Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2fc42fdf-2d8b-46a5-8f9b-68d6e3403e4e/91d1d95bfc64abbd712c2f2840a387c03ba3fa8e.roa
File: 91d1d95bfc64abbd712c2f2840a387c03ba3fa8e.roa (raw, json)
Hash identifier: bcUjRDl/sKA0BfeKHUDzYNAFgXfo4uK/puHHWGERCKI=
Subject key identifier: 4B:10:2A:BD:5A:B6:1A:7C:CE:63:8C:58:E6:3B:93:F0:A7:AD:C2:D5
Certificate issuer: /CN=259c4fb25c604824d214cf7cbe588eab433a5691
Certificate serial: 25B2C4
Authority key identifier: 3F:31:C8:54:2E:52:5E:69:30:FE:E3:42:F0:40:D8:8D:07:34:6E:D0
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/259c4fb25c604824d214cf7cbe588eab433a5691.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/2fc42fdf-2d8b-46a5-8f9b-68d6e3403e4e/91d1d95bfc64abbd712c2f2840a387c03ba3fa8e.roa
Signing time: Tue 28 Nov 2023 21:24:21 +0000
ROA not before: Tue 28 Nov 2023 21:24:18 +0000
ROA not after: Fri 28 Nov 2025 21:24:18 +0000
asID: 264668
IP address blocks: 45.225.88.0/22 maxlen: 24
2803:e620::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2470596 (0x25b2c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=259c4fb25c604824d214cf7cbe588eab433a5691
Validity
Not Before: Nov 28 21:24:18 2023 GMT
Not After : Nov 28 21:24:18 2025 GMT
Subject: CN=91d1d95bfc64abbd712c2f2840a387c03ba3fa8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:32:db:c6:13:2c:af:39:16:eb:01:ff:8b:a6:
78:3d:3f:20:ea:15:b6:80:d0:be:58:9f:45:65:1c:
a0:85:1c:8e:d2:21:d3:e6:ff:83:01:26:c7:72:09:
d9:6d:d1:3f:75:0b:d9:ba:f3:3a:f9:25:a0:42:e2:
77:03:c8:e9:8c:af:3d:ad:de:70:74:d5:db:67:7e:
05:70:2f:8a:8e:f3:3f:6e:6e:75:d3:f5:cd:f2:4d:
f6:22:57:b4:9f:b5:22:e7:65:cc:ea:e3:59:c2:b5:
da:27:b3:6b:39:65:cf:57:5b:a4:07:c1:90:f4:fb:
73:2a:87:8e:7f:a3:c9:ff:55:c4:fc:a1:84:62:9e:
e1:6b:47:1b:52:a9:e3:89:29:4b:f7:81:67:2d:ae:
8a:40:fc:2b:5d:0c:57:84:a9:f7:19:95:3b:18:2d:
25:6b:03:69:b7:63:23:d9:2b:5a:1a:57:ed:92:99:
fd:e5:a4:7b:68:e2:ec:38:0f:fc:a0:7b:7e:3c:00:
da:bc:8a:e0:43:c0:d5:a5:a8:bf:bc:a5:a4:4a:cf:
a0:b7:8e:ba:ae:46:0f:fe:5d:14:24:dd:2a:18:43:
a5:9e:49:b3:0c:c5:82:44:17:10:e6:17:fd:1a:a0:
8e:ab:61:e8:01:0f:84:29:b5:96:55:1b:72:7b:79:
f8:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:10:2A:BD:5A:B6:1A:7C:CE:63:8C:58:E6:3B:93:F0:A7:AD:C2:D5
X509v3 Authority Key Identifier:
keyid:3F:31:C8:54:2E:52:5E:69:30:FE:E3:42:F0:40:D8:8D:07:34:6E:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/259c4fb25c604824d214cf7cbe588eab433a5691.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2fc42fdf-2d8b-46a5-8f9b-68d6e3403e4e/91d1d95bfc64abbd712c2f2840a387c03ba3fa8e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/2fc42fdf-2d8b-46a5-8f9b-68d6e3403e4e/259c4fb25c604824d214cf7cbe588eab433a5691.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.225.88.0/22
IPv6:
2803:e620::/32
Signature Algorithm: sha256WithRSAEncryption
29:1e:51:42:d4:16:9f:e1:6c:d1:e5:f3:63:e1:99:2f:c9:c5:
e3:64:2d:7d:ce:40:dd:eb:b4:8b:1c:6c:5e:6b:e8:b2:25:05:
5e:c5:00:77:d5:bd:89:22:f1:a2:12:27:e9:a0:82:16:80:c9:
f6:8e:d5:ff:98:b8:50:6c:16:8b:fa:b7:0e:b6:a8:9c:da:97:
0a:5b:f0:e6:a0:60:f8:25:fa:5f:6a:6d:01:00:ff:8a:fc:92:
75:96:12:51:7d:77:88:6f:42:63:b5:e8:e0:3c:d0:11:4b:4b:
22:00:a0:c6:3f:45:8c:c3:aa:ae:09:21:9f:21:6e:87:dc:ef:
62:99:94:fb:53:09:ab:0f:55:73:50:c8:49:cd:e4:2f:9a:65:
79:4a:2d:bb:fc:7b:ad:66:e9:57:a0:6b:7d:0d:c6:3a:3e:2f:
b4:28:03:c4:90:c0:4b:13:0f:e4:ec:07:03:be:f4:02:09:ab:
0b:33:88:f2:9e:18:9f:3d:34:f8:fa:9d:d5:e8:fe:b8:ef:0f:
63:8a:1f:12:f0:8a:3e:77:c9:b2:e2:08:00:ca:15:c9:8c:57:
71:21:01:10:5d:63:b6:31:f7:8a:bd:08:88:91:fc:5b:c3:bd:
24:9a:bd:4a:eb:44:6c:a2:54:f3:cf:79:95:eb:cd:df:a2:65:
68:82:4d:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:25 2024 by rpki-client on console-fra.rpki-client.org