Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/28fa21b8-6119-4cec-bdf9-0391ac5d3862/b31c2cef48bf1e25ff6b88155d3015d0753dfe84.roa
File: b31c2cef48bf1e25ff6b88155d3015d0753dfe84.roa (raw, json)
Hash identifier: kILeJqxPA9hXIPfMDbZC3bk89/xBMOcvurxd9htogCI=
Subject key identifier: FE:BC:8A:80:23:0D:4B:BF:82:F8:90:1F:96:3C:17:BF:ED:3A:FE:1D
Certificate issuer: /CN=c5f9bb8cad69086a8942864ba26c3a5ee43bcf9e
Certificate serial: 0D336F
Authority key identifier: E3:49:2A:2D:6B:F1:52:BF:19:D7:33:77:42:D3:EA:7A:F4:3F:29:10
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c5f9bb8cad69086a8942864ba26c3a5ee43bcf9e.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/28fa21b8-6119-4cec-bdf9-0391ac5d3862/b31c2cef48bf1e25ff6b88155d3015d0753dfe84.roa
Signing time: Thu 28 Dec 2023 14:28:01 +0000
ROA not before: Thu 28 Dec 2023 14:28:01 +0000
ROA not after: Sun 28 Dec 2025 14:28:01 +0000
asID: 265842
IP address blocks: 45.225.40.0/23 maxlen: 24
45.224.203.0/24 maxlen: 24
2803:9220::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 865135 (0xd336f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5f9bb8cad69086a8942864ba26c3a5ee43bcf9e
Validity
Not Before: Dec 28 14:28:01 2023 GMT
Not After : Dec 28 14:28:01 2025 GMT
Subject: CN=b31c2cef48bf1e25ff6b88155d3015d0753dfe84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b7:bc:b4:d5:7b:a0:1b:83:21:7d:16:9b:c3:
f1:d1:cf:53:d6:51:d1:c9:8b:7e:85:96:07:0c:4d:
ab:57:6f:1e:5f:0e:19:5f:3e:c6:ca:08:ea:0e:68:
b1:b5:89:9a:e2:59:14:97:08:8d:d6:fc:ac:33:f0:
b0:f8:7f:46:47:b0:b5:a2:e4:f7:4c:8a:e9:25:a6:
39:33:50:1b:ed:69:e8:44:0c:ca:ca:9b:70:10:2e:
5f:5d:e8:7f:da:81:4b:d5:48:b4:a4:bb:c6:97:2b:
e4:9b:a2:dc:d1:e3:e0:35:57:5d:86:45:2b:b2:55:
23:a1:93:47:f8:75:ff:dd:87:8b:49:6e:34:45:94:
bf:8d:97:4b:23:6e:bb:5f:75:29:c7:e7:cd:19:38:
af:69:3e:98:5e:30:44:18:33:50:b9:26:b8:17:60:
eb:50:0f:11:6a:f7:75:bf:8e:8d:40:56:46:48:df:
af:eb:e1:c9:4b:1c:97:42:a3:6a:e6:fe:be:be:31:
96:40:a6:a7:7a:8b:73:29:27:ad:55:1a:ed:2a:36:
69:14:06:5b:55:e1:d5:13:64:c7:76:de:ff:09:02:
51:e8:53:8c:db:41:d5:8f:6d:34:b0:bb:ce:16:f8:
33:5f:16:98:cd:b3:cb:c1:5d:4e:3e:5c:6f:5b:8d:
05:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:BC:8A:80:23:0D:4B:BF:82:F8:90:1F:96:3C:17:BF:ED:3A:FE:1D
X509v3 Authority Key Identifier:
keyid:E3:49:2A:2D:6B:F1:52:BF:19:D7:33:77:42:D3:EA:7A:F4:3F:29:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c5f9bb8cad69086a8942864ba26c3a5ee43bcf9e.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/28fa21b8-6119-4cec-bdf9-0391ac5d3862/b31c2cef48bf1e25ff6b88155d3015d0753dfe84.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/28fa21b8-6119-4cec-bdf9-0391ac5d3862/c5f9bb8cad69086a8942864ba26c3a5ee43bcf9e.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.224.203.0/24
45.225.40.0/23
IPv6:
2803:9220::/32
Signature Algorithm: sha256WithRSAEncryption
60:ae:07:91:e2:10:b2:3b:72:1a:dd:a7:3c:e2:5d:fd:c5:56:
ea:8a:2e:ba:e6:0b:e4:68:0c:0c:63:80:a4:32:3a:32:ac:9e:
70:af:09:30:50:f1:2b:ba:46:01:43:55:4f:94:d7:ca:93:0d:
1f:9b:51:cc:3c:d9:65:87:98:ef:98:18:4f:b0:aa:91:01:c3:
f6:65:48:da:3b:1b:2f:10:53:4f:68:22:10:84:ae:f8:64:c4:
ad:ad:98:4e:4c:02:46:be:f7:12:13:76:58:cc:db:fd:81:88:
e8:50:ba:32:69:b1:9a:a1:a1:ed:db:21:76:aa:36:0b:5b:13:
cd:d2:c3:f0:b2:6a:2a:22:9a:0f:6d:86:07:34:29:63:7e:35:
a7:cc:8c:7a:63:df:83:5e:08:43:3f:50:26:16:25:1c:e5:65:
0d:05:7f:ee:cd:a2:f3:50:44:71:e8:cd:df:0e:3b:cc:7d:df:
95:8e:d7:62:11:7b:9b:b0:5d:0e:1d:3c:d9:07:87:3f:f1:e2:
e8:6b:2d:92:bc:61:28:c3:b0:c8:46:92:6e:a3:c3:6f:13:6d:
16:6e:5f:49:81:ea:bd:20:dc:b2:7c:39:cf:b1:60:5e:ee:be:
0a:6a:ec:ea:da:75:b2:e7:e4:4a:b2:c9:a0:41:c3:d5:b8:da:
f4:a7:ac:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:25 2024 by rpki-client on console-fra.rpki-client.org