Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1eca909f-3052-46ac-8acd-c98320feb167/c71215a3a4c08c75fc337d62fd85ed914103fee2.roa
File: c71215a3a4c08c75fc337d62fd85ed914103fee2.roa (raw, json)
Hash identifier: YrlVAG7nz4DMwSPXPLP+A/ObBqS2ApHZXIYhPEgKEgw=
Subject key identifier: 60:97:BA:ED:A3:DE:0C:3A:C0:24:D7:A6:22:A5:84:7B:1A:73:A9:30
Certificate issuer: /CN=276ddbcbb1cf91f9e890ca9cdc81b012d40f2a31
Certificate serial: 06EE
Authority key identifier: FD:40:08:E1:06:B8:B0:ED:0D:D5:06:5F:E6:8B:96:68:97:3B:46:40
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/276ddbcbb1cf91f9e890ca9cdc81b012d40f2a31.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1eca909f-3052-46ac-8acd-c98320feb167/c71215a3a4c08c75fc337d62fd85ed914103fee2.roa
Signing time: Mon 28 Aug 2023 21:59:55 +0000
ROA not before: Sun 27 Aug 2023 21:59:55 +0000
ROA not after: Thu 28 Aug 2025 21:59:55 +0000
asID: 263157
IP address blocks: 45.239.76.0/24 maxlen: 24
45.239.77.0/24 maxlen: 24
45.239.78.0/24 maxlen: 24
45.239.79.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1774 (0x6ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=276ddbcbb1cf91f9e890ca9cdc81b012d40f2a31
Validity
Not Before: Aug 27 21:59:55 2023 GMT
Not After : Aug 28 21:59:55 2025 GMT
Subject: CN=c71215a3a4c08c75fc337d62fd85ed914103fee2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:52:a1:ae:91:e3:3c:e1:f3:e0:b5:3b:b0:dc:
f3:4a:aa:28:87:6f:cb:43:29:d2:b1:e2:8b:ee:47:
30:7a:c4:bb:08:0e:8b:47:71:0d:02:55:d3:bc:91:
1b:0e:4b:a7:b9:a0:b7:de:89:60:95:ef:bc:49:bf:
33:d9:d2:d6:88:84:91:b6:78:16:c4:52:f3:15:9f:
b5:b3:74:66:cd:9e:ce:9b:7f:66:44:bc:06:63:d1:
91:5e:de:45:ce:eb:f9:9c:47:bc:4a:f7:9d:d9:4b:
cb:74:0a:ff:7b:e3:6f:02:e0:0e:1a:b3:56:9a:83:
9f:f9:fd:a8:13:ef:f3:7c:7f:65:da:f3:00:0f:ae:
9d:0a:e6:83:da:ae:fd:08:c5:2f:e6:e0:ba:9f:d3:
7a:21:53:bc:54:d5:04:9f:ce:96:94:d5:7e:d2:f5:
86:64:4f:17:3f:5e:9b:c7:ca:ec:50:6b:77:3b:d8:
f4:d1:91:af:ce:b8:06:04:8d:5a:1b:bd:4f:db:c7:
24:20:98:83:84:a1:7a:95:51:b8:b4:3e:ad:73:ee:
be:a3:a5:d4:d3:2d:cb:e9:ac:57:1f:1b:e1:6b:4c:
85:42:95:55:59:93:bc:db:bb:5a:68:46:d3:ba:ef:
29:db:4e:f8:c6:6f:04:5a:9c:7a:f3:be:57:c3:c6:
71:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:97:BA:ED:A3:DE:0C:3A:C0:24:D7:A6:22:A5:84:7B:1A:73:A9:30
X509v3 Authority Key Identifier:
keyid:FD:40:08:E1:06:B8:B0:ED:0D:D5:06:5F:E6:8B:96:68:97:3B:46:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/276ddbcbb1cf91f9e890ca9cdc81b012d40f2a31.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1eca909f-3052-46ac-8acd-c98320feb167/c71215a3a4c08c75fc337d62fd85ed914103fee2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1eca909f-3052-46ac-8acd-c98320feb167/276ddbcbb1cf91f9e890ca9cdc81b012d40f2a31.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.239.76.0/22
Signature Algorithm: sha256WithRSAEncryption
41:97:7f:f6:4c:f9:60:3d:67:1a:bd:76:8d:ef:3a:a3:d4:52:
a1:e8:43:0d:be:58:a0:4d:74:27:6f:1e:bc:bd:e1:89:4c:26:
6b:ad:6e:9d:34:fc:1e:4a:01:e0:c5:db:10:26:fb:2b:70:4b:
eb:fd:e0:dc:53:ed:0a:94:c2:4b:2f:67:41:27:b0:03:24:7a:
bb:bb:1d:b6:05:32:b8:c5:d3:76:30:46:77:3f:ff:69:5c:9a:
8c:36:bb:79:82:77:8b:dc:57:a0:ea:4d:75:4f:e5:3b:91:fd:
34:b8:86:ba:d5:8e:4c:60:89:a7:ce:1c:97:ad:c4:2f:33:f9:
d1:f8:99:59:f7:a8:8d:4b:d2:f6:df:0e:f0:8f:12:18:b6:84:
0c:39:f3:8b:96:a2:89:0e:f7:91:79:98:e4:b2:cf:4c:a6:84:
a0:9e:66:88:09:aa:58:a9:6a:82:4b:8b:1c:ce:6e:2d:09:b7:
21:39:d6:b8:77:a8:de:cc:a3:65:b3:8f:81:05:3e:2e:82:cc:
f3:53:90:cb:62:fe:61:5f:8f:67:f4:b1:7a:a1:1c:d8:c4:d2:
df:25:12:4b:8e:5f:8c:cc:bf:98:a9:39:53:76:e9:6b:e7:2a:
18:1f:d8:29:03:65:20:3f:e8:a6:ae:a6:6a:2a:86:15:c1:bf:
76:7a:4c:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:17 2024 by rpki-client on console-ams.rpki-client.org