Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/07bd1013-73fe-496a-8cf7-ce317fe12099/e287b7e837318a7343dd00519227d652ab352ac2.roa
File: e287b7e837318a7343dd00519227d652ab352ac2.roa (raw, json)
Hash identifier: LJXDGHkLKBJL+ZqKYcrkA3N7tg4/jjxZkjduTxa9Nsg=
Subject key identifier: F5:E8:AF:A8:37:CB:13:C7:3A:8D:2D:8B:92:BC:E7:9F:59:07:17:E0
Certificate issuer: /CN=df98b707ece174bc717e21a1d3ec0ca5a54d4e61
Certificate serial: 2140BB
Authority key identifier: F4:1A:31:A7:59:0E:06:2B:15:9F:7A:01:02:E5:C8:54:43:02:FF:C3
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/df98b707ece174bc717e21a1d3ec0ca5a54d4e61.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/07bd1013-73fe-496a-8cf7-ce317fe12099/e287b7e837318a7343dd00519227d652ab352ac2.roa
Signing time: Sat 22 Jul 2023 23:55:20 +0000
ROA not before: Fri 21 Jul 2023 23:55:20 +0000
ROA not after: Tue 22 Jul 2025 23:55:20 +0000
asID: 266682
IP address blocks: 45.228.76.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2179259 (0x2140bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df98b707ece174bc717e21a1d3ec0ca5a54d4e61
Validity
Not Before: Jul 21 23:55:20 2023 GMT
Not After : Jul 22 23:55:20 2025 GMT
Subject: CN=e287b7e837318a7343dd00519227d652ab352ac2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:74:b0:eb:d9:a4:ef:64:03:44:49:1e:3e:ed:
3e:2b:85:cb:5b:ba:8f:8c:fd:4d:5c:99:05:13:a9:
53:60:08:35:9c:8f:ab:ee:79:50:2d:7d:b3:c8:c5:
9f:c9:de:c8:9d:9a:f6:22:a0:12:66:99:ea:26:cc:
bd:af:d8:d2:80:b0:57:21:74:bc:8f:cb:2e:95:10:
1e:06:f3:aa:d0:44:55:c3:f2:8c:5a:0d:ee:f6:4f:
31:ca:c6:87:1e:87:b6:20:9c:da:d0:f2:bd:d0:cb:
f1:bc:9a:1e:6d:1f:ca:69:30:57:77:9c:26:4a:35:
cc:8d:c3:2a:b7:10:78:86:c1:7d:bd:b7:8a:80:0f:
a6:44:17:d9:df:74:c9:2c:0b:b9:4c:76:56:70:32:
49:e3:08:f7:73:dd:67:54:f7:07:f4:39:a5:6d:b6:
85:b0:73:94:3a:8c:09:34:c4:66:6e:e6:44:60:45:
67:e3:e5:85:54:7c:fa:25:00:68:b1:22:99:20:5d:
1a:41:9d:e5:69:c9:ae:90:d7:68:26:02:88:3e:6f:
af:2f:60:1b:aa:5f:01:2e:57:ea:4f:43:47:23:eb:
89:3d:48:c2:0e:ea:80:74:35:16:fe:a0:e4:ac:17:
9f:b1:d8:c0:c2:34:b5:f9:18:1e:33:64:1c:4b:d9:
65:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:E8:AF:A8:37:CB:13:C7:3A:8D:2D:8B:92:BC:E7:9F:59:07:17:E0
X509v3 Authority Key Identifier:
keyid:F4:1A:31:A7:59:0E:06:2B:15:9F:7A:01:02:E5:C8:54:43:02:FF:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/df98b707ece174bc717e21a1d3ec0ca5a54d4e61.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/07bd1013-73fe-496a-8cf7-ce317fe12099/e287b7e837318a7343dd00519227d652ab352ac2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/07bd1013-73fe-496a-8cf7-ce317fe12099/df98b707ece174bc717e21a1d3ec0ca5a54d4e61.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.228.76.0/22
Signature Algorithm: sha256WithRSAEncryption
c6:c5:30:75:4e:c3:18:2a:cf:f9:0a:86:13:cb:97:e6:f4:f3:
52:51:c5:61:b1:d0:25:7d:31:09:f9:75:0d:7f:a4:4a:a7:8a:
d5:57:ff:53:1f:ee:9b:71:94:be:65:21:9c:9a:9d:21:8f:1f:
ea:23:79:4c:40:ec:e7:80:b9:a3:61:f6:28:e1:44:a9:39:ce:
1a:1e:ed:d8:f9:86:0d:99:f9:1e:8b:23:be:2b:0a:9e:8b:2a:
52:f1:a9:fb:ca:b5:71:e7:5f:cc:6e:8f:f1:41:94:7c:a2:3b:
b6:33:80:8b:7b:a7:f0:96:1c:65:d8:77:d6:dd:e5:08:b7:25:
93:3b:22:bb:a1:fe:46:0d:28:ab:4a:c1:7a:92:ab:33:26:f0:
24:ad:74:93:a0:ca:ea:88:74:8d:b0:40:70:00:98:2b:bb:81:
d5:8c:c7:55:40:71:5a:c5:fb:bd:09:7c:0a:ea:1a:41:16:7f:
fd:25:26:d8:cc:ca:ba:6a:58:3f:24:29:02:79:5d:1c:10:44:
b0:08:77:72:78:db:32:e4:9d:9d:11:88:27:56:08:3d:d6:c6:
19:35:64:dd:09:a1:d3:c5:cd:2d:b4:8f:05:04:0d:7c:56:0f:
db:c3:73:cb:e9:c3:0f:0e:27:0f:b1:7b:66:81:d2:ed:56:97:
09:dc:53:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:01 2024 by rpki-client on console-fra.rpki-client.org