Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/22bf051e-c109-4ab8-998f-f97be65a3598/a321a24c4774135e65ab742508ab73ec1d3a0d02.roa
File: a321a24c4774135e65ab742508ab73ec1d3a0d02.roa (raw, json)
Hash identifier: 2qrFUNUI8bvyvY+ngmoYV2vrX1yZ+Yhq2aE6LkI4kUY=
Subject key identifier: CE:5C:CB:75:47:9D:1E:D9:B9:0D:7C:D0:D7:5D:81:36:27:11:94:27
Certificate issuer: /CN=72ed9f71dc0182564f0b1d89d7dbe402d3c34665
Certificate serial: 0C5BEE
Authority key identifier: AE:9B:5F:4B:06:21:A5:52:ED:6B:19:3E:63:61:DB:9C:E9:30:6E:C0
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/72ed9f71dc0182564f0b1d89d7dbe402d3c34665.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/22bf051e-c109-4ab8-998f-f97be65a3598/a321a24c4774135e65ab742508ab73ec1d3a0d02.roa
Signing time: Wed 24 Mar 2021 14:48:14 +0000
ROA not before: Wed 24 Mar 2021 14:48:14 +0000
ROA not after: Tue 24 Mar 2026 14:48:14 +0000
asID: 269730
IP address blocks: 45.179.164.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 809966 (0xc5bee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72ed9f71dc0182564f0b1d89d7dbe402d3c34665
Validity
Not Before: Mar 24 14:48:14 2021 GMT
Not After : Mar 24 14:48:14 2026 GMT
Subject: CN=a321a24c4774135e65ab742508ab73ec1d3a0d02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c1:05:5c:11:a4:94:d1:43:84:35:bf:2d:fc:
d5:06:5e:cf:cd:fb:d8:6a:32:22:03:21:34:4c:6b:
d0:ad:c0:3b:dd:59:31:1c:30:d5:08:cb:b9:3e:ae:
86:37:dd:2e:6c:67:df:f2:11:67:7f:59:3e:d4:32:
d0:19:34:a6:dd:1a:f7:b6:7a:46:ce:ec:9e:83:74:
e8:29:ec:32:a5:44:be:fe:35:db:b0:33:54:51:69:
08:5b:c7:97:a8:de:2f:70:2a:bf:3e:f8:d1:eb:bd:
f8:f4:2c:3e:ca:c2:56:6d:c1:37:a1:fb:27:92:e1:
2c:a2:4e:a9:a5:41:41:fe:19:90:5f:ac:38:f6:59:
73:53:18:7f:39:68:ef:69:a6:55:7b:76:a3:e3:7b:
6a:5d:69:8c:02:84:4d:ae:a2:9b:b9:1f:98:b3:b2:
61:47:30:54:1f:98:76:83:c9:5f:4d:9a:ec:f6:3e:
3b:02:22:43:2d:5b:22:81:d5:bb:09:90:b0:34:58:
8c:89:6d:a9:30:7e:af:2a:27:08:94:6f:5b:46:8f:
43:51:26:eb:ab:e5:3a:d8:fa:b6:49:4a:a2:c6:39:
0d:7a:0a:96:95:64:41:fe:9a:ba:87:aa:f2:b1:c4:
ec:9c:dd:5e:dc:8f:50:e0:e9:7b:3d:7c:c2:c3:a6:
99:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:5C:CB:75:47:9D:1E:D9:B9:0D:7C:D0:D7:5D:81:36:27:11:94:27
X509v3 Authority Key Identifier:
keyid:AE:9B:5F:4B:06:21:A5:52:ED:6B:19:3E:63:61:DB:9C:E9:30:6E:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/72ed9f71dc0182564f0b1d89d7dbe402d3c34665.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/22bf051e-c109-4ab8-998f-f97be65a3598/a321a24c4774135e65ab742508ab73ec1d3a0d02.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/22bf051e-c109-4ab8-998f-f97be65a3598/72ed9f71dc0182564f0b1d89d7dbe402d3c34665.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.179.164.0/23
Signature Algorithm: sha256WithRSAEncryption
1e:36:a0:30:be:c0:8d:42:af:0a:1d:60:81:b0:be:bb:d2:54:
aa:8a:c0:bc:a6:ec:c5:02:cc:56:fc:a9:7b:5e:35:62:16:23:
ba:a2:09:78:88:0e:32:29:1c:ac:1e:b1:43:fd:d0:6e:06:da:
0c:ba:bd:e2:fe:80:5e:3c:ad:62:42:09:76:4e:3c:4e:10:55:
58:4c:7f:49:78:74:cf:96:df:08:46:2a:34:fd:b6:64:fd:e8:
12:6d:36:f3:92:d4:3d:a6:b4:60:24:56:19:d5:3f:f7:99:6d:
29:cc:3c:00:5c:70:49:f9:ca:20:fa:ce:4c:23:43:64:f9:e8:
7a:e4:0d:28:79:32:8b:4e:f7:e2:de:b3:e1:fe:1e:5d:46:a6:
7f:63:47:1e:2a:13:f4:94:c7:be:a3:33:37:f0:b2:0b:12:71:
21:7a:f6:eb:a5:04:64:8e:cc:5d:d6:bf:9e:25:6f:57:fb:06:
42:10:72:c5:69:21:25:e9:34:63:63:6e:3a:a6:22:0d:0e:8d:
b4:4a:ae:64:4f:83:91:b0:ca:56:46:cb:22:bc:d5:f6:c4:a2:
d1:54:17:77:9f:dc:32:42:af:01:2e:e0:4f:63:29:59:6b:2a:
25:d0:45:7f:32:a1:5a:b4:e4:2b:e4:43:99:ac:03:8f:d5:d0:
af:7b:33:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:24 2024 by rpki-client on console-fra.rpki-client.org