Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1620e226-9e80-43cf-a818-374517f5478a/978640718cc49c4ccd7f680db872e6f0e5dd6875.roa
File: 978640718cc49c4ccd7f680db872e6f0e5dd6875.roa (raw, json)
Hash identifier: AZYkuP5kY3NsTj3prHsQJMPa+W2wkquACbrBzoTB6vE=
Subject key identifier: FF:D4:9A:C8:50:47:F0:25:A7:0C:04:19:4E:69:56:7C:B1:38:79:30
Certificate issuer: /CN=e5f6b5f9cb86ee1091b2190e6c1bda8984b3d14e
Certificate serial: 255995
Authority key identifier: 20:CB:01:94:FA:06:20:C5:24:3F:A3:60:40:49:A8:5A:77:66:76:9D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e5f6b5f9cb86ee1091b2190e6c1bda8984b3d14e.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1620e226-9e80-43cf-a818-374517f5478a/978640718cc49c4ccd7f680db872e6f0e5dd6875.roa
Signing time: Wed 03 Jan 2024 14:09:17 +0000
ROA not before: Wed 03 Jan 2024 14:09:17 +0000
ROA not after: Sat 03 Jan 2026 14:09:17 +0000
asID: 267820
IP address blocks: 45.174.129.0/24 maxlen: 24
45.174.130.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2447765 (0x255995)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5f6b5f9cb86ee1091b2190e6c1bda8984b3d14e
Validity
Not Before: Jan 3 14:09:17 2024 GMT
Not After : Jan 3 14:09:17 2026 GMT
Subject: CN=978640718cc49c4ccd7f680db872e6f0e5dd6875
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:c1:8c:48:59:59:75:4c:98:4c:68:7b:37:3c:
bd:2a:98:42:0b:b8:9e:5e:b1:c5:b4:d1:13:46:cb:
a3:b1:53:0c:75:24:06:4d:61:80:03:ad:be:40:1b:
c5:54:01:e9:2e:db:a4:19:98:77:bc:8c:f0:ed:6e:
a0:98:c7:8c:f9:29:05:2a:c0:e5:1f:7d:db:0d:8d:
e7:4a:8b:49:3b:58:e2:f9:2c:aa:1d:6e:d1:ec:f1:
0e:5d:72:d1:a9:82:d9:cb:2d:74:cc:0c:d4:d8:99:
35:bb:14:03:42:63:ac:2c:89:3e:d8:89:0a:98:87:
10:87:8b:61:cf:30:62:c7:a5:25:ce:da:9a:5f:8d:
34:40:5e:ec:6d:05:35:6c:a7:2e:c0:9c:09:a8:47:
9e:37:94:b0:84:c7:fe:d1:87:db:7f:d6:4a:cf:74:
19:b9:9c:7c:c5:cb:23:77:3b:96:a4:82:48:91:54:
af:92:54:e4:db:e5:ff:d9:2e:01:17:5b:a4:1f:12:
6c:6a:1a:e4:ce:14:9f:8b:67:21:01:b1:90:49:9b:
88:e0:2b:e2:74:87:af:e2:0e:6c:16:ac:45:0b:37:
33:4a:bc:39:79:df:46:8f:35:93:04:2b:21:69:4e:
7f:fd:76:3f:d3:04:0f:73:56:c7:a4:e6:11:a1:6f:
c1:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:D4:9A:C8:50:47:F0:25:A7:0C:04:19:4E:69:56:7C:B1:38:79:30
X509v3 Authority Key Identifier:
keyid:20:CB:01:94:FA:06:20:C5:24:3F:A3:60:40:49:A8:5A:77:66:76:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e5f6b5f9cb86ee1091b2190e6c1bda8984b3d14e.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1620e226-9e80-43cf-a818-374517f5478a/978640718cc49c4ccd7f680db872e6f0e5dd6875.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1620e226-9e80-43cf-a818-374517f5478a/e5f6b5f9cb86ee1091b2190e6c1bda8984b3d14e.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.174.129.0-45.174.131.255
Signature Algorithm: sha256WithRSAEncryption
6d:64:10:20:9f:b8:21:4f:22:79:23:2a:1f:13:94:29:1c:04:
87:22:68:a8:ba:26:14:df:00:26:1c:85:5b:fc:88:17:63:a5:
99:b5:55:e3:6d:ad:29:9e:1d:73:13:e5:e1:16:9a:eb:54:ec:
87:8d:77:c9:94:ce:92:5b:5d:3a:0d:62:fd:bb:63:7d:cd:43:
d9:b8:75:c2:06:08:05:b9:5c:1e:4f:ea:db:e3:08:77:73:55:
ab:fc:88:35:69:bd:9f:e2:43:a1:44:12:e1:b6:58:57:22:ee:
73:de:61:79:d8:c8:4d:66:3c:90:be:3e:a0:94:64:17:7e:4e:
78:93:51:ce:94:b6:4b:f3:b2:52:a4:bb:c6:54:8a:ed:f5:0b:
35:7e:c9:62:61:59:d7:fe:a7:cf:99:36:91:d0:57:cc:3c:27:
60:a2:1f:9c:d4:6d:af:8c:54:4b:0b:a1:ce:38:20:f3:86:e2:
aa:2c:d9:71:3b:fb:b4:0d:26:bd:70:90:78:7a:2c:a7:f1:84:
8f:9b:94:f8:42:0b:8f:fa:25:9e:93:da:9d:b1:62:2d:64:fe:
d8:11:99:54:88:96:d6:fc:91:a9:7a:7e:b6:9a:2a:21:b5:7b:
9b:e2:3e:cf:18:9e:f5:be:ad:af:3e:30:0b:24:68:e3:56:c2:
70:12:13:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:02 2024 by rpki-client on console-fra.rpki-client.org