Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/23292d7b-ec90-44b7-a6c1-384534ce55eb/2d1987a0d247d80d607b977b3c7d1219c48187a5.roa
File: 2d1987a0d247d80d607b977b3c7d1219c48187a5.roa (raw, json)
Hash identifier: vNdo3pEOXF2qlEdkmsUYIVSzxjsGXz2WXzxbsf3P0LQ=
Subject key identifier: 11:E8:03:8F:D6:DD:92:08:BF:2E:41:94:4D:49:C1:4D:7A:D9:1D:AC
Certificate issuer: /CN=68190cc97a33ea3c321b5cbf58281b119c07dc2e
Certificate serial: 019EA1
Authority key identifier: F3:0A:9B:56:87:FB:4A:3A:C4:02:AE:5F:7B:89:1F:4F:6B:DF:41:72
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/68190cc97a33ea3c321b5cbf58281b119c07dc2e.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/23292d7b-ec90-44b7-a6c1-384534ce55eb/2d1987a0d247d80d607b977b3c7d1219c48187a5.roa
Signing time: Wed 01 Sep 2021 14:26:07 +0000
ROA not before: Wed 30 Jun 2021 03:00:00 +0000
ROA not after: Fri 30 Jun 2023 03:00:00 +0000
asID: 22869
IP address blocks: 45.4.128.0/24 maxlen: 24
45.4.129.0/24 maxlen: 24
45.4.130.0/24 maxlen: 24
45.4.131.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106145 (0x19ea1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68190cc97a33ea3c321b5cbf58281b119c07dc2e
Validity
Not Before: Jun 30 03:00:00 2021 GMT
Not After : Jun 30 03:00:00 2023 GMT
Subject: CN=2d1987a0d247d80d607b977b3c7d1219c48187a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:36:71:9d:da:26:39:69:c3:86:70:d7:a5:0e:
9e:84:e2:ec:c0:e9:62:97:33:db:fb:92:ef:bf:38:
90:d0:3d:ee:ff:c3:44:28:ec:b7:0b:a6:78:2e:9b:
04:6f:d2:d2:fa:b9:1f:46:90:f9:73:a3:0b:79:5b:
07:19:f7:bb:c7:fa:b1:27:d3:14:f9:1f:db:71:60:
37:b1:c5:09:e7:d9:f3:95:fd:a4:94:7b:60:ca:e1:
9e:9c:c7:83:f7:f4:52:e9:88:88:84:05:46:83:49:
46:db:0a:f7:f0:9e:93:cc:1b:3b:4d:09:75:7c:8a:
07:2c:58:ae:54:54:ca:d8:74:1a:5b:bb:65:77:68:
a9:1c:ec:b5:c0:06:f2:aa:34:a8:70:b5:b4:2c:df:
a4:e2:7b:40:f4:a5:0e:d7:9d:ff:c3:09:27:af:78:
bb:c2:79:d5:ca:c0:81:58:2c:79:70:0f:d1:63:67:
c8:05:e9:5f:88:d1:29:7f:c2:16:d8:27:b7:0d:49:
e3:3f:d3:24:44:9d:18:e8:ce:0a:3a:42:6d:11:c1:
52:67:bd:a5:4e:ea:31:d1:ac:bb:b0:ee:cf:ed:73:
ba:06:45:39:04:17:65:71:4c:e8:d3:cf:d3:21:07:
9a:ac:70:33:6d:0a:0a:59:a1:43:84:96:fd:d1:05:
62:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:E8:03:8F:D6:DD:92:08:BF:2E:41:94:4D:49:C1:4D:7A:D9:1D:AC
X509v3 Authority Key Identifier:
keyid:F3:0A:9B:56:87:FB:4A:3A:C4:02:AE:5F:7B:89:1F:4F:6B:DF:41:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/68190cc97a33ea3c321b5cbf58281b119c07dc2e.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/23292d7b-ec90-44b7-a6c1-384534ce55eb/2d1987a0d247d80d607b977b3c7d1219c48187a5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/23292d7b-ec90-44b7-a6c1-384534ce55eb/68190cc97a33ea3c321b5cbf58281b119c07dc2e.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.4.128.0/22
Signature Algorithm: sha256WithRSAEncryption
54:d1:fe:25:ba:7a:72:91:75:be:31:41:a2:69:ff:be:7d:ac:
60:7c:c4:cb:49:35:ad:94:0a:8f:2e:4f:1c:af:59:07:99:1d:
d7:3a:fe:68:b8:10:c4:cc:96:51:ab:a7:29:20:68:f9:dd:34:
4c:70:f2:8b:c8:01:df:c5:5d:a9:5d:4a:53:94:4b:ca:5a:11:
a1:e7:47:9f:f2:51:ef:d8:42:d2:ad:2d:04:cb:15:95:87:91:
17:7d:d6:c6:64:81:79:cc:24:58:0d:d3:f2:a9:30:c4:32:6b:
85:15:a6:4f:b5:61:4c:48:c2:66:6f:2d:f3:9e:c6:ec:9e:c7:
69:3e:5b:a9:58:65:6c:37:6d:42:b9:ec:20:19:da:42:3c:ca:
70:86:cf:07:dc:21:b4:de:9e:26:8e:45:a6:76:51:68:ad:35:
ad:12:7b:d5:0e:d0:a4:8a:bf:63:0f:c6:2c:61:f4:9f:25:ed:
17:c1:3d:ad:f0:0a:b2:62:76:64:70:4f:87:5c:32:0e:00:2e:
02:a0:68:b2:15:00:b8:cf:a8:d1:ca:f8:6d:fb:7c:01:d6:b6:
ae:e6:c2:ab:d8:01:8a:72:b5:95:77:60:a9:76:5d:06:26:ea:
23:9e:08:a6:80:a5:1b:6a:0a:15:d7:0d:1a:b2:6a:4d:7b:a9:
b1:c1:ed:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:27 2023 by rpki-client on console-ams.rpki-client.org