Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/09d82754-9806-40e7-b46b-c61074594732/5671f9f8bcc0099a52b317456c64fc0fe4a2e5eb.roa
File: 5671f9f8bcc0099a52b317456c64fc0fe4a2e5eb.roa (raw, json)
Hash identifier: 3QVloktvO523LTofN40WHxvqDOhYpGuUoR/vP3bGsr8=
Subject key identifier: 70:9C:22:40:94:CF:F9:D2:D8:EC:6D:38:48:D6:E0:E0:42:EF:5E:F9
Certificate issuer: /CN=27a5488123c2689d948f7eb4b73b6005b88be1ca
Certificate serial: 18302A
Authority key identifier: 54:F1:6F:BA:22:CF:BD:0E:86:5A:AF:6D:67:43:85:24:C4:62:C2:48
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/27a5488123c2689d948f7eb4b73b6005b88be1ca.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/09d82754-9806-40e7-b46b-c61074594732/5671f9f8bcc0099a52b317456c64fc0fe4a2e5eb.roa
Signing time: Mon 08 May 2023 15:39:19 +0000
ROA not before: Sun 07 May 2023 15:39:18 +0000
ROA not after: Thu 08 May 2025 15:39:18 +0000
asID: 267919
IP address blocks: 45.179.200.0/23 maxlen: 24
45.179.203.0/24 maxlen: 24
2803:ee60:10::/44 maxlen: 44
2803:ee60:20::/43 maxlen: 44
2803:ee60:40::/43 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1585194 (0x18302a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27a5488123c2689d948f7eb4b73b6005b88be1ca
Validity
Not Before: May 7 15:39:18 2023 GMT
Not After : May 8 15:39:18 2025 GMT
Subject: CN=5671f9f8bcc0099a52b317456c64fc0fe4a2e5eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:61:1b:dd:0f:83:b5:b7:38:7c:21:76:bd:f4:
09:d0:6a:43:66:42:98:d0:3c:8a:c5:66:29:be:07:
6b:d8:9e:62:42:a8:27:fb:d8:8a:c3:d9:e5:e0:42:
87:3b:ac:c9:a5:6b:26:c2:64:bd:aa:40:1d:a4:aa:
63:38:36:a8:05:4e:15:b8:ba:98:0c:94:63:af:bb:
32:e6:67:94:d4:5f:05:cc:a5:62:78:27:43:b0:81:
f9:d5:1d:51:67:92:3d:b4:09:5b:95:01:c5:62:3d:
0c:e3:ee:75:f2:fd:29:a7:9f:6a:33:74:f1:dc:91:
b8:72:ba:6d:4f:4e:ac:37:a3:95:72:39:fa:d6:22:
44:cc:50:8d:2b:6d:62:ac:d6:e2:71:ab:7b:7e:0b:
71:43:d6:a0:bf:79:5c:8e:2a:62:f8:4c:71:33:25:
8c:bc:58:48:8e:b4:8f:c4:89:fa:3e:6e:0b:1a:5b:
6a:da:11:c3:2e:89:32:47:3c:50:ae:28:77:d6:36:
b0:8b:e3:7d:33:10:bc:ea:f9:df:6d:55:d4:b2:c4:
ed:53:9e:9d:da:2b:5d:38:4d:f6:9d:6a:98:d3:3a:
3c:51:c8:aa:aa:00:bb:6f:80:8e:df:85:ce:fa:ea:
62:71:ba:a3:f8:23:31:0f:df:25:fa:25:ca:b7:a0:
48:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:9C:22:40:94:CF:F9:D2:D8:EC:6D:38:48:D6:E0:E0:42:EF:5E:F9
X509v3 Authority Key Identifier:
keyid:54:F1:6F:BA:22:CF:BD:0E:86:5A:AF:6D:67:43:85:24:C4:62:C2:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/27a5488123c2689d948f7eb4b73b6005b88be1ca.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/09d82754-9806-40e7-b46b-c61074594732/5671f9f8bcc0099a52b317456c64fc0fe4a2e5eb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/09d82754-9806-40e7-b46b-c61074594732/27a5488123c2689d948f7eb4b73b6005b88be1ca.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.179.200.0/23
45.179.203.0/24
IPv6:
2803:ee60:10::-2803:ee60:5f:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
19:95:bb:e5:53:08:9e:b0:08:5e:ec:39:a3:bc:7b:e5:c4:14:
e2:45:bc:3d:e5:9d:cd:77:9a:84:21:a9:6d:47:c3:b3:32:44:
02:73:50:7a:6a:82:07:65:43:92:f6:79:e3:8f:99:7a:af:aa:
50:11:ee:95:f4:9d:5e:85:e7:56:84:35:06:65:1b:cf:c3:9a:
8c:aa:03:51:3a:a1:57:c8:98:a8:01:b1:05:43:f4:17:e5:65:
2c:8b:a8:9e:74:86:5a:9a:27:ce:52:0b:9b:ce:55:a5:1d:bb:
1f:ce:c0:09:fa:75:84:ef:23:66:f6:1d:00:e7:70:20:0d:ee:
fd:91:cf:87:ef:57:69:00:63:73:b3:f3:91:21:93:15:a3:62:
54:21:ae:35:eb:a0:16:fe:e1:09:c7:c5:1e:f3:17:7a:03:cf:
89:3a:52:1a:ea:47:57:5f:b3:9e:bd:7c:15:d2:7b:3a:2d:1a:
ca:d5:65:37:49:86:1b:97:fc:92:86:7e:0b:96:7f:7a:cc:e7:
66:b3:98:5d:ca:97:5d:81:fa:28:ba:d9:a7:23:90:8b:d4:d7:
04:e2:01:70:64:7f:5c:75:bc:4f:4f:0b:e1:8d:20:d3:24:a3:
cd:5e:29:ba:ca:97:ed:38:3d:0c:84:de:a0:53:ef:b9:3f:38:
ae:43:a1:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:56 2024 by rpki-client on console-ams.rpki-client.org