Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/22bf051e-c109-4ab8-998f-f97be65a3598/aa0bf2af2d708c89b40924a550aa7bbacd146482.roa
File: aa0bf2af2d708c89b40924a550aa7bbacd146482.roa (raw, json)
Hash identifier: DhXxhuv2bi4OOSqO90M368npWdKG8DZH6CZSyTSlrfo=
Subject key identifier: 26:C7:B0:A0:7F:D2:11:19:06:A0:64:B9:F3:47:45:28:5D:70:99:66
Certificate issuer: /CN=72ed9f71dc0182564f0b1d89d7dbe402d3c34665
Certificate serial: 0C583F
Authority key identifier: AE:9B:5F:4B:06:21:A5:52:ED:6B:19:3E:63:61:DB:9C:E9:30:6E:C0
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/72ed9f71dc0182564f0b1d89d7dbe402d3c34665.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/22bf051e-c109-4ab8-998f-f97be65a3598/aa0bf2af2d708c89b40924a550aa7bbacd146482.roa
Signing time: Wed 24 Mar 2021 14:48:14 +0000
ROA not before: Wed 24 Mar 2021 14:48:14 +0000
ROA not after: Tue 24 Mar 2026 14:48:14 +0000
asID: 266809
IP address blocks: 45.179.167.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 809023 (0xc583f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72ed9f71dc0182564f0b1d89d7dbe402d3c34665
Validity
Not Before: Mar 24 14:48:14 2021 GMT
Not After : Mar 24 14:48:14 2026 GMT
Subject: CN=aa0bf2af2d708c89b40924a550aa7bbacd146482
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:f7:35:54:7c:76:3c:3a:f1:8e:f8:4d:7f:17:
1f:35:57:67:9d:eb:31:39:e8:45:05:b3:7c:4b:c5:
07:ee:95:6f:b9:5b:78:10:c7:6c:7e:5b:46:6c:66:
52:c6:56:13:57:cc:ff:cf:56:a5:43:ee:2f:7f:20:
66:f1:23:b8:99:e7:6a:97:fc:8d:a2:de:e7:68:a3:
8a:3f:71:dc:8e:c6:26:99:fc:ae:48:25:4e:77:05:
3e:a8:de:f0:53:9f:ca:54:d1:76:66:88:44:9a:bd:
93:5f:0c:83:f0:5b:39:4c:82:01:f5:b0:f8:86:2f:
10:fa:f7:72:52:bf:b7:92:3e:49:7d:4d:bb:8f:ca:
fe:85:11:aa:16:86:a0:cf:94:a5:df:a5:40:1c:fa:
44:28:6a:79:fa:70:b6:2a:5b:4f:4a:2f:09:f2:a2:
36:d0:6b:fa:a6:59:e2:07:bf:31:e7:58:fa:e0:ee:
da:38:8f:8f:23:97:84:b4:24:99:e0:e1:3c:31:58:
3c:36:e2:c8:4a:16:80:be:36:3e:c6:09:24:33:6d:
56:7a:5a:e0:3c:0b:17:01:75:9b:05:25:c4:6f:0a:
31:39:33:ba:03:ea:8d:56:94:4d:4a:29:7c:a4:a7:
a0:3d:a8:fe:ac:19:91:af:c6:d3:81:14:58:c9:6d:
3d:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:C7:B0:A0:7F:D2:11:19:06:A0:64:B9:F3:47:45:28:5D:70:99:66
X509v3 Authority Key Identifier:
keyid:AE:9B:5F:4B:06:21:A5:52:ED:6B:19:3E:63:61:DB:9C:E9:30:6E:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/72ed9f71dc0182564f0b1d89d7dbe402d3c34665.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/22bf051e-c109-4ab8-998f-f97be65a3598/aa0bf2af2d708c89b40924a550aa7bbacd146482.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/22bf051e-c109-4ab8-998f-f97be65a3598/72ed9f71dc0182564f0b1d89d7dbe402d3c34665.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.179.167.0/24
Signature Algorithm: sha256WithRSAEncryption
68:7e:3c:4f:1b:0a:9e:ea:d6:96:e1:19:fb:a8:37:1a:71:4f:
89:9b:07:0d:ef:c4:9f:0d:6d:5b:7a:aa:8f:ec:fb:1d:f6:b4:
e9:2e:00:98:14:cc:ad:74:cb:e0:40:2b:94:ca:3d:9e:19:f7:
a1:21:d6:46:ec:a7:34:61:19:e2:de:6b:64:0f:08:5d:db:05:
97:62:3a:a6:13:76:1e:b7:66:26:8d:0d:c5:96:a6:77:d5:bf:
2a:eb:d2:ba:ef:8a:e8:f1:70:20:c5:77:76:f2:88:ef:83:e5:
03:cc:d6:df:71:66:8f:e4:fa:c5:11:6f:8c:c3:74:cf:c2:83:
5f:c3:01:e5:8e:83:a6:85:9f:15:c7:17:dc:d4:7d:a2:75:a8:
c3:73:96:98:17:b1:8e:e7:4f:d1:3f:aa:e8:ab:a6:bd:ac:36:
3c:cf:50:66:93:7b:47:d0:73:87:cd:99:d2:ae:63:10:4d:82:
66:39:5c:0c:3c:41:97:d3:83:0e:62:d3:70:ca:e2:08:9e:e2:
20:65:c4:0e:6f:91:48:5f:31:98:9f:fa:8b:94:9d:e9:80:1a:
4b:73:be:71:35:a9:da:3c:09:35:36:af:bd:54:4c:31:7f:23:
5f:76:0a:3f:27:5a:01:19:9d:a3:43:f0:16:85:d8:1a:25:52:
3d:6b:af:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:18 2024 by rpki-client on console-ams.rpki-client.org