Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/056779b9-74e7-4fc3-81f6-3264ab9fc9fc/eca232c4aaa49e7c6faf3eb7a7a29e96d1a13b3b.roa
File: eca232c4aaa49e7c6faf3eb7a7a29e96d1a13b3b.roa (raw, json)
Hash identifier: NfanGGCmGGRH1oWODwoXthkek7mAsGcCuw1RmgItxuU=
Subject key identifier: 89:B2:88:FD:B1:E6:7C:09:C6:71:00:62:D7:6D:4E:AB:4A:03:C8:DE
Certificate issuer: /CN=cd16539c52bd19701a219cb7f91b852671af6b16
Certificate serial: 0362
Authority key identifier: 65:4E:F8:25:03:EE:4F:D4:39:0F:08:28:E2:35:6F:AE:59:82:D0:36
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cd16539c52bd19701a219cb7f91b852671af6b16.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/056779b9-74e7-4fc3-81f6-3264ab9fc9fc/eca232c4aaa49e7c6faf3eb7a7a29e96d1a13b3b.roa
Signing time: Fri 25 Mar 2022 19:30:07 +0000
ROA not before: Fri 25 Mar 2022 03:00:00 +0000
ROA not after: Mon 25 Mar 2024 03:00:00 +0000
asID: 267729
IP address blocks: 45.167.220.0/22 maxlen: 24
2803:e5a0::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 866 (0x362)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd16539c52bd19701a219cb7f91b852671af6b16
Validity
Not Before: Mar 25 03:00:00 2022 GMT
Not After : Mar 25 03:00:00 2024 GMT
Subject: CN=eca232c4aaa49e7c6faf3eb7a7a29e96d1a13b3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:18:bf:dc:02:9c:66:63:6b:d8:c1:e6:db:13:
27:e2:0f:6e:bb:8d:27:4b:e8:27:64:3a:7b:57:13:
48:1d:23:4f:be:9a:5f:d6:eb:55:79:7b:5c:fb:97:
02:a9:7b:71:b9:c4:4f:39:fe:77:57:70:5d:f0:a5:
0b:56:e6:59:b1:50:da:53:5a:b1:6f:6c:57:67:a4:
2d:33:88:c5:5b:51:b1:05:58:2b:5a:99:c8:b2:d4:
cf:35:41:84:c7:1d:48:96:d2:28:d0:8f:6e:55:22:
1f:9e:7f:a1:ea:0b:70:d8:9c:2e:13:c5:06:76:16:
31:43:b1:1c:d6:42:e5:0e:ed:58:67:b3:86:46:59:
ae:ce:90:e8:c4:0d:75:ce:4a:e8:bf:06:e2:20:0c:
03:da:02:42:2b:a1:41:45:d1:eb:01:1e:bf:e1:ab:
cd:20:6c:04:bf:69:30:50:f1:56:b2:8c:4a:29:9a:
fe:c9:64:d1:d9:88:1f:62:33:d1:df:a0:45:c5:dd:
fa:b5:9e:45:f0:75:b9:3d:d7:82:78:c4:33:a0:b9:
d9:52:a5:6f:66:be:ae:7c:99:68:ca:72:40:ee:b9:
82:cc:28:81:50:83:cb:a5:84:37:e2:48:03:cd:3e:
6c:41:ef:5c:15:67:bb:98:a1:13:c4:50:24:64:e6:
95:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:B2:88:FD:B1:E6:7C:09:C6:71:00:62:D7:6D:4E:AB:4A:03:C8:DE
X509v3 Authority Key Identifier:
keyid:65:4E:F8:25:03:EE:4F:D4:39:0F:08:28:E2:35:6F:AE:59:82:D0:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cd16539c52bd19701a219cb7f91b852671af6b16.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/056779b9-74e7-4fc3-81f6-3264ab9fc9fc/eca232c4aaa49e7c6faf3eb7a7a29e96d1a13b3b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/056779b9-74e7-4fc3-81f6-3264ab9fc9fc/cd16539c52bd19701a219cb7f91b852671af6b16.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.167.220.0/22
IPv6:
2803:e5a0::/32
Signature Algorithm: sha256WithRSAEncryption
71:33:04:c3:01:95:ae:1e:05:3c:a0:0b:55:02:d8:dd:33:4f:
c9:42:e0:69:b9:83:e6:82:a6:38:4b:9b:ad:7f:17:ea:e9:9f:
67:ce:0a:ee:b8:9e:d1:32:80:95:9f:86:24:1d:9d:73:1c:dd:
12:8f:f0:84:88:7e:0d:79:3b:8c:80:37:df:3e:eb:37:17:87:
89:bb:94:42:33:65:8f:eb:63:c7:1d:79:16:09:8b:b8:01:ab:
89:a7:01:27:c8:24:dc:6a:b4:51:37:f8:5d:d9:ac:3c:ec:ce:
c5:7b:ba:c9:91:3f:f0:42:02:b9:27:10:7e:50:59:bf:d5:79:
b5:eb:fe:63:13:67:38:d5:33:f3:8c:5a:90:6c:a9:90:76:37:
43:f9:c1:a7:8b:e8:fe:3b:2a:df:1b:ba:9e:6b:95:2d:13:d0:
33:b6:14:c1:de:95:60:f5:ba:ea:fb:fa:bb:21:0e:51:2e:78:
e1:40:b6:64:a3:0f:24:5f:41:73:5f:00:7b:0c:80:4a:a6:0e:
53:0d:fb:7e:55:6f:a9:1a:2d:e1:1c:88:36:2d:82:c2:f1:28:
38:19:9b:27:09:2a:ce:8c:32:a3:88:53:90:28:ea:d5:f7:7a:
f7:9d:37:9b:c8:ab:03:6c:51:ae:c7:a7:bc:d0:d5:27:97:4c:
6f:14:e6:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:55 2024 by rpki-client on console-ams.rpki-client.org