Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0c61b0c7-6aca-4130-982f-77023cc4f159/ecf5d03c330285c5471fa31709f2188d65c6614d.roa
File: ecf5d03c330285c5471fa31709f2188d65c6614d.roa (raw, json)
Hash identifier: pdl/fy+R3sIRRMJDBU0rP4zIkRlG2Esy3EiYnlSHY08=
Subject key identifier: 05:37:A6:DD:36:A3:42:32:0D:50:57:59:C6:08:94:0E:41:8A:35:82
Certificate issuer: /CN=2a1551a800f1287e313b33ac0eef8bed7ac4efd2
Certificate serial: 145951
Authority key identifier: 4D:90:36:EE:73:A6:50:80:F5:E1:16:5F:C8:00:64:05:E2:7B:5B:3E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2a1551a800f1287e313b33ac0eef8bed7ac4efd2.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0c61b0c7-6aca-4130-982f-77023cc4f159/ecf5d03c330285c5471fa31709f2188d65c6614d.roa
Signing time: Tue 09 Aug 2022 17:53:01 +0000
ROA not before: Wed 24 Mar 2021 14:32:08 +0000
ROA not after: Tue 24 Mar 2026 14:32:08 +0000
asID: 266725
IP address blocks: 45.65.224.0/22 maxlen: 24
2803:e5c0::/32 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1333585 (0x145951)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a1551a800f1287e313b33ac0eef8bed7ac4efd2
Validity
Not Before: Mar 24 14:32:08 2021 GMT
Not After : Mar 24 14:32:08 2026 GMT
Subject: CN=ecf5d03c330285c5471fa31709f2188d65c6614d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:05:be:d4:cd:3c:44:5e:9b:c9:e7:c4:1c:b8:
26:ce:07:ef:ae:2a:ef:bd:a2:81:2d:73:44:af:79:
91:85:cb:af:1a:72:22:5d:d5:93:0d:a1:3b:d0:97:
df:c9:68:af:c2:27:4c:2d:2f:bc:8f:80:d5:29:65:
82:47:e2:8e:97:95:27:9f:3a:f7:83:56:0e:66:1c:
d6:e0:04:8a:a1:58:14:e2:0c:ff:2b:c6:d2:eb:04:
d9:06:80:1b:7b:df:a9:9a:82:f7:3e:b8:02:27:84:
74:1e:23:5e:ee:e6:ba:42:0b:21:f1:b7:06:42:fc:
4f:ad:c9:0c:03:11:bb:99:c0:1e:d0:70:2f:df:c6:
48:ee:f8:ec:a7:c8:2d:e6:eb:00:8e:41:e7:0e:85:
7d:3c:d1:48:6d:84:18:d3:33:a1:7c:8d:e4:7c:00:
2c:2e:f5:03:45:42:00:f4:53:f7:bd:e7:90:09:89:
ff:5c:46:c2:f6:5e:8b:2f:15:05:fa:3a:78:99:5a:
49:a1:26:a2:3f:c9:d3:5d:a2:b9:a3:4e:5a:fb:4b:
f9:74:fc:03:12:5b:aa:f9:f8:2b:89:98:ba:6e:26:
15:17:5e:8e:0f:4f:fa:13:49:f7:3d:c6:60:44:6a:
13:d1:0c:eb:ae:0d:7e:01:ec:2c:75:58:55:60:7c:
6b:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:37:A6:DD:36:A3:42:32:0D:50:57:59:C6:08:94:0E:41:8A:35:82
X509v3 Authority Key Identifier:
keyid:4D:90:36:EE:73:A6:50:80:F5:E1:16:5F:C8:00:64:05:E2:7B:5B:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2a1551a800f1287e313b33ac0eef8bed7ac4efd2.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0c61b0c7-6aca-4130-982f-77023cc4f159/ecf5d03c330285c5471fa31709f2188d65c6614d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/0c61b0c7-6aca-4130-982f-77023cc4f159/2a1551a800f1287e313b33ac0eef8bed7ac4efd2.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.65.224.0/22
IPv6:
2803:e5c0::/32
Signature Algorithm: sha256WithRSAEncryption
ae:f4:93:c7:71:1b:50:e4:cf:2f:f7:cc:a4:3c:28:ba:36:fc:
f9:b8:83:8a:9e:12:1c:b5:37:d3:95:14:38:ea:cc:64:d8:bb:
46:46:e5:dd:8a:36:11:5d:90:96:0b:c2:38:29:77:40:7e:28:
49:db:47:c9:be:c1:c4:fc:85:21:4d:05:b6:a8:15:c5:d5:64:
12:00:b8:10:cb:d4:ac:fa:10:e9:aa:c0:c2:6e:5b:00:11:95:
0c:fb:11:67:90:a7:7a:fc:65:3b:71:11:2d:b4:3e:8f:50:ba:
15:1f:4c:37:8f:76:bb:de:60:99:d3:4b:91:ba:d1:bc:a2:1e:
c1:25:b6:33:8a:09:b8:da:c1:6b:14:c6:12:1f:2d:0b:44:4b:
c7:8b:ac:0b:47:58:73:52:32:79:e5:64:5a:6a:01:97:ea:e1:
0a:38:1e:87:d1:b9:bc:4d:1e:5b:67:23:c3:b0:59:17:62:e5:
05:b5:e1:0e:cf:37:ed:63:46:68:d9:40:0c:ec:37:36:c7:ea:
2d:54:cd:30:ae:94:51:14:3b:eb:d6:c7:30:f6:f0:a6:ff:42:
31:4f:cb:ad:da:67:32:01:85:b6:1e:38:b9:88:92:02:9b:7d:
dc:7b:39:c2:8e:e5:5b:d8:31:fe:cf:5c:7f:59:84:b6:c5:e7:
f3:33:ac:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:18 2024 by rpki-client on console-fra.rpki-client.org