Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1c494acd-67c1-46c0-b6c5-caabcbce1d94/df9945bbcc2697d2e65d84ce6c6cfae383c6f4be.roa
File: df9945bbcc2697d2e65d84ce6c6cfae383c6f4be.roa (raw, json)
Hash identifier: uVrEMiCx9Bc0xwHJm/v2NgHMQe1IRYXt4HdGABEJPvY=
Subject key identifier: D0:4D:ED:A0:A5:7E:21:3C:EA:C6:C2:D8:70:28:1E:C4:C7:2B:09:23
Certificate issuer: /CN=610a073086b39384e909786d0a194418acd0bd49
Certificate serial: 2741EA
Authority key identifier: D6:DA:C6:62:CF:C3:1A:BF:C6:77:86:7C:A6:81:8B:3F:4D:86:F0:9D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/610a073086b39384e909786d0a194418acd0bd49.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1c494acd-67c1-46c0-b6c5-caabcbce1d94/df9945bbcc2697d2e65d84ce6c6cfae383c6f4be.roa
Signing time: Wed 03 Jan 2024 21:39:03 +0000
ROA not before: Wed 03 Jan 2024 21:39:03 +0000
ROA not after: Sat 03 Jan 2026 21:39:03 +0000
asID: 264668
IP address blocks: 45.70.56.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2572778 (0x2741ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=610a073086b39384e909786d0a194418acd0bd49
Validity
Not Before: Jan 3 21:39:03 2024 GMT
Not After : Jan 3 21:39:03 2026 GMT
Subject: CN=df9945bbcc2697d2e65d84ce6c6cfae383c6f4be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:ea:37:21:9b:a0:05:02:eb:2b:50:65:ba:de:
60:b6:e9:d2:02:1f:a4:f3:48:92:2a:2d:35:66:6a:
cd:b3:b9:b1:0f:89:cf:a7:a2:f6:df:3b:62:b4:32:
f3:51:e3:c9:bd:ef:dd:0c:c5:51:a5:7e:c2:26:92:
ed:cb:75:3f:17:30:03:75:da:7d:91:94:f4:f7:aa:
ac:b9:fa:0b:da:81:42:f8:af:52:75:d3:84:59:ae:
d2:72:d6:54:56:7d:42:2d:1c:c5:ba:99:17:75:be:
0b:c7:9a:09:cf:3e:5f:cd:44:0c:ec:98:df:e5:2b:
d2:95:50:90:2e:ed:a3:1c:82:20:29:e7:1a:14:22:
e8:bd:44:83:2f:e3:88:da:cb:ca:7c:5f:09:ec:aa:
55:ed:a6:99:a5:eb:ca:65:f6:99:cc:f4:81:b3:61:
52:4e:35:60:e9:fc:f9:be:24:14:5b:c2:d3:94:06:
dc:33:1c:f2:82:dd:5a:c8:c6:c5:72:66:a4:8b:1c:
62:22:95:c9:44:47:68:ee:dc:0f:00:db:28:9e:9d:
fd:ec:6c:42:29:d1:b5:f9:75:04:96:a6:35:bb:ef:
7c:01:d1:a8:70:45:6d:ce:64:0a:b9:75:1a:de:20:
5f:3f:23:bf:59:b2:50:46:07:44:aa:f3:1c:63:15:
2b:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:4D:ED:A0:A5:7E:21:3C:EA:C6:C2:D8:70:28:1E:C4:C7:2B:09:23
X509v3 Authority Key Identifier:
keyid:D6:DA:C6:62:CF:C3:1A:BF:C6:77:86:7C:A6:81:8B:3F:4D:86:F0:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/610a073086b39384e909786d0a194418acd0bd49.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1c494acd-67c1-46c0-b6c5-caabcbce1d94/df9945bbcc2697d2e65d84ce6c6cfae383c6f4be.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1c494acd-67c1-46c0-b6c5-caabcbce1d94/610a073086b39384e909786d0a194418acd0bd49.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.70.56.0/22
Signature Algorithm: sha256WithRSAEncryption
1f:58:3a:5c:a2:b6:09:fb:6d:07:b7:3b:7c:6f:dc:d7:d3:f3:
93:0c:37:05:4d:5c:8a:b8:dd:54:67:34:7b:43:ed:97:35:50:
4b:9c:03:b1:a5:48:ce:b5:69:50:0a:26:f0:aa:3c:8d:cf:cb:
18:b9:92:ec:42:d4:17:f4:e8:11:4d:93:49:42:11:cb:08:1b:
9a:2a:04:6f:7b:83:c8:28:12:14:4d:15:91:e4:d7:c0:df:3b:
f9:03:39:55:39:43:e1:bc:d7:8e:c4:9e:2d:d3:0b:0c:69:39:
22:4f:f9:f0:fd:8e:eb:55:bb:19:f5:e8:48:55:a8:15:ff:1c:
99:00:f4:be:b1:14:a9:78:4f:4a:d3:c9:ed:7d:7f:96:f7:a3:
d5:2a:8b:8f:e3:8a:74:93:d6:b4:94:c6:86:c0:49:f3:3d:5c:
48:d2:76:f2:71:28:37:27:63:f0:56:1e:4c:19:de:32:59:ac:
ae:58:4c:90:4e:ad:1e:cb:99:8c:a8:ed:68:f8:aa:4b:46:75:
57:9d:41:f8:f3:db:de:2d:3f:8d:8d:ed:0d:83:a2:e1:cc:3a:
c1:f9:e8:93:63:64:7b:ab:5e:29:c1:30:51:0f:b7:b1:2c:09:
a2:e2:5f:6b:76:30:26:8f:6c:c1:a4:46:12:18:da:d1:a6:93:
42:3d:9b:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:17 2024 by rpki-client on console-ams.rpki-client.org