Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/285ff343-f7df-4a30-8f61-eaa8f8e2e923/c3d55cd5ebfa85b1a53203602fb31f028ed9edfc.roa
File: c3d55cd5ebfa85b1a53203602fb31f028ed9edfc.roa (raw, json)
Hash identifier: CDoDiKCT8CwZlj5GfX/csFbqYEs7WVSP8sRS1oD/K0s=
Subject key identifier: 6D:63:9F:79:B6:96:BC:77:54:10:25:5D:24:C3:7E:3A:43:D5:93:6D
Certificate issuer: /CN=bb1b3bab33faa8adc8fbf6b1c7be7b61a8c5e4c8
Certificate serial: 0CF212
Authority key identifier: AB:D7:91:BC:C1:12:3D:BA:99:FB:7A:90:CB:54:71:4E:D7:1F:16:A2
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bb1b3bab33faa8adc8fbf6b1c7be7b61a8c5e4c8.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/285ff343-f7df-4a30-8f61-eaa8f8e2e923/c3d55cd5ebfa85b1a53203602fb31f028ed9edfc.roa
Signing time: Wed 24 Mar 2021 14:33:07 +0000
ROA not before: Wed 24 Mar 2021 14:33:07 +0000
ROA not after: Tue 24 Mar 2026 14:33:07 +0000
asID: 266808
IP address blocks: 45.236.143.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 848402 (0xcf212)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb1b3bab33faa8adc8fbf6b1c7be7b61a8c5e4c8
Validity
Not Before: Mar 24 14:33:07 2021 GMT
Not After : Mar 24 14:33:07 2026 GMT
Subject: CN=c3d55cd5ebfa85b1a53203602fb31f028ed9edfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:1d:e7:76:27:e5:ce:32:31:5c:cc:2c:d3:9e:
19:b7:bc:a3:3a:38:a4:9e:2e:01:07:d3:7f:5a:6a:
fb:fb:d3:3d:6a:a3:66:49:f0:57:d3:df:a6:d0:5e:
21:35:fa:24:a2:ee:b9:2a:72:26:17:78:0a:88:1b:
0a:07:06:c6:b4:5c:30:6a:df:7e:36:58:f8:35:ec:
5f:3d:be:37:e5:18:df:bf:d5:1f:eb:c2:dd:e6:61:
d0:b0:d3:d3:b6:76:83:66:0b:aa:86:25:51:75:37:
65:20:cd:61:c0:93:d9:56:2e:48:04:87:92:9d:35:
19:44:af:c7:3d:b0:cb:0b:57:c4:4f:c9:59:86:d8:
70:f3:c9:aa:99:cb:0b:49:0d:e8:90:ce:8a:71:9d:
45:0b:94:d8:9c:55:b0:e5:74:6d:19:10:41:1c:71:
2e:5e:0d:92:e8:66:51:af:ab:fd:3d:fb:c1:27:07:
9b:42:ea:65:a3:0a:0b:d6:08:5b:8a:5e:f8:31:ce:
d4:cd:46:76:3a:04:f3:e4:61:28:80:50:0f:ed:97:
02:91:43:00:f4:ce:1e:15:91:a1:eb:3a:9b:d8:96:
f1:c1:ce:09:34:6f:46:53:44:22:66:ee:93:52:fe:
1c:03:15:f9:bd:f5:3d:4f:76:29:61:3e:06:86:26:
98:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:63:9F:79:B6:96:BC:77:54:10:25:5D:24:C3:7E:3A:43:D5:93:6D
X509v3 Authority Key Identifier:
keyid:AB:D7:91:BC:C1:12:3D:BA:99:FB:7A:90:CB:54:71:4E:D7:1F:16:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bb1b3bab33faa8adc8fbf6b1c7be7b61a8c5e4c8.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/285ff343-f7df-4a30-8f61-eaa8f8e2e923/c3d55cd5ebfa85b1a53203602fb31f028ed9edfc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/285ff343-f7df-4a30-8f61-eaa8f8e2e923/bb1b3bab33faa8adc8fbf6b1c7be7b61a8c5e4c8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.236.143.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:b4:ed:f4:fe:f0:e6:ad:1f:ea:0f:2e:d1:a6:dd:5c:50:66:
bf:8b:f0:b6:38:85:58:e6:fa:df:87:9b:7d:ee:8c:e2:99:30:
6c:92:eb:e7:3e:ef:35:51:b0:45:0b:bd:9b:4c:83:63:70:93:
b9:51:2f:28:0b:5f:21:f0:c7:21:9b:90:f1:e5:ae:8a:46:9a:
88:61:86:da:ad:48:ea:cf:8d:06:d6:be:95:51:e0:0b:ea:e2:
d6:f5:57:af:78:62:e8:59:50:28:05:09:67:2d:75:ef:9c:bc:
89:8e:ef:4a:df:6d:96:21:55:02:de:37:2b:81:d7:26:ce:19:
70:8c:1f:2d:d6:d3:f4:ce:31:59:d7:a9:a2:17:fd:65:b0:fd:
ee:bd:06:21:86:a1:17:2d:46:a7:ac:d9:23:ed:79:dc:c7:15:
d1:19:8f:c5:d8:95:bc:9d:e1:f5:a4:2c:a8:49:f3:44:be:5e:
01:27:89:8e:62:f7:b9:d3:96:9a:c7:65:83:35:f4:74:91:e0:
28:4c:92:ad:58:18:53:12:dd:77:65:77:f6:44:b2:27:c8:22:
51:63:58:1a:fb:46:97:3e:d3:88:c0:57:41:8c:55:01:09:d7:
7f:fb:b7:6b:37:c9:98:2d:07:f4:ba:83:17:bc:66:bf:1d:99:
46:5b:79:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:05 2024 by rpki-client on console-ams.rpki-client.org