Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0138cf09-51ec-43d9-adc8-4aba0da39808/835185d79310eb72e1bd31729a2bec98914bef2a.roa
File: 835185d79310eb72e1bd31729a2bec98914bef2a.roa (raw, json)
Hash identifier: Il4tu4AlSbAoEHRCkJz3NpwreGS8y2uTYJjY6r12+m0=
Subject key identifier: FE:9A:72:B5:58:9A:97:8B:C1:4E:ED:C4:4D:5C:1D:71:47:C6:58:ED
Certificate issuer: /CN=f6fe25a266009db467ead60d5ec947af0402cb02
Certificate serial: 135BB9
Authority key identifier: B4:E7:FD:7E:36:23:82:23:C3:0C:03:91:F3:2B:E7:BF:31:0F:E8:2C
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f6fe25a266009db467ead60d5ec947af0402cb02.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0138cf09-51ec-43d9-adc8-4aba0da39808/835185d79310eb72e1bd31729a2bec98914bef2a.roa
Signing time: Wed 10 May 2023 00:58:17 +0000
ROA not before: Tue 09 May 2023 00:58:17 +0000
ROA not after: Sat 10 May 2025 00:58:17 +0000
asID: 271885
IP address blocks: 45.68.4.0/22 maxlen: 24
2801:12:e800::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1268665 (0x135bb9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6fe25a266009db467ead60d5ec947af0402cb02
Validity
Not Before: May 9 00:58:17 2023 GMT
Not After : May 10 00:58:17 2025 GMT
Subject: CN=835185d79310eb72e1bd31729a2bec98914bef2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:0b:cf:1a:dd:69:cd:0a:cc:a8:02:49:0a:72:
aa:58:50:bb:0f:3e:4d:f1:96:65:55:45:59:8f:e8:
e5:8a:16:09:3e:86:fa:a4:96:3e:10:5b:34:1b:94:
ec:3d:93:2d:a0:9b:cb:d5:a7:e8:25:61:f3:83:68:
6a:89:67:00:cc:17:46:6f:0b:6e:d7:63:29:d9:a5:
56:9c:4e:2d:30:81:be:ce:9a:b6:2f:a0:5d:3c:c9:
a9:38:a8:03:60:3f:5d:e0:43:c3:4e:47:e6:76:14:
9d:e2:69:bb:44:36:ac:62:5e:95:c8:6a:a7:fd:e1:
a4:06:3b:5e:fc:06:a4:da:18:21:63:85:13:69:88:
e1:94:25:2e:11:46:b2:c2:4a:80:11:fb:37:e0:2c:
59:89:ac:98:51:7d:59:1e:77:5c:02:6f:bf:4b:e1:
34:c5:fe:04:82:56:90:cb:61:22:dc:c5:8f:4d:3e:
4d:9c:fd:6f:dd:e5:98:ac:c5:e8:a2:ea:16:c7:99:
c6:5a:db:76:c7:6e:eb:97:54:d2:cc:58:c4:58:40:
0d:bd:23:c4:79:20:c6:93:a0:ad:87:84:33:54:c0:
75:c4:3c:6e:6a:be:3f:c6:5b:60:d6:8b:1d:e1:99:
a0:2f:da:c3:91:d0:19:38:6f:27:38:4f:9b:5f:ec:
8f:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:9A:72:B5:58:9A:97:8B:C1:4E:ED:C4:4D:5C:1D:71:47:C6:58:ED
X509v3 Authority Key Identifier:
keyid:B4:E7:FD:7E:36:23:82:23:C3:0C:03:91:F3:2B:E7:BF:31:0F:E8:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f6fe25a266009db467ead60d5ec947af0402cb02.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0138cf09-51ec-43d9-adc8-4aba0da39808/835185d79310eb72e1bd31729a2bec98914bef2a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/0138cf09-51ec-43d9-adc8-4aba0da39808/f6fe25a266009db467ead60d5ec947af0402cb02.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.68.4.0/22
IPv6:
2801:12:e800::/48
Signature Algorithm: sha256WithRSAEncryption
b1:f5:db:80:f8:f9:22:17:43:01:af:f0:7f:45:3d:f6:44:f5:
99:f6:f4:a3:95:0d:16:d2:69:e4:a7:89:a9:2c:28:61:ba:5c:
5c:7b:b6:e7:5d:08:a8:ae:5b:6a:0c:98:a5:9c:24:f2:b1:74:
04:0a:0b:b7:d1:0a:2b:34:5b:63:c4:8b:1d:ce:fe:00:7e:dc:
16:38:22:9d:db:d8:78:69:b0:a6:4c:27:f1:b8:f9:58:d0:24:
2e:1b:4c:42:94:8c:4b:3f:90:b3:58:16:80:3a:cf:6a:6a:51:
22:1e:3e:c3:ba:dd:a6:57:35:b4:52:7d:4d:40:89:0b:f6:08:
14:91:a6:6a:25:23:22:41:df:f1:85:3f:2a:2e:8b:e3:d8:8f:
32:c0:26:d1:bc:32:fa:32:c7:78:53:15:59:77:8b:4f:2e:7c:
97:18:68:f7:ea:07:aa:1a:d1:d0:53:9e:83:6e:0e:33:5c:39:
0e:a9:cc:74:1c:28:c2:f1:f9:41:6f:7f:0e:43:77:9b:02:1e:
52:31:09:aa:a9:92:f9:c8:50:02:74:ab:19:96:20:4a:4a:a2:
e8:88:8b:48:6f:de:72:3d:4f:85:32:a4:21:ba:0c:fc:be:f2:
c3:cb:4e:20:a6:36:ca:4d:8e:81:d1:41:07:45:cc:54:41:fb:
fd:bd:6d:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:00 2024 by rpki-client on console-fra.rpki-client.org