Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0c61b0c7-6aca-4130-982f-77023cc4f159/3f2be4e4435d3bf0b0c4ebc43a04311799004b52.roa
File: 3f2be4e4435d3bf0b0c4ebc43a04311799004b52.roa (raw, json)
Hash identifier: RfUcAwXgsDc6kXZTKYBUUatYrvn3NWuvUVmkEKgT7Sc=
Subject key identifier: 88:A9:A3:58:DF:96:31:26:B8:4A:6D:A3:83:C1:C9:A2:04:08:34:F4
Certificate issuer: /CN=2a1551a800f1287e313b33ac0eef8bed7ac4efd2
Certificate serial: 201E3D
Authority key identifier: 4D:90:36:EE:73:A6:50:80:F5:E1:16:5F:C8:00:64:05:E2:7B:5B:3E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2a1551a800f1287e313b33ac0eef8bed7ac4efd2.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0c61b0c7-6aca-4130-982f-77023cc4f159/3f2be4e4435d3bf0b0c4ebc43a04311799004b52.roa
Signing time: Thu 30 Nov 2023 15:25:55 +0000
ROA not before: Thu 30 Nov 2023 15:25:55 +0000
ROA not after: Sun 30 Nov 2025 15:25:55 +0000
asID: 266725
IP address blocks: 45.65.224.0/23 maxlen: 23
45.65.226.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2104893 (0x201e3d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a1551a800f1287e313b33ac0eef8bed7ac4efd2
Validity
Not Before: Nov 30 15:25:55 2023 GMT
Not After : Nov 30 15:25:55 2025 GMT
Subject: CN=3f2be4e4435d3bf0b0c4ebc43a04311799004b52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:e7:09:e6:46:5f:49:0b:72:e1:f9:53:fb:46:
50:0c:a9:49:30:e4:0e:41:4b:21:49:ae:94:c5:37:
0e:2c:e8:9e:fa:2a:71:e3:3f:90:51:f0:9e:13:3a:
40:6d:f8:c4:10:3a:1f:1f:08:7e:3b:ff:72:e4:5a:
07:87:aa:ed:fb:ba:aa:7d:2e:2e:81:db:4c:de:4d:
50:53:41:0d:eb:bc:df:f8:76:27:ce:8c:f5:dd:d3:
5f:0c:d7:9f:6d:e7:9a:53:a7:55:8e:05:8a:3f:e8:
72:6d:c2:a3:de:84:db:0e:8e:b7:80:fb:23:31:fd:
c7:9b:d5:74:a9:b8:e5:c9:a3:a1:f4:ee:a7:d1:c3:
cf:e1:f9:bb:77:c8:85:0e:ac:4c:8e:b1:cf:5b:be:
f5:eb:72:f6:7d:6e:d7:b8:40:f0:95:27:90:33:48:
19:9d:19:d4:ee:8f:77:f8:1a:e0:5c:87:82:4d:d7:
12:b4:bb:be:91:95:6c:f1:ec:0d:70:60:21:a2:18:
44:9b:fd:b4:dc:1f:e9:80:45:9c:6c:c8:b6:2f:b1:
bc:a4:52:69:38:4f:9a:27:85:02:ee:71:00:b0:7d:
da:36:1b:79:ee:d9:fe:9c:db:0a:f5:d8:81:52:a1:
9a:02:a8:f6:30:1a:25:a3:2d:c7:29:5c:67:86:ed:
00:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:A9:A3:58:DF:96:31:26:B8:4A:6D:A3:83:C1:C9:A2:04:08:34:F4
X509v3 Authority Key Identifier:
keyid:4D:90:36:EE:73:A6:50:80:F5:E1:16:5F:C8:00:64:05:E2:7B:5B:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2a1551a800f1287e313b33ac0eef8bed7ac4efd2.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0c61b0c7-6aca-4130-982f-77023cc4f159/3f2be4e4435d3bf0b0c4ebc43a04311799004b52.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/0c61b0c7-6aca-4130-982f-77023cc4f159/2a1551a800f1287e313b33ac0eef8bed7ac4efd2.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.65.224.0/22
Signature Algorithm: sha256WithRSAEncryption
a2:13:ed:2b:63:5a:9e:d7:61:03:fd:eb:db:ff:aa:c8:c3:1d:
e5:93:76:b4:1e:cf:24:89:4c:ee:0a:23:8d:34:a6:75:7d:8a:
85:35:46:32:03:47:d9:eb:11:50:8c:0e:96:cc:41:85:c4:da:
f5:9e:3f:8e:c6:b3:e9:61:d3:44:43:82:eb:39:ed:42:85:19:
29:fd:51:5e:2d:3a:22:e6:88:48:77:94:26:9a:86:5b:20:d8:
55:61:f5:cd:36:da:83:22:d5:03:0e:f4:77:ae:5c:15:87:be:
9c:d8:1a:5f:b4:6d:d2:f5:a9:97:4c:57:69:bf:b0:3a:90:f4:
b6:d4:4d:c8:1f:7d:42:8d:ce:2d:cc:2e:0a:ab:cf:64:3d:f3:
7c:70:bc:cf:4d:52:4c:bc:5c:03:7e:6f:b0:5b:24:be:6f:cd:
d2:7f:43:74:42:d9:5a:37:e6:f5:2f:c6:6d:db:09:6d:3a:37:
c9:dc:99:0f:09:23:01:fc:33:5f:6e:3d:bb:ca:02:41:6e:54:
09:10:98:a1:29:00:b9:d2:d8:73:d9:3d:0f:4e:c6:c5:77:b1:
b9:f0:2b:f3:34:e9:73:5d:d7:f5:ee:03:89:c8:05:8b:bc:7b:
8d:21:c9:63:d7:6c:d0:0b:64:ce:9e:ea:f9:4b:c7:9c:23:cf:
22:c4:b8:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:15 2024 by rpki-client on console-ams.rpki-client.org