Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0efbfa1c-4ea9-4d1b-ad95-5bf749e86bbc/a489b299d6d8eda17478f87104beca16f974ce7e.roa
File: a489b299d6d8eda17478f87104beca16f974ce7e.roa (raw, json)
Hash identifier: N2n6Zm+hwpJ2XkSrMvHuUkjQ22+QekJG/a+sPNaCt6o=
Subject key identifier: 43:F0:16:00:2F:F4:C0:F0:CA:97:85:9F:F4:E9:BB:BE:33:0E:C9:0A
Certificate issuer: /CN=d87cacea641658717abecb35689ebe8932f40ead
Certificate serial: 0A67DE
Authority key identifier: 50:1B:9A:0E:A8:35:4F:1C:D8:B5:3D:36:E7:DC:B0:0F:B4:F4:6D:ED
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d87cacea641658717abecb35689ebe8932f40ead.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0efbfa1c-4ea9-4d1b-ad95-5bf749e86bbc/a489b299d6d8eda17478f87104beca16f974ce7e.roa
Signing time: Thu 22 Jun 2023 04:35:25 +0000
ROA not before: Wed 21 Jun 2023 04:35:25 +0000
ROA not after: Sun 22 Jun 2025 04:35:25 +0000
asID: 267796
IP address blocks: 45.172.184.0/22 maxlen: 24
2803:5fa0::/32 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 681950 (0xa67de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d87cacea641658717abecb35689ebe8932f40ead
Validity
Not Before: Jun 21 04:35:25 2023 GMT
Not After : Jun 22 04:35:25 2025 GMT
Subject: CN=a489b299d6d8eda17478f87104beca16f974ce7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:19:d9:81:d7:f7:51:1a:74:f6:31:f1:01:59:
2c:f8:93:09:cd:76:36:fd:c8:03:35:0f:87:bd:dd:
19:bc:b8:cd:26:a7:8f:e8:b4:5d:7d:d2:59:06:e0:
fc:4b:a9:cb:c4:06:6c:43:0c:44:9a:a3:12:be:04:
dd:24:1b:c2:fd:dd:90:75:d4:26:41:1f:25:ec:bf:
85:5b:82:bd:72:7c:64:14:db:d6:03:bd:61:69:e9:
1e:b1:1b:17:bb:7e:4b:a6:ce:a9:aa:f5:00:97:3f:
3c:3f:df:57:06:46:62:81:3b:1c:74:8d:67:3b:a0:
8e:4b:17:1b:d0:54:12:2d:51:6a:c5:7d:a1:49:c7:
8c:10:e1:94:1f:69:43:52:a3:1c:75:6d:d0:a6:37:
90:8d:9d:8c:3b:a9:f8:94:10:06:fc:93:ce:40:31:
5c:e8:46:a9:d7:18:a3:b9:a2:dd:50:f4:2b:ff:11:
f2:f6:c2:5c:67:65:74:58:a7:e4:ab:79:00:46:2b:
23:11:7d:d9:56:6b:f3:d9:e5:72:af:d0:3f:c8:8c:
38:10:63:2b:35:68:c6:e7:b5:19:1c:23:23:a7:87:
f8:3a:3c:9d:d6:74:ea:f3:5c:4f:43:a7:f5:1a:69:
29:98:44:04:71:dd:e4:88:52:35:2f:17:b6:86:b3:
76:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:F0:16:00:2F:F4:C0:F0:CA:97:85:9F:F4:E9:BB:BE:33:0E:C9:0A
X509v3 Authority Key Identifier:
keyid:50:1B:9A:0E:A8:35:4F:1C:D8:B5:3D:36:E7:DC:B0:0F:B4:F4:6D:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d87cacea641658717abecb35689ebe8932f40ead.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0efbfa1c-4ea9-4d1b-ad95-5bf749e86bbc/a489b299d6d8eda17478f87104beca16f974ce7e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/0efbfa1c-4ea9-4d1b-ad95-5bf749e86bbc/d87cacea641658717abecb35689ebe8932f40ead.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.172.184.0/22
IPv6:
2803:5fa0::/32
Signature Algorithm: sha256WithRSAEncryption
18:df:30:1c:b4:c9:d0:65:52:56:12:a5:db:3c:b3:f5:9b:bc:
53:ff:c5:ef:9f:d0:56:bb:37:07:16:33:cd:c8:50:b2:0a:96:
bd:60:c3:af:6f:ee:0a:23:47:b1:77:08:2d:2f:8e:b9:8d:8d:
f3:e6:e5:7d:b7:94:44:b3:68:31:aa:85:cd:1e:3d:a8:a3:e8:
fa:cd:d0:1b:44:ea:3f:b2:66:cd:45:7b:e3:a2:21:33:24:73:
29:03:e3:db:85:a9:ba:e7:f0:c3:7f:86:7d:04:f5:76:9b:7e:
e8:25:79:9f:05:55:c4:d3:77:16:d0:46:26:e4:2b:9c:3e:0a:
36:ac:d8:bf:6f:20:66:e0:fc:6f:52:4e:bd:b8:82:a4:18:fa:
5f:34:3d:e5:d3:c1:ec:92:89:a8:41:1d:75:2d:ef:86:ed:93:
4e:ac:b5:79:b3:ff:41:ac:c0:52:a2:31:dd:4e:ce:c9:a6:90:
61:67:9f:8c:dd:10:47:75:19:a2:9f:53:ce:49:b4:3e:8a:aa:
cf:ec:b7:96:16:87:4b:70:5c:58:fa:78:84:11:ca:67:0c:20:
a1:f5:83:5c:f6:52:02:88:83:f0:2c:4b:69:f2:ed:a2:8d:5f:
05:97:92:e7:7a:79:8a:e5:5a:61:40:3a:1d:20:cd:d0:ea:b0:
51:7f:31:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:59 2024 by rpki-client on console-ams.rpki-client.org