Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0c5c6ac7-bfeb-48a9-ad93-86312efa1fd0/b2c09a88cd9f3ce08cf61240b1db032b8e8343b1.roa
File: b2c09a88cd9f3ce08cf61240b1db032b8e8343b1.roa (raw, json)
Hash identifier: hO/nHxXCwLFxt5xQPnY3vKgCCrYXiCkuLRcIenO9yRo=
Subject key identifier: 17:FD:2A:31:08:D3:25:58:4D:DD:6D:A5:09:29:1C:4A:B2:75:6F:15
Certificate issuer: /CN=a431b12cbb45857ee37540244e236b5fe1793e26
Certificate serial: 25A1F6
Authority key identifier: 0D:1B:CC:9E:45:14:4F:45:85:FF:D6:47:C1:9D:8F:A3:E8:90:E7:DC
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a431b12cbb45857ee37540244e236b5fe1793e26.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0c5c6ac7-bfeb-48a9-ad93-86312efa1fd0/b2c09a88cd9f3ce08cf61240b1db032b8e8343b1.roa
Signing time: Fri 05 Jan 2024 13:36:31 +0000
ROA not before: Fri 05 Jan 2024 13:36:29 +0000
ROA not after: Mon 05 Jan 2026 13:36:29 +0000
asID: 23487
IP address blocks: 45.238.219.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2466294 (0x25a1f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a431b12cbb45857ee37540244e236b5fe1793e26
Validity
Not Before: Jan 5 13:36:29 2024 GMT
Not After : Jan 5 13:36:29 2026 GMT
Subject: CN=b2c09a88cd9f3ce08cf61240b1db032b8e8343b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b5:17:d2:7b:cf:f3:87:c7:40:f6:ed:3d:e7:
ef:22:c2:fa:27:cf:c9:df:c6:92:d2:54:51:8b:3b:
36:4e:fb:8a:88:91:be:55:ed:d9:c4:86:3a:dc:6d:
af:96:43:61:64:68:0f:3f:25:37:c7:85:b0:4d:2a:
a8:1a:ac:41:62:1a:5c:4e:a8:e0:c9:05:2f:17:c2:
80:5e:66:e8:8b:bb:17:9e:59:95:69:2b:57:d0:55:
ce:eb:71:a7:d9:7f:e4:63:20:78:55:9b:97:b6:f8:
46:3e:da:66:72:c6:f6:fd:ba:4a:40:77:a1:70:ec:
2b:81:f2:44:c6:24:d0:90:cd:1e:5c:03:14:fb:22:
da:75:67:20:e0:e6:00:e1:88:c5:20:03:b9:c9:be:
37:71:7f:93:fd:30:bf:db:c9:e0:cb:d5:ab:f4:03:
2b:32:34:b2:65:5d:53:82:8d:45:57:b7:09:6d:8c:
b7:85:88:6d:09:4f:1e:66:38:64:b7:44:b8:7d:07:
9d:02:38:d4:51:82:4a:73:6b:ca:90:4f:79:9c:57:
06:0d:fe:db:1a:be:a5:1d:c5:79:6b:77:bd:49:87:
ce:02:36:b9:cc:b4:6f:a8:ae:e2:93:eb:b5:bb:1e:
9a:b9:5f:d9:ae:35:20:c1:5a:69:5c:e9:52:4b:f4:
24:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:FD:2A:31:08:D3:25:58:4D:DD:6D:A5:09:29:1C:4A:B2:75:6F:15
X509v3 Authority Key Identifier:
keyid:0D:1B:CC:9E:45:14:4F:45:85:FF:D6:47:C1:9D:8F:A3:E8:90:E7:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a431b12cbb45857ee37540244e236b5fe1793e26.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0c5c6ac7-bfeb-48a9-ad93-86312efa1fd0/b2c09a88cd9f3ce08cf61240b1db032b8e8343b1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/0c5c6ac7-bfeb-48a9-ad93-86312efa1fd0/a431b12cbb45857ee37540244e236b5fe1793e26.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.238.219.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:d3:dd:b7:07:1d:39:c4:87:a8:22:32:74:0e:d8:b5:2d:11:
2a:a5:88:a9:12:ec:3f:19:9e:b9:5b:f5:19:d1:1f:cd:40:42:
52:44:dc:57:3b:9a:e7:8a:29:ac:96:81:11:23:32:f6:50:8c:
ce:67:be:86:63:c3:46:9a:30:fa:f8:cc:59:8f:97:c5:60:e1:
06:39:87:ab:ba:47:c3:4a:16:54:bc:6a:6d:d4:b0:25:27:08:
82:f0:5f:cc:f9:63:77:10:7f:18:ad:c5:15:19:8d:aa:c8:a3:
4b:6a:74:0c:85:c3:d8:a3:d8:c7:96:9f:d4:f9:6e:1f:6d:5a:
5d:de:82:a7:a0:1b:81:b7:d1:cc:5d:6a:37:b5:e5:cc:74:d9:
60:73:8d:b8:d6:bb:b1:1a:1a:e2:8d:1b:41:bc:0d:cf:f6:be:
fb:bc:e6:b3:9b:0f:4c:f3:b9:82:d2:44:ec:4a:0e:69:bd:c9:
08:dc:89:ad:ec:bf:7e:e7:81:94:dc:39:8b:35:a8:43:3e:7f:
72:a2:67:80:5c:68:41:ce:96:f7:41:85:e3:be:17:5d:e5:61:
57:cd:99:ac:20:05:d7:6f:4e:21:7f:88:c2:dc:48:0c:72:b4:
33:19:b1:26:54:66:c5:90:5d:51:74:5f:e9:ae:a6:91:9f:0e:
8d:d2:68:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:01 2024 by rpki-client on console-fra.rpki-client.org