Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/434a7ffa-8ef9-4659-89f9-cef7df8b97c2/68937b17758f9f7e331939b841f4e33e54e9b5ac.roa
File: 68937b17758f9f7e331939b841f4e33e54e9b5ac.roa (raw, json)
Hash identifier: WfjG+Fpk/HoIqUmoJJnNbIn7+MLch9owP1V+4hYR7Co=
Subject key identifier: DD:84:08:A1:43:1A:45:62:87:CC:FF:6C:1E:77:1C:C9:0B:29:98:FB
Certificate issuer: /CN=e76fc7a962bfd6c9bdb1ab01d56614b9df19caeb
Certificate serial: 01172E
Authority key identifier: 05:03:92:21:C1:1A:D6:9C:B4:E7:E9:EF:F3:2D:D5:44:96:BE:27:19
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e76fc7a962bfd6c9bdb1ab01d56614b9df19caeb.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/434a7ffa-8ef9-4659-89f9-cef7df8b97c2/68937b17758f9f7e331939b841f4e33e54e9b5ac.roa
Signing time: Sat 03 Jun 2023 15:08:51 +0000
ROA not before: Fri 02 Jun 2023 15:08:51 +0000
ROA not after: Tue 03 Jun 2025 15:08:51 +0000
asID: 265816
IP address blocks: 45.175.40.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71470 (0x1172e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e76fc7a962bfd6c9bdb1ab01d56614b9df19caeb
Validity
Not Before: Jun 2 15:08:51 2023 GMT
Not After : Jun 3 15:08:51 2025 GMT
Subject: CN=68937b17758f9f7e331939b841f4e33e54e9b5ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:10:01:3d:0c:c8:70:75:1b:26:5e:54:46:d7:
35:6b:8f:f6:83:dd:ff:74:01:18:14:6f:db:0e:41:
79:a6:01:b6:d5:83:ef:cd:86:a2:2d:62:32:48:a0:
24:bd:50:00:0b:9d:f4:fc:a1:ec:67:a9:f1:70:e8:
0a:af:34:07:00:b9:59:f9:af:8c:71:a4:8c:6e:8f:
dd:2f:78:5a:70:e7:f5:08:ac:3a:18:27:99:56:8c:
ed:a3:fa:3d:4b:4a:a2:f4:fc:cd:dd:96:4b:59:bb:
ed:6f:8e:38:f5:30:66:41:74:56:a1:e7:11:da:f1:
89:66:63:53:65:3f:69:23:92:3a:68:51:97:80:5e:
03:15:42:bc:ea:4c:44:20:7a:cb:fa:4f:00:00:dc:
c7:fd:dc:3a:9f:df:5a:fa:a8:3c:ea:75:cc:ed:35:
0c:5f:da:01:5a:fe:e1:ac:12:38:30:8d:52:f0:d5:
a5:68:54:b8:79:12:8c:1c:c4:ce:51:34:1c:a8:52:
91:a2:2b:d8:95:1f:69:d6:e0:6a:2f:7d:61:25:f7:
24:6c:7b:fc:3b:05:42:cd:10:5b:46:4b:08:fc:0c:
79:9e:7c:17:da:90:4e:a5:dd:70:cc:ab:b7:42:97:
1e:b6:00:30:32:1d:57:f5:22:58:6c:f4:c8:b1:4f:
9b:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:84:08:A1:43:1A:45:62:87:CC:FF:6C:1E:77:1C:C9:0B:29:98:FB
X509v3 Authority Key Identifier:
keyid:05:03:92:21:C1:1A:D6:9C:B4:E7:E9:EF:F3:2D:D5:44:96:BE:27:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e76fc7a962bfd6c9bdb1ab01d56614b9df19caeb.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/434a7ffa-8ef9-4659-89f9-cef7df8b97c2/68937b17758f9f7e331939b841f4e33e54e9b5ac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/434a7ffa-8ef9-4659-89f9-cef7df8b97c2/e76fc7a962bfd6c9bdb1ab01d56614b9df19caeb.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.175.40.0/22
Signature Algorithm: sha256WithRSAEncryption
4d:49:6c:f0:2d:99:cd:a4:bf:7e:dc:c8:03:82:f6:69:5a:a3:
0b:8c:d2:04:06:fc:ce:81:05:79:fe:12:06:e7:58:a1:2b:cc:
19:02:1c:fb:1a:15:63:01:01:53:7e:33:4a:cd:a8:04:1d:69:
cb:2c:95:4a:1e:7d:87:1a:22:59:99:b4:56:3b:ab:71:71:95:
1b:91:f8:e8:86:24:96:71:4c:a6:71:12:ce:b9:dc:a5:f6:79:
04:33:45:fb:9d:2c:b3:07:64:f5:f6:68:e9:5f:9e:16:c1:c0:
98:c3:58:c1:9f:64:8d:d4:b8:2c:fe:d4:d2:0b:3c:38:6c:43:
6e:88:a4:1a:55:d5:33:6d:ce:f3:85:5b:95:9f:d1:b4:73:72:
a1:9c:67:6c:b8:13:4b:92:d5:0f:0c:df:9b:be:64:ec:88:84:
09:a5:f2:bd:43:f8:ff:3e:82:95:c9:c2:02:c4:6a:d4:23:cf:
82:d0:7c:85:9e:5c:dc:6a:6b:5a:a7:9d:0c:cc:dc:cc:a0:1c:
2c:f5:35:b3:a2:47:c2:a7:9f:77:bf:7f:3e:85:80:06:d6:d4:
d1:ed:a7:b3:9b:9e:3b:0e:36:62:ae:e9:2c:d1:4d:90:60:00:
8e:3c:73:ae:5c:28:5b:cf:69:dc:b4:5e:1b:e7:66:af:d1:50:
22:3e:b6:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:20 2024 by rpki-client on console-ams.rpki-client.org