Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4f2f36f6-36b9-4cca-8422-d63c900457fe/a7bda699427774a0821212c0be4a4b9ceb02b4d1.roa
File: a7bda699427774a0821212c0be4a4b9ceb02b4d1.roa (raw, json)
Hash identifier: 80EDDgTvoGPVYhcSp/bFbTOrZDHaSmZn+YNcl4XFMn0=
Subject key identifier: E9:B9:64:BC:4B:3F:6E:6D:B6:3E:88:3B:C5:B0:1E:AF:CA:71:04:A9
Certificate issuer: /CN=bee92c51e9c67fe64edca7f74df96052de7a6d98
Certificate serial: 0D8812
Authority key identifier: B7:A2:D8:12:B4:F3:C7:E9:D8:94:C9:59:BE:EB:B3:50:E3:39:90:96
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bee92c51e9c67fe64edca7f74df96052de7a6d98.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4f2f36f6-36b9-4cca-8422-d63c900457fe/a7bda699427774a0821212c0be4a4b9ceb02b4d1.roa
Signing time: Wed 24 Mar 2021 14:36:16 +0000
ROA not before: Wed 24 Mar 2021 14:36:16 +0000
ROA not after: Tue 24 Mar 2026 14:36:16 +0000
asID: 266816
IP address blocks: 45.233.170.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 886802 (0xd8812)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bee92c51e9c67fe64edca7f74df96052de7a6d98
Validity
Not Before: Mar 24 14:36:16 2021 GMT
Not After : Mar 24 14:36:16 2026 GMT
Subject: CN=a7bda699427774a0821212c0be4a4b9ceb02b4d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:4c:c2:29:dd:b1:71:5e:63:73:39:ac:ef:7e:
b9:ad:d9:7e:60:20:12:f0:30:47:7a:14:69:01:cd:
7d:2b:b5:73:45:e5:fe:f2:3b:8f:1e:0e:64:64:c7:
1b:03:2d:2a:12:af:26:0a:92:83:c1:c2:e5:10:ee:
2c:82:62:09:2c:73:ad:35:43:32:c1:74:f0:ad:87:
ba:fc:72:cf:7e:18:9e:a9:09:49:ad:b9:c6:bf:72:
33:02:04:dc:69:ec:af:fe:6d:bd:f6:2b:d2:a3:fe:
aa:8d:e8:9a:67:27:84:8c:a4:2b:e3:31:ad:e2:2c:
db:8b:db:3b:cf:1f:65:41:7c:1d:38:47:56:62:b2:
70:e4:9c:7e:91:c5:83:25:63:af:92:fd:9e:fc:4c:
94:fa:eb:c5:43:82:80:38:8a:05:50:55:b7:4a:1e:
a4:9d:3e:16:40:2d:ee:81:4b:86:84:ce:f1:dc:75:
f0:9e:f9:b5:6c:4f:fc:fc:b8:c1:ed:1d:48:c9:56:
0e:fc:b6:23:a0:54:62:92:2b:c9:8f:3a:a8:0b:9b:
63:86:33:52:de:b8:c7:00:c7:1d:7c:18:49:67:0f:
2b:da:59:56:fa:42:47:77:22:cf:c1:3b:73:4d:84:
bc:8a:b8:92:da:d2:31:35:e9:65:fe:61:d1:32:49:
b9:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:B9:64:BC:4B:3F:6E:6D:B6:3E:88:3B:C5:B0:1E:AF:CA:71:04:A9
X509v3 Authority Key Identifier:
keyid:B7:A2:D8:12:B4:F3:C7:E9:D8:94:C9:59:BE:EB:B3:50:E3:39:90:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bee92c51e9c67fe64edca7f74df96052de7a6d98.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4f2f36f6-36b9-4cca-8422-d63c900457fe/a7bda699427774a0821212c0be4a4b9ceb02b4d1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/4f2f36f6-36b9-4cca-8422-d63c900457fe/bee92c51e9c67fe64edca7f74df96052de7a6d98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.233.170.0/24
Signature Algorithm: sha256WithRSAEncryption
60:9d:50:02:d5:ff:01:42:24:f4:f3:7d:d1:54:97:b0:c4:cb:
72:36:35:a0:99:8f:70:d4:42:3a:17:10:48:36:f7:ce:41:6d:
51:df:5b:9d:54:f0:b0:dc:eb:30:5f:2e:bb:67:72:4f:5c:ca:
0c:e6:5c:77:07:0d:2d:68:47:e5:1b:73:0b:de:da:1d:f7:cd:
93:c2:c7:d7:f5:14:67:4f:ce:b9:4f:8d:27:2c:37:19:f1:e2:
95:55:f3:c5:e2:b5:19:7a:6b:c9:cf:9c:6d:7b:9e:c2:6d:88:
0a:b5:ba:e2:f7:a6:78:0c:00:8a:31:7d:28:0a:4f:af:0e:2d:
58:1e:25:5f:3f:2f:e1:eb:e1:08:48:eb:26:a3:3d:af:26:81:
ff:69:3b:a2:1d:fd:fc:29:71:ab:a8:1b:e7:83:d5:c8:9b:ca:
c1:45:d2:28:2c:d9:5b:24:54:fc:49:75:27:01:45:4c:d6:59:
f1:d4:f8:8e:54:d9:fb:17:35:6f:71:4c:3c:b5:6e:86:29:92:
06:02:3c:09:e1:9b:c5:d4:8e:51:ce:74:19:a9:29:48:09:39:
03:3a:10:b1:24:c1:4f:14:9c:e7:23:18:3f:26:0b:af:bd:a8:
f8:c1:22:09:d7:7b:ef:2f:6e:f9:7d:03:e7:12:fd:2a:67:23:
db:e0:dc:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:33 2024 by rpki-client on console-ams.rpki-client.org