Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/285ff343-f7df-4a30-8f61-eaa8f8e2e923/52556edc4b6e7ef6b2252a89d157ebca15a31f47.roa
File: 52556edc4b6e7ef6b2252a89d157ebca15a31f47.roa (raw, json)
Hash identifier: 9ebkgibFVMpyh9g332xVXGAcpGyVQUVtua8RcaNCVdw=
Subject key identifier: 43:FA:87:2F:F9:4C:E2:ED:80:CD:A8:F7:D0:B8:C7:40:BA:34:EA:D9
Certificate issuer: /CN=bb1b3bab33faa8adc8fbf6b1c7be7b61a8c5e4c8
Certificate serial: 0CECB3
Authority key identifier: AB:D7:91:BC:C1:12:3D:BA:99:FB:7A:90:CB:54:71:4E:D7:1F:16:A2
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bb1b3bab33faa8adc8fbf6b1c7be7b61a8c5e4c8.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/285ff343-f7df-4a30-8f61-eaa8f8e2e923/52556edc4b6e7ef6b2252a89d157ebca15a31f47.roa
Signing time: Wed 24 Mar 2021 14:33:07 +0000
ROA not before: Wed 24 Mar 2021 14:33:07 +0000
ROA not after: Tue 24 Mar 2026 14:33:07 +0000
asID: 266808
IP address blocks: 45.236.140.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 847027 (0xcecb3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb1b3bab33faa8adc8fbf6b1c7be7b61a8c5e4c8
Validity
Not Before: Mar 24 14:33:07 2021 GMT
Not After : Mar 24 14:33:07 2026 GMT
Subject: CN=52556edc4b6e7ef6b2252a89d157ebca15a31f47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:ea:12:b6:eb:60:9c:f6:5a:52:e0:c2:06:5c:
ed:3a:7a:b3:bb:bf:c7:8c:89:27:4d:66:8e:61:de:
ae:1d:e6:26:3f:62:3a:6e:0c:65:f3:db:bf:53:d9:
62:6b:6f:d5:81:ef:66:c1:1a:0a:6b:3d:a6:1d:3a:
0b:01:bc:49:4a:2e:84:a4:c1:31:ff:2d:a9:a5:d5:
c0:9d:64:7e:2f:0d:94:5b:5e:48:d5:e5:09:a2:57:
94:dc:24:57:e6:e4:42:6c:90:28:0b:96:9b:62:94:
a5:35:99:24:bb:ac:51:97:b6:b5:26:7d:52:3d:27:
6f:08:54:ba:79:fa:d4:70:d2:d9:ab:7e:a5:5e:f0:
ea:8b:5a:ce:29:ae:1b:36:1f:a8:0a:07:12:f3:2b:
89:8c:84:c8:2a:12:ef:41:ef:15:93:f3:ab:f5:c8:
33:3f:ee:5f:8a:33:d8:d7:3f:8b:af:25:e4:5c:89:
a6:53:12:68:21:b9:e5:91:42:0c:ba:83:c4:07:d4:
41:dd:69:a5:b2:dc:1d:15:a2:46:f4:25:d9:9a:29:
f9:9a:0a:22:33:24:82:fc:cd:2d:bf:52:6e:bb:84:
99:81:5e:99:2b:35:08:19:45:bc:8a:1e:a9:3b:a0:
ba:e0:19:35:3f:ac:e4:5c:16:bc:b5:7c:33:d7:fb:
d8:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:FA:87:2F:F9:4C:E2:ED:80:CD:A8:F7:D0:B8:C7:40:BA:34:EA:D9
X509v3 Authority Key Identifier:
keyid:AB:D7:91:BC:C1:12:3D:BA:99:FB:7A:90:CB:54:71:4E:D7:1F:16:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bb1b3bab33faa8adc8fbf6b1c7be7b61a8c5e4c8.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/285ff343-f7df-4a30-8f61-eaa8f8e2e923/52556edc4b6e7ef6b2252a89d157ebca15a31f47.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/285ff343-f7df-4a30-8f61-eaa8f8e2e923/bb1b3bab33faa8adc8fbf6b1c7be7b61a8c5e4c8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.236.140.0/24
Signature Algorithm: sha256WithRSAEncryption
89:9f:38:b4:4c:00:e7:68:aa:3d:f0:d2:95:93:41:d6:8d:70:
f4:31:7f:52:29:0b:5b:dd:95:a6:59:68:10:84:27:63:be:27:
d7:fc:5e:3c:ec:19:78:b4:96:86:f3:ce:e6:ee:bd:ca:16:c9:
14:9c:3b:e2:a1:b3:44:c6:6b:81:7a:f1:90:06:78:bc:f6:15:
bc:cb:95:20:bb:71:fc:60:ab:09:1f:68:24:f5:80:bc:86:5e:
3d:ff:cd:03:63:f7:12:9b:62:35:1c:8f:e5:66:c6:c5:e4:02:
10:2a:60:66:da:87:b0:f5:4e:d6:59:85:e8:52:98:5c:98:d7:
0a:b8:68:64:dc:8b:9e:6b:8c:4f:4d:4b:b0:cd:55:af:79:cb:
c2:e9:8d:f4:f3:73:8b:2c:bf:9b:29:5b:a1:2a:c0:8b:58:c7:
8d:32:99:22:8b:20:2a:44:fc:1b:05:3f:34:df:9b:67:2c:41:
25:64:78:7e:b5:18:d0:b8:a7:84:84:c4:c9:a7:53:d0:e9:5f:
ba:8b:3d:7c:31:96:3f:7c:aa:bd:16:9b:7a:57:c9:dc:5c:48:
da:c8:32:ca:ef:97:03:8e:18:95:e0:78:d6:a4:09:20:56:28:
5e:e4:da:b7:9e:9f:7b:e8:61:3c:79:8e:9c:ed:3b:56:35:4f:
53:15:ff:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:12 2023 by rpki-client on console-fra.rpki-client.org