Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/19e3978e-3a2f-4e31-9e8d-326e3bb01547/9a6c24ae1d29a2bd801f81dc567ed36e0f96e441.roa
File: 9a6c24ae1d29a2bd801f81dc567ed36e0f96e441.roa (raw, json)
Hash identifier: KMSo0EXCY8ohaUsGiuU+POJbbhyhobxY3mPsILIKSgE=
Subject key identifier: 5E:23:D7:6C:D5:7B:B2:93:A1:7E:C5:D4:47:35:A2:B5:A6:21:DF:B6
Certificate issuer: /CN=7855868bb89dd668c1f57896b07b3922fccf8b7a
Certificate serial: 22AEDA
Authority key identifier: FB:8D:1B:BD:3E:E0:2D:25:EA:1B:D7:EE:C7:4F:4A:7C:48:D4:9C:0D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7855868bb89dd668c1f57896b07b3922fccf8b7a.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/19e3978e-3a2f-4e31-9e8d-326e3bb01547/9a6c24ae1d29a2bd801f81dc567ed36e0f96e441.roa
Signing time: Thu 24 Aug 2023 13:36:14 +0000
ROA not before: Wed 23 Aug 2023 13:36:13 +0000
ROA not after: Sun 24 Aug 2025 13:36:13 +0000
asID: 61512
IP address blocks: 45.161.236.0/22 maxlen: 24
143.255.140.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2272986 (0x22aeda)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7855868bb89dd668c1f57896b07b3922fccf8b7a
Validity
Not Before: Aug 23 13:36:13 2023 GMT
Not After : Aug 24 13:36:13 2025 GMT
Subject: CN=9a6c24ae1d29a2bd801f81dc567ed36e0f96e441
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:75:2a:39:54:20:92:21:a3:13:d5:40:b1:9c:
78:c0:53:ac:b6:7d:8a:94:63:9e:33:d3:5c:2b:34:
0e:60:a9:9e:d4:b6:57:a2:b0:2e:d4:b2:8d:d6:a6:
51:a7:f4:81:8e:49:4c:7c:7b:e2:4b:e7:3f:43:59:
a9:b7:33:5b:a2:24:f7:a6:8b:97:1c:99:8a:96:64:
11:ca:c3:d7:9a:ea:0f:af:43:a1:d9:6d:09:b7:ea:
8d:24:84:8e:fe:e7:43:5c:95:44:68:fe:3b:f8:dc:
a9:78:32:71:bf:54:0d:6b:25:9b:4c:41:d8:80:a1:
10:62:f3:0b:4f:89:69:a0:76:36:08:17:c4:53:e7:
6a:24:37:f4:10:91:6f:a6:5b:24:4f:61:f2:e0:e6:
d0:0b:24:e1:86:0f:58:c5:21:2e:9b:f3:08:91:87:
6a:bb:7b:77:73:7f:1b:d6:6b:d5:ae:7d:15:86:57:
53:58:33:f2:fd:2c:35:e9:ac:c2:88:8f:20:fb:b0:
53:04:52:5e:8d:6f:18:c9:08:fd:aa:4e:96:30:19:
09:11:d8:a0:6e:15:2e:a8:79:c4:fd:35:5c:d2:94:
f1:e6:00:1a:cc:5d:b4:c2:24:3e:c3:71:9e:91:81:
bf:d8:73:5c:3c:eb:f0:09:bb:50:90:40:14:6a:12:
bc:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:23:D7:6C:D5:7B:B2:93:A1:7E:C5:D4:47:35:A2:B5:A6:21:DF:B6
X509v3 Authority Key Identifier:
keyid:FB:8D:1B:BD:3E:E0:2D:25:EA:1B:D7:EE:C7:4F:4A:7C:48:D4:9C:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7855868bb89dd668c1f57896b07b3922fccf8b7a.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/19e3978e-3a2f-4e31-9e8d-326e3bb01547/9a6c24ae1d29a2bd801f81dc567ed36e0f96e441.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/19e3978e-3a2f-4e31-9e8d-326e3bb01547/7855868bb89dd668c1f57896b07b3922fccf8b7a.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.161.236.0/22
143.255.140.0/22
Signature Algorithm: sha256WithRSAEncryption
9f:b2:4a:f7:4c:d9:de:2b:8c:74:d3:20:25:38:cf:9e:aa:4d:
12:b0:ce:fc:19:fd:4b:7b:6f:10:32:50:bb:47:e0:de:40:e2:
85:4b:4e:0c:38:fb:f8:90:a4:3c:e8:0d:19:de:f5:77:67:29:
96:53:e6:66:83:7d:76:db:ff:47:7f:7f:8d:dc:aa:65:d1:19:
6f:26:dd:d3:7c:8d:4a:9e:09:e0:2f:39:de:9b:54:e7:a2:22:
e1:71:27:65:fd:b9:e3:ea:40:1e:d3:d3:6f:a1:cf:37:b5:94:
63:ce:ca:87:7e:66:33:4f:a2:d3:16:b4:ab:e5:a8:9d:dd:b7:
98:5e:54:ee:43:c5:b8:c8:a1:43:b7:7c:f9:2f:a3:7e:61:74:
5c:1a:0f:f8:73:1d:f3:43:12:76:61:1a:7b:96:70:d3:0a:70:
b0:00:3d:57:1f:55:9e:73:ee:79:d1:d3:6c:91:c5:9a:31:fe:
f0:38:b4:f9:84:e7:10:45:ed:04:a8:95:e8:99:08:7e:81:f7:
37:f2:28:5b:43:96:52:dc:88:ff:4d:b4:dc:52:25:47:ab:d4:
42:63:38:09:19:bc:b3:8a:22:80:96:b1:30:b8:6c:70:6c:5b:
f4:10:97:52:27:95:28:7a:ee:17:1d:17:1a:fd:d4:5b:64:61:
08:42:9a:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:17 2024 by rpki-client on console-ams.rpki-client.org