Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0138cf09-51ec-43d9-adc8-4aba0da39808/ca1b4f361549d2272c70f871030ab6ba981d1019.roa
File: ca1b4f361549d2272c70f871030ab6ba981d1019.roa (raw, json)
Hash identifier: lHV/7mEhj7S0c3wN/avlsMYHX9nqwa0VyxCKOaOrBc0=
Subject key identifier: 90:E1:61:92:F8:23:F3:0A:41:55:FD:4B:16:2C:06:C7:E4:3B:30:09
Certificate issuer: /CN=f6fe25a266009db467ead60d5ec947af0402cb02
Certificate serial: 12A05C
Authority key identifier: B4:E7:FD:7E:36:23:82:23:C3:0C:03:91:F3:2B:E7:BF:31:0F:E8:2C
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f6fe25a266009db467ead60d5ec947af0402cb02.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0138cf09-51ec-43d9-adc8-4aba0da39808/ca1b4f361549d2272c70f871030ab6ba981d1019.roa
Signing time: Mon 10 Apr 2023 21:40:43 +0000
ROA not before: Wed 22 Mar 2023 08:32:27 +0000
ROA not after: Sat 22 Mar 2025 08:32:27 +0000
asID: 271885
IP address blocks: 45.68.7.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1220700 (0x12a05c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6fe25a266009db467ead60d5ec947af0402cb02
Validity
Not Before: Mar 22 08:32:27 2023 GMT
Not After : Mar 22 08:32:27 2025 GMT
Subject: CN=ca1b4f361549d2272c70f871030ab6ba981d1019
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:e6:b1:38:ec:e3:23:1f:9d:e5:c3:39:54:ae:
98:53:8f:b5:c5:af:de:28:82:a4:e6:12:8a:f9:7e:
d0:a5:49:20:03:19:8f:91:91:94:2c:86:98:76:38:
13:36:20:f9:6c:e4:42:ec:25:38:c7:35:63:d2:b9:
fe:6c:62:18:40:44:81:66:d6:ad:03:c3:38:16:28:
f3:27:8d:28:ef:8a:2e:e7:ab:c5:bb:4a:d3:56:3c:
a1:93:5c:91:f9:cc:01:40:10:fc:03:7b:cd:85:17:
f4:f6:3b:b1:59:ac:47:9d:2b:f4:dd:6f:fc:26:a1:
3b:df:d7:e7:2d:5d:38:52:d0:81:9d:c1:85:a0:d3:
c1:57:0e:fc:cd:79:45:3d:1a:19:cc:c5:0d:f4:6a:
56:37:17:7b:49:8e:69:e0:2a:46:95:fa:3d:fb:b1:
4d:97:8e:d5:cd:05:01:e0:0a:e1:35:7c:26:c7:27:
48:19:69:71:fe:fc:a5:23:b6:45:f1:a2:3a:40:30:
9d:07:6c:80:80:83:13:b4:cc:f1:87:14:34:b0:fb:
fc:62:de:1f:8f:e6:f2:68:69:8d:61:fe:5a:5f:67:
04:10:0d:2c:f0:6f:50:0e:7b:fb:a3:02:50:ed:37:
18:79:75:c0:a0:b8:ee:c6:43:f0:a3:06:7d:19:49:
77:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:E1:61:92:F8:23:F3:0A:41:55:FD:4B:16:2C:06:C7:E4:3B:30:09
X509v3 Authority Key Identifier:
keyid:B4:E7:FD:7E:36:23:82:23:C3:0C:03:91:F3:2B:E7:BF:31:0F:E8:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f6fe25a266009db467ead60d5ec947af0402cb02.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0138cf09-51ec-43d9-adc8-4aba0da39808/ca1b4f361549d2272c70f871030ab6ba981d1019.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/0138cf09-51ec-43d9-adc8-4aba0da39808/f6fe25a266009db467ead60d5ec947af0402cb02.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.68.7.0/24
Signature Algorithm: sha256WithRSAEncryption
34:b4:e7:69:c7:5b:13:58:59:3d:cb:f6:ab:ae:3f:6c:2b:47:
c0:81:b4:7c:b5:6d:0c:f4:43:d6:ce:06:8d:32:e5:92:e9:69:
dd:44:cc:ab:c3:28:76:81:ee:df:02:77:7e:c6:59:5a:fd:35:
45:5a:35:53:f6:e3:86:87:c7:01:79:2b:64:f3:67:9f:70:3a:
c4:48:35:7b:f7:8d:1e:ce:d8:b2:eb:2a:d4:36:96:9e:91:f0:
23:07:bf:34:2e:46:4b:f8:bb:3b:e9:e5:0b:6c:0e:0e:0b:bb:
9f:10:14:e0:e1:d7:a7:04:70:1e:32:9e:6b:05:e6:41:1b:ee:
07:25:45:67:33:6b:96:dc:a2:0a:e9:b1:04:6f:a4:42:b2:68:
32:52:0a:fe:94:d4:8c:06:73:53:80:53:56:96:12:d9:b9:3d:
25:e7:00:b5:87:7a:3f:09:c0:3e:d8:bc:69:51:f4:b2:3c:59:
43:ba:c9:91:94:2f:0b:ae:05:a3:c0:bd:cf:57:9d:92:44:eb:
63:0d:e2:fe:df:a2:5e:0f:16:1e:03:e6:db:2f:54:93:93:17:
84:45:94:1a:f7:6c:1a:f9:ac:7c:81:71:0c:64:fb:fb:4d:12:
95:fc:ff:14:e0:9a:ce:d1:c5:37:48:27:77:0f:46:35:e2:2f:
14:f0:9c:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:53 2024 by rpki-client on console-ams.rpki-client.org