Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/73d3e4e0-1104-465f-8046-3d000f7984d1/0a567b2824062fa53b4aadb31ea0705fab85ced1.roa
File: 0a567b2824062fa53b4aadb31ea0705fab85ced1.roa (raw, json)
Hash identifier: dpvcLKvFMrhbOXhJOmNbGzUBNf/KPn9bCqEBYlaZhDE=
Subject key identifier: D1:6B:13:45:7F:F4:EF:6E:71:15:2B:F8:35:C9:05:E3:49:63:43:C4
Certificate issuer: /CN=8d9ca26cda476eac56c2da41cd111c8e4a1b1f36
Certificate serial: 215C24
Authority key identifier: 7E:FA:29:AF:AA:2C:F6:B6:97:AD:DE:DF:78:63:8F:06:E0:B7:E7:69
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8d9ca26cda476eac56c2da41cd111c8e4a1b1f36.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/73d3e4e0-1104-465f-8046-3d000f7984d1/0a567b2824062fa53b4aadb31ea0705fab85ced1.roa
Signing time: Wed 05 Jul 2023 01:48:56 +0000
ROA not before: Tue 04 Jul 2023 01:48:56 +0000
ROA not after: Sat 05 Jul 2025 01:48:56 +0000
asID: 52468
IP address blocks: 45.224.152.0/23 maxlen: 23
45.224.154.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2186276 (0x215c24)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d9ca26cda476eac56c2da41cd111c8e4a1b1f36
Validity
Not Before: Jul 4 01:48:56 2023 GMT
Not After : Jul 5 01:48:56 2025 GMT
Subject: CN=0a567b2824062fa53b4aadb31ea0705fab85ced1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:03:ea:71:64:7a:8f:1d:e1:5e:50:f4:8f:8e:
8a:25:e5:ef:aa:81:f8:83:5b:79:c2:58:9e:7b:17:
fe:b9:f8:20:bf:a5:00:fe:5c:7d:df:f1:51:02:6e:
09:b6:3b:40:e2:eb:a5:b6:d9:1d:44:f1:51:e7:9b:
52:f7:5c:1f:3e:e7:9b:3e:1d:53:27:52:73:6d:9f:
8d:fd:d3:f5:3b:aa:2a:39:f9:9e:a5:a0:a9:c9:f3:
55:7e:bf:50:a6:fb:a0:23:40:5a:5a:5b:7d:f5:8f:
5c:4d:66:ba:0e:c2:76:c2:37:6c:4f:81:3a:aa:a1:
3f:b7:24:1f:3b:3a:52:cc:b0:b9:b9:da:3c:ac:22:
ae:fc:07:26:de:86:58:48:cc:91:f9:ef:3e:11:5b:
35:2a:d9:6b:e1:3f:c1:7b:86:10:96:0d:2d:0c:81:
0a:e7:3c:f5:f0:15:0b:9d:06:71:11:82:9c:5f:2b:
63:d8:47:36:77:1d:18:a6:d1:da:39:b7:0b:17:86:
10:65:68:bc:6f:34:40:7b:5f:32:48:78:0e:3c:71:
bf:21:95:bc:56:fa:19:2a:02:51:82:41:cb:31:13:
f2:bb:15:09:44:10:34:8d:5a:a4:71:f5:81:ba:bb:
56:70:58:0f:cc:3a:6e:1d:75:a3:c8:05:cf:32:94:
3f:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:6B:13:45:7F:F4:EF:6E:71:15:2B:F8:35:C9:05:E3:49:63:43:C4
X509v3 Authority Key Identifier:
keyid:7E:FA:29:AF:AA:2C:F6:B6:97:AD:DE:DF:78:63:8F:06:E0:B7:E7:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8d9ca26cda476eac56c2da41cd111c8e4a1b1f36.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/73d3e4e0-1104-465f-8046-3d000f7984d1/0a567b2824062fa53b4aadb31ea0705fab85ced1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/73d3e4e0-1104-465f-8046-3d000f7984d1/8d9ca26cda476eac56c2da41cd111c8e4a1b1f36.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.224.152.0/22
Signature Algorithm: sha256WithRSAEncryption
0f:b8:65:3f:88:fb:ef:66:e0:ab:dc:33:03:b8:d3:ef:27:78:
63:2c:5d:e7:04:f0:9e:9f:5b:bc:12:d6:b7:c2:59:66:91:77:
3a:e7:45:69:c3:c5:2b:01:aa:81:7b:4f:b3:41:6e:2e:77:f5:
c2:f9:b0:15:4f:b5:3b:5c:79:b0:a3:76:8c:db:ce:e9:ab:3f:
4a:0f:ee:8f:73:cd:4c:b5:94:34:85:6d:a1:a9:7f:57:88:42:
29:66:24:c2:31:fd:f7:6c:ec:0d:3d:d9:89:b9:5a:fe:ee:ce:
c9:87:9a:86:e6:a8:fe:c0:00:67:cb:de:ef:b2:28:63:85:df:
a4:03:84:1d:9b:b3:9c:eb:93:cb:19:d4:bf:41:7b:66:7d:13:
99:55:82:f9:0f:83:52:d8:37:60:a5:47:03:df:a5:80:0e:2d:
a7:1b:bd:c5:64:aa:34:24:04:ba:82:b2:ff:6a:70:af:67:d4:
f8:00:cc:0a:c5:42:2b:fa:b0:30:9d:3c:90:de:8c:ef:31:a1:
d0:30:61:2d:9c:6d:d5:ba:2d:5a:c1:08:6e:eb:2a:fa:45:74:
d5:57:5e:72:4e:58:9a:4d:4a:55:42:fa:8e:fe:a5:eb:3a:0d:
28:ba:10:ce:3f:a6:ae:59:7e:0e:bc:58:79:f3:06:a0:39:30:
d0:45:7c:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:50 2024 by rpki-client on console-fra.rpki-client.org