Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0e138d34-c7c6-4cc9-9e7b-b8758efa2895/34f4de0d63fb0f5be289bd8f7171c230390c94a4.roa
File: 34f4de0d63fb0f5be289bd8f7171c230390c94a4.roa (raw, json)
Hash identifier: fHScfZs5pSghV9bh0u4kuMcm9uv7MhMn+jZrEvCe/mQ=
Subject key identifier: 44:CE:D4:B7:A4:85:1A:22:D5:78:EB:FB:DB:F6:40:53:FC:94:69:7C
Certificate issuer: /CN=8b5566367e2371cf5c21ed9d29cec50ed503cae5
Certificate serial: 11D109
Authority key identifier: E8:29:5E:AB:53:01:D0:E7:74:05:6A:F4:20:EB:06:F8:14:AC:19:F2
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8b5566367e2371cf5c21ed9d29cec50ed503cae5.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0e138d34-c7c6-4cc9-9e7b-b8758efa2895/34f4de0d63fb0f5be289bd8f7171c230390c94a4.roa
Signing time: Sat 09 Mar 2024 08:30:00 +0000
ROA not before: Sat 09 Mar 2024 08:30:00 +0000
ROA not after: Mon 09 Mar 2026 08:30:00 +0000
asID: 267734
IP address blocks: 45.165.112.0/22 maxlen: 24
2803:f9a0::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1167625 (0x11d109)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b5566367e2371cf5c21ed9d29cec50ed503cae5
Validity
Not Before: Mar 9 08:30:00 2024 GMT
Not After : Mar 9 08:30:00 2026 GMT
Subject: CN=34f4de0d63fb0f5be289bd8f7171c230390c94a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:b1:5a:d1:26:f3:ce:d4:64:c8:58:08:17:f5:
43:14:92:0e:37:13:9c:2a:bd:79:bb:1d:db:d7:60:
e3:64:6b:5e:b5:76:79:da:6f:8e:e0:50:8e:34:cb:
5e:a6:88:f9:3e:a5:d9:cf:bb:10:0e:ab:a6:4b:5e:
64:c7:db:51:f4:39:08:45:85:10:b1:ae:ff:6c:e6:
da:1e:cf:f7:33:f2:29:3e:8b:92:41:38:a0:5a:f1:
48:a3:e0:92:8e:53:b0:ec:87:41:f6:86:26:cc:0a:
49:5c:98:d0:19:44:68:ea:84:c9:ad:44:a8:92:8c:
de:88:43:8d:3e:88:3a:e3:3c:22:d9:4b:22:f4:64:
e3:b9:24:cf:2b:68:65:8c:52:a4:9d:5b:ba:e1:86:
3d:42:31:a2:36:d4:ff:40:77:7d:7b:ee:74:c7:ca:
05:29:c0:79:ee:bf:58:65:cd:f9:a3:3e:96:03:66:
13:a2:f4:c2:b8:67:d9:ae:80:46:4f:c3:60:a2:e9:
36:9a:5c:1f:09:02:a3:e8:cc:8c:50:da:63:99:43:
93:30:76:69:5a:07:cf:d7:28:a5:3a:33:d0:39:30:
52:54:87:bb:6a:02:06:5e:86:ca:e2:50:c3:3d:a1:
8c:bf:23:11:62:e9:6d:f1:4a:85:12:32:37:ce:81:
cf:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:CE:D4:B7:A4:85:1A:22:D5:78:EB:FB:DB:F6:40:53:FC:94:69:7C
X509v3 Authority Key Identifier:
keyid:E8:29:5E:AB:53:01:D0:E7:74:05:6A:F4:20:EB:06:F8:14:AC:19:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8b5566367e2371cf5c21ed9d29cec50ed503cae5.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0e138d34-c7c6-4cc9-9e7b-b8758efa2895/34f4de0d63fb0f5be289bd8f7171c230390c94a4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/0e138d34-c7c6-4cc9-9e7b-b8758efa2895/8b5566367e2371cf5c21ed9d29cec50ed503cae5.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.165.112.0/22
IPv6:
2803:f9a0::/32
Signature Algorithm: sha256WithRSAEncryption
00:56:90:8f:c2:6b:81:9d:90:88:e3:d3:0b:d3:1d:5a:b1:43:
eb:69:e5:dd:9f:9e:2c:66:ab:63:0d:f5:3f:67:da:06:6b:09:
1a:7c:4e:83:46:3c:59:2d:11:e7:be:98:93:7f:25:b5:3a:0c:
ba:90:66:3e:f6:86:4a:cc:4b:eb:db:69:c6:7f:c4:1a:66:77:
05:af:9f:09:17:75:fc:3e:33:c2:6c:0a:d8:9d:34:a0:d9:c4:
fe:83:29:3a:54:78:9d:08:88:7c:b0:22:00:60:3b:bf:24:cc:
a7:19:56:77:87:34:5b:96:8c:79:a3:db:c7:06:e4:3e:cc:e3:
c3:10:f3:d2:54:4b:74:83:a2:c3:f5:27:50:b1:db:74:f7:1c:
eb:92:7c:ed:d8:98:a9:85:4a:fd:e2:e1:f5:71:03:cc:64:4e:
3f:15:67:ac:07:de:09:15:9c:cb:a5:a8:af:0a:91:ca:4f:cd:
0d:68:b6:6d:54:40:b6:3a:b1:e5:e4:e4:87:6c:e4:c1:62:61:
9c:93:70:12:a0:91:4e:4e:9e:b0:66:1e:aa:e1:c5:d7:2b:56:
80:52:db:bc:f1:e8:60:48:28:43:33:f0:36:88:0f:81:48:71:
69:10:d6:8b:ec:df:1d:ea:46:c3:fa:c0:8f:b4:6c:9c:99:7e:
78:4d:38:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:21 2024 by rpki-client on console-fra.rpki-client.org