:72:5b:19:bf:f6:0e:dd:
ca:c6:c2:b4:e0:89:0f:52:1f:76:ab:f3:3e:35:6c:ea:43:99:
66:62:5b:b9:ed:7d:bc:7c:55:f1:20:da:69:21:26:ba:bc:7b:
b3:65:b4:d3:3d:ff:a0:22:59:d1:67:8e:2c:46:bf:2c:0c:cd:
30:ed:50:97:c8:3f:1e:1d:ba:30:82:1e:f0:d4:d7:44:61:72:
d3:ce:47:4c:e1:f6:6c:67:0e:3b:30:f9:4f:7d:20:6b:d5:2e:
a1:42:f0:3e:62:14:13:2e:25:52:9a:d0:70:13:59:1e:7b:81:
e2:c2:cb:a1:56:96:c3:57:d9:e0:d7:f5:ed:46:e2:3b:a8:f1:
60:f9:60:14:48:c2:55:7c:97:02:ad:8f:ea:29:34:a8:e9:fe:
52:a1:24:32:27:95:41:7e:ea:4c:3f:6b:1b:f6:41:db:14:de:
26:6c:af:8b:45:b3:fa:bf:01:09:84:46:fc:a6:0a:f0:1c:b5:
bf:f9:d0:27:61:d1:b9:3d:1c:2b:0c:af:38:9d:a7:53:f9:a8:
31:92:29:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:17 2024 by rpki-client on console-fra.rpki-client.org