Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/28fa21b8-6119-4cec-bdf9-0391ac5d3862/f1de369804b6740c7d4289d0295c5d5d6d891858.roa
File: f1de369804b6740c7d4289d0295c5d5d6d891858.roa (raw, json)
Hash identifier: ArvEHQUpAcoQ0ivW6LeP+7cy5TyMqNxAQyWiHtMD314=
Subject key identifier: DE:63:B2:3D:AC:A9:67:D3:C2:BF:BE:51:B0:9E:FE:9B:BE:76:F5:BE
Certificate issuer: /CN=c5f9bb8cad69086a8942864ba26c3a5ee43bcf9e
Certificate serial: 0D3DF2
Authority key identifier: E3:49:2A:2D:6B:F1:52:BF:19:D7:33:77:42:D3:EA:7A:F4:3F:29:10
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c5f9bb8cad69086a8942864ba26c3a5ee43bcf9e.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/28fa21b8-6119-4cec-bdf9-0391ac5d3862/f1de369804b6740c7d4289d0295c5d5d6d891858.roa
Signing time: Thu 28 Dec 2023 14:28:15 +0000
ROA not before: Thu 28 Dec 2023 14:28:15 +0000
ROA not after: Sun 28 Dec 2025 14:28:15 +0000
asID: 265842
IP address blocks: 45.225.40.0/23 maxlen: 24
45.224.203.0/24 maxlen: 24
2803:9220::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 867826 (0xd3df2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5f9bb8cad69086a8942864ba26c3a5ee43bcf9e
Validity
Not Before: Dec 28 14:28:15 2023 GMT
Not After : Dec 28 14:28:15 2025 GMT
Subject: CN=f1de369804b6740c7d4289d0295c5d5d6d891858
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:46:e6:b9:8b:cc:1b:55:77:4d:43:64:9b:a4:
c8:f2:f0:97:e6:95:0c:38:f0:b4:fa:3f:9e:4b:18:
5c:38:f2:b0:f0:ce:a1:a3:6a:20:09:b9:5e:1d:29:
3b:68:7f:7d:30:62:83:7c:94:89:39:a9:34:b5:b8:
ad:da:64:fd:26:64:bf:ef:47:71:f6:a4:6f:e6:15:
57:22:ab:89:cc:b0:4a:5f:a5:e9:d6:ca:84:fe:9e:
bc:8a:0e:70:80:84:ee:1a:5b:10:20:60:cc:d3:ec:
4d:89:06:ec:3b:2b:c1:c5:71:40:1c:17:3a:49:79:
a7:a6:ea:72:27:b0:20:12:b9:a6:c3:51:0b:3b:ef:
22:4a:ce:3e:1b:f1:da:b6:61:5b:2d:40:0e:20:0e:
ed:e5:90:10:9b:f0:e5:9f:7a:07:50:87:90:c9:01:
c6:2f:29:47:24:42:dc:b9:73:47:1c:4c:39:af:28:
83:84:59:b6:27:eb:ac:ee:88:0f:f4:b3:53:1c:1e:
71:88:7e:61:91:4e:c3:d9:2e:6e:e2:84:44:25:f7:
17:bd:54:a5:cd:eb:6f:d4:f4:28:97:74:a6:41:b0:
7f:42:9d:04:8d:47:7d:88:eb:ff:df:0e:e1:73:6d:
05:07:78:e9:9c:cd:34:a8:ca:7f:a1:4b:b1:00:d0:
8b:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:63:B2:3D:AC:A9:67:D3:C2:BF:BE:51:B0:9E:FE:9B:BE:76:F5:BE
X509v3 Authority Key Identifier:
keyid:E3:49:2A:2D:6B:F1:52:BF:19:D7:33:77:42:D3:EA:7A:F4:3F:29:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c5f9bb8cad69086a8942864ba26c3a5ee43bcf9e.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/28fa21b8-6119-4cec-bdf9-0391ac5d3862/f1de369804b6740c7d4289d0295c5d5d6d891858.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/28fa21b8-6119-4cec-bdf9-0391ac5d3862/c5f9bb8cad69086a8942864ba26c3a5ee43bcf9e.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.224.203.0/24
45.225.40.0/23
IPv6:
2803:9220::/32
Signature Algorithm: sha256WithRSAEncryption
48:34:5b:44:7b:b6:f6:7a:30:5b:8f:7d:c8:33:b3:3c:d1:4d:
7b:95:0e:e2:a1:39:3b:bd:21:c6:ba:f6:3b:a1:0c:0b:6e:12:
ff:89:07:a9:1d:ee:b5:b5:05:d0:d9:a6:09:bb:f3:80:dd:88:
82:68:49:70:1c:fb:ff:be:71:f0:18:30:e0:04:97:e9:9d:15:
74:0f:0a:0b:0c:a0:70:3f:22:78:52:c4:8c:95:17:ab:e3:97:
6f:3e:9d:3a:3b:0d:c4:98:56:c7:ee:8d:16:bd:39:5b:67:70:
71:61:10:70:b0:93:e8:e5:41:c5:2e:e0:02:23:71:0b:aa:70:
9c:01:8d:9e:09:ab:79:09:35:e6:a5:ce:cd:5d:e0:8d:5b:3d:
56:e0:8e:de:b1:49:ad:3a:a0:dc:be:84:c7:ec:e5:2c:57:cb:
c7:f0:97:63:86:0c:ab:65:d2:a3:22:57:8e:eb:b5:22:e3:47:
c1:d4:de:2a:0d:3c:c4:65:e8:1b:9b:f8:93:b4:f5:7d:23:1b:
d4:5e:db:0b:fa:da:72:ec:a7:89:87:ae:58:7f:ca:d5:29:c8:
08:23:f6:b3:81:e5:a6:a8:0e:62:7e:a9:79:c2:ec:36:64:79:
b1:a0:35:f4:48:57:6c:44:ff:91:84:dd:ad:8b:bc:5d:49:ae:
91:01:80:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:05 2024 by rpki-client on console-ams.rpki-client.org