Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c53d6f63-91e1-44ed-afcd-1622060c784c/cb3dace95ba29b59ff15c9e330d2f8b8e100c4df.roa
File: cb3dace95ba29b59ff15c9e330d2f8b8e100c4df.roa (raw, json)
Hash identifier: MCpByMxS2+bs0J8xIwMSBqWlr0MY/aE7HrB4OrFSZQY=
Subject key identifier: 76:33:1F:68:BA:97:01:C1:13:24:18:EA:1C:5E:B8:E1:F3:4B:6E:AB
Certificate issuer: /CN=d91fe0c4e650a338e80b4066e31e49e8122cdeb1
Certificate serial: 21ED18
Authority key identifier: EC:FB:32:23:27:26:26:BF:FC:62:56:D6:D8:D5:85:9F:FE:AB:E8:0B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d91fe0c4e650a338e80b4066e31e49e8122cdeb1.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/c53d6f63-91e1-44ed-afcd-1622060c784c/cb3dace95ba29b59ff15c9e330d2f8b8e100c4df.roa
Signing time: Thu 06 Jul 2023 04:30:25 +0000
ROA not before: Wed 05 Jul 2023 04:30:25 +0000
ROA not after: Sun 06 Jul 2025 04:30:25 +0000
asID: 52468
IP address blocks: 45.225.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2223384 (0x21ed18)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d91fe0c4e650a338e80b4066e31e49e8122cdeb1
Validity
Not Before: Jul 5 04:30:25 2023 GMT
Not After : Jul 6 04:30:25 2025 GMT
Subject: CN=cb3dace95ba29b59ff15c9e330d2f8b8e100c4df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:76:24:59:47:44:ef:7e:05:83:94:ae:7f:3b:
07:ed:71:24:23:87:5f:6c:12:63:e5:0c:46:bb:01:
4a:c6:b5:88:40:25:1f:09:5e:47:fa:84:8e:95:0a:
27:08:ea:99:d3:db:c0:f5:2f:7d:72:7e:30:9d:28:
09:e5:6f:38:68:e9:11:0a:f4:cb:40:4a:a2:ef:dc:
e8:8a:3d:36:2e:70:22:9f:24:61:c8:93:57:7f:8d:
0a:de:ab:dc:84:86:40:2d:86:7f:a4:20:a7:e5:26:
3a:68:bd:35:51:65:a8:7d:52:8b:d5:e4:07:2f:66:
57:ae:81:7d:de:cc:44:da:f7:02:d5:49:37:d0:d6:
32:78:32:f1:bc:47:e7:92:c4:93:b1:96:db:d1:45:
55:a7:76:35:2a:8d:e6:47:81:c9:e5:f8:59:ac:c2:
96:65:4a:40:46:0b:7e:ce:25:aa:80:31:4b:c6:fe:
98:07:7b:7a:b4:b4:cd:6d:ee:33:c9:0b:28:fc:57:
e3:10:55:d1:54:27:09:46:37:ff:ad:41:cf:63:f5:
5c:ca:03:b8:af:7f:1c:28:e9:fa:3e:ce:3d:4f:14:
f1:06:37:a4:99:04:b9:91:e6:82:78:d2:e1:9d:17:
94:53:d5:7d:e4:c4:a5:64:7e:46:4d:a1:db:05:02:
cc:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:33:1F:68:BA:97:01:C1:13:24:18:EA:1C:5E:B8:E1:F3:4B:6E:AB
X509v3 Authority Key Identifier:
keyid:EC:FB:32:23:27:26:26:BF:FC:62:56:D6:D8:D5:85:9F:FE:AB:E8:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d91fe0c4e650a338e80b4066e31e49e8122cdeb1.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c53d6f63-91e1-44ed-afcd-1622060c784c/cb3dace95ba29b59ff15c9e330d2f8b8e100c4df.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/c53d6f63-91e1-44ed-afcd-1622060c784c/d91fe0c4e650a338e80b4066e31e49e8122cdeb1.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.225.104.0/22
Signature Algorithm: sha256WithRSAEncryption
6b:cf:15:dc:d9:c9:22:40:4e:12:b0:0f:3e:ea:67:95:97:aa:
c2:cb:a8:59:49:2c:f3:98:b4:06:e6:7f:96:64:c9:dc:0b:80:
ad:0f:43:18:4e:19:23:95:fc:90:e5:e3:04:51:6e:0f:38:2b:
43:8a:b5:f1:41:c6:17:d9:84:6f:41:c1:23:d9:65:28:aa:9c:
a2:36:7b:e4:96:39:9c:89:21:9c:99:ee:80:94:3c:43:5f:93:
15:ca:37:4a:a8:b1:23:47:98:1c:27:0f:06:f8:89:4a:ea:de:
45:50:26:3e:02:dc:f8:69:d6:f1:75:c7:28:5b:19:c2:2f:03:
25:97:cc:da:03:d1:a0:01:a4:db:23:74:19:01:9c:49:63:fd:
99:28:5b:fa:18:1c:60:9a:b2:fd:d9:cf:d5:09:14:61:6a:6c:
49:f6:96:27:ee:0b:4f:4c:17:1d:f8:59:f5:b1:ce:95:1d:5a:
4f:d5:83:51:92:aa:9c:1a:d2:2f:ef:01:80:d1:61:64:34:6b:
00:bd:e7:2c:f4:81:f4:77:b3:70:b0:63:1d:a8:57:11:29:df:
59:c4:3b:bb:25:e0:7b:70:bf:17:dc:55:3d:5f:0f:7d:e0:cd:
54:8c:b0:bd:3f:1e:21:b6:6e:c9:72:b7:e7:fb:c9:0e:97:95:
68:96:a7:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:32 2024 by rpki-client on console-ams.rpki-client.org