Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/25c0eac5-c4f0-4853-9d17-754a30f5d13d/7be76093965c09310bafd7d788fd165e47e35198.roa
File: 7be76093965c09310bafd7d788fd165e47e35198.roa (raw, json)
Hash identifier: 0nxW+tMV8Gq9Ddp+bPya40gH+RIMR7VhSbqOyiE2tYw=
Subject key identifier: 51:D9:DC:F8:F1:08:76:F9:72:BF:BF:36:6D:72:6C:5C:F3:47:31:55
Certificate issuer: /CN=52bb17f783587359acf790b39c64a0b6fa0f0ceb
Certificate serial: BAD3
Authority key identifier: 99:28:9F:D9:16:19:57:EB:1A:AA:BE:2E:24:36:42:AB:19:AC:06:29
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/52bb17f783587359acf790b39c64a0b6fa0f0ceb.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/25c0eac5-c4f0-4853-9d17-754a30f5d13d/7be76093965c09310bafd7d788fd165e47e35198.roa
Signing time: Wed 24 Mar 2021 14:31:53 +0000
ROA not before: Wed 24 Mar 2021 14:31:53 +0000
ROA not after: Tue 24 Mar 2026 14:31:53 +0000
asID: 267741
IP address blocks: 45.168.80.0/24 maxlen: 24
45.169.52.0/23 maxlen: 24
2803:9da0::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 47827 (0xbad3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52bb17f783587359acf790b39c64a0b6fa0f0ceb
Validity
Not Before: Mar 24 14:31:53 2021 GMT
Not After : Mar 24 14:31:53 2026 GMT
Subject: CN=7be76093965c09310bafd7d788fd165e47e35198
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:6a:f8:e8:2d:65:ac:11:b7:9e:c3:f0:e4:ce:
b1:3b:c7:1a:4f:4d:c3:86:dc:37:c7:3f:90:32:ef:
73:32:8b:37:a9:e6:38:4d:cc:47:0f:aa:3e:02:09:
58:9f:30:81:26:c9:2f:39:24:ad:d3:a2:ef:d7:43:
65:a6:58:15:bf:c3:4d:94:3a:a6:6c:90:61:9f:db:
89:e1:8d:12:4b:03:77:e1:35:b9:33:9e:59:16:5e:
7b:55:d1:64:cf:85:93:00:56:af:f2:26:5c:e0:e1:
26:be:56:63:71:6d:cf:40:fd:a3:4c:19:1d:da:e5:
c4:c4:14:cc:f9:24:b4:31:d5:95:11:88:96:55:14:
a3:2e:d9:66:db:33:18:7e:8f:de:e3:cd:b2:a1:f3:
89:54:73:80:a0:0d:9a:f0:22:fd:4a:82:41:7f:99:
c4:c1:e8:b9:60:ce:5e:12:be:b1:54:1a:3a:f5:c3:
26:71:04:3a:9e:03:08:e4:e9:26:fa:b2:df:28:41:
f5:11:33:8b:e5:da:96:5e:b6:95:eb:1e:a4:53:9f:
76:89:74:3d:67:f4:ff:ee:3a:ec:2e:0c:6b:c8:bb:
12:59:f5:9e:df:e9:6c:70:07:f4:7f:c5:e1:32:27:
73:de:9a:f5:d4:fd:b8:1e:40:50:55:1e:e7:2d:46:
0c:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:D9:DC:F8:F1:08:76:F9:72:BF:BF:36:6D:72:6C:5C:F3:47:31:55
X509v3 Authority Key Identifier:
keyid:99:28:9F:D9:16:19:57:EB:1A:AA:BE:2E:24:36:42:AB:19:AC:06:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/52bb17f783587359acf790b39c64a0b6fa0f0ceb.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/25c0eac5-c4f0-4853-9d17-754a30f5d13d/7be76093965c09310bafd7d788fd165e47e35198.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/25c0eac5-c4f0-4853-9d17-754a30f5d13d/52bb17f783587359acf790b39c64a0b6fa0f0ceb.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.168.80.0/24
45.169.52.0/23
IPv6:
2803:9da0::/32
Signature Algorithm: sha256WithRSAEncryption
51:55:83:40:bd:da:24:f2:f3:8b:21:34:30:68:d3:30:3e:97:
b8:aa:67:08:e3:f8:f8:e6:a7:b5:10:6f:cb:0b:a7:d1:42:66:
88:2b:da:04:04:62:ca:da:9e:b3:0f:2d:1d:4c:d7:2e:6e:83:
51:76:fa:af:b8:16:9a:cb:49:7e:11:4c:14:b6:1d:8e:eb:26:
a3:dd:7e:80:a3:bc:1d:6f:14:be:64:b7:1b:f1:be:8b:71:13:
b3:76:f3:93:41:4d:a5:9c:e5:bc:7b:1b:57:ac:4d:06:35:13:
be:16:92:71:1a:19:20:17:d6:38:27:e6:2a:1c:e5:2f:75:10:
b7:59:6d:24:e3:a6:3f:82:22:08:7a:eb:40:33:ed:5c:ee:b0:
bd:61:67:a5:3f:53:c0:28:29:36:87:fa:d0:58:2b:0b:df:67:
86:dc:b0:9d:3a:b0:ce:fd:e5:e4:34:d0:22:f4:91:59:ab:df:
50:4e:0f:61:5b:54:7b:dc:dd:74:2a:6a:ec:9a:f7:19:e1:57:
94:34:b9:46:a6:96:3d:f4:90:df:89:e5:8b:b3:04:23:a7:bb:
34:16:dc:7c:0f:b5:bb:3d:24:88:0a:78:a8:9c:0d:13:70:ba:
12:7f:10:4b:80:9b:f1:25:40:fa:d1:79:0c:0e:2f:11:4d:1c:
53:3b:88:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:05 2024 by rpki-client on console-ams.rpki-client.org