Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2f78a3dd-7ec6-4524-bbc3-6ff9d59f39e4/21e4deb7c045d58541c0c2cb59d4f568428cf750.roa
File: 21e4deb7c045d58541c0c2cb59d4f568428cf750.roa (raw, json)
Hash identifier: /QV2u295ImsLklHaCiRdCBhx1pO4nAwxO9uVzn+nuH0=
Subject key identifier: 65:88:76:3D:DF:A5:22:E7:AF:6D:C0:56:14:21:E0:64:C7:B9:65:D9
Certificate issuer: /CN=5a87907b9ef24cb59648e8fd0b029232a460cf62
Certificate serial: 053245
Authority key identifier: 68:C9:C5:12:15:BD:53:F1:82:36:9B:AA:00:C6:72:D4:EE:17:00:AE
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5a87907b9ef24cb59648e8fd0b029232a460cf62.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/2f78a3dd-7ec6-4524-bbc3-6ff9d59f39e4/21e4deb7c045d58541c0c2cb59d4f568428cf750.roa
Signing time: Tue 05 Dec 2023 19:10:11 +0000
ROA not before: Tue 05 Dec 2023 19:10:11 +0000
ROA not after: Fri 05 Dec 2025 19:10:11 +0000
asID: 264758
IP address blocks: 45.173.40.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 340549 (0x53245)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a87907b9ef24cb59648e8fd0b029232a460cf62
Validity
Not Before: Dec 5 19:10:11 2023 GMT
Not After : Dec 5 19:10:11 2025 GMT
Subject: CN=21e4deb7c045d58541c0c2cb59d4f568428cf750
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:d6:24:14:ae:11:bb:94:13:d6:a3:af:61:4a:
0a:05:bd:15:7a:17:74:74:2a:69:3e:ee:b7:ac:6f:
bd:25:93:5b:3d:14:d7:36:49:38:49:0d:9c:2a:d5:
e0:5d:d7:df:8a:e3:3b:05:9b:87:fc:ec:0e:50:f7:
fe:8a:07:c7:3c:68:3d:a8:c9:ca:e5:e9:1b:bb:c0:
dc:c3:c6:6e:fe:27:5a:ae:8b:db:51:8c:9b:a0:e9:
e2:f8:d0:cd:e2:de:b3:e8:92:04:b7:c4:0b:03:e8:
30:9b:fd:78:ab:e7:19:88:0e:59:4e:c1:d3:95:93:
7a:6b:82:10:5b:4d:32:31:98:c5:64:0a:b8:82:19:
3e:f9:60:1c:c5:7a:b2:25:6d:87:ba:f7:bb:24:0b:
1b:d4:14:ca:7c:c3:7a:2d:c1:54:87:0b:58:a1:db:
03:ad:6d:cd:4b:bb:e4:93:90:49:68:0e:2d:d0:e4:
90:19:18:16:3a:e9:20:6e:34:73:fd:b0:6a:5e:64:
79:48:42:65:83:d1:ad:72:17:de:97:56:7a:0e:5f:
49:20:97:48:b0:10:8e:e4:c5:22:32:6e:80:32:71:
4f:48:89:3b:d0:c7:ce:54:36:fb:fb:75:60:4d:65:
52:57:78:14:85:e2:11:0e:e7:12:79:45:f5:99:41:
99:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:88:76:3D:DF:A5:22:E7:AF:6D:C0:56:14:21:E0:64:C7:B9:65:D9
X509v3 Authority Key Identifier:
keyid:68:C9:C5:12:15:BD:53:F1:82:36:9B:AA:00:C6:72:D4:EE:17:00:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5a87907b9ef24cb59648e8fd0b029232a460cf62.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2f78a3dd-7ec6-4524-bbc3-6ff9d59f39e4/21e4deb7c045d58541c0c2cb59d4f568428cf750.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/2f78a3dd-7ec6-4524-bbc3-6ff9d59f39e4/5a87907b9ef24cb59648e8fd0b029232a460cf62.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.173.40.0/22
Signature Algorithm: sha256WithRSAEncryption
8d:30:c2:12:d9:02:6d:36:44:4e:5e:fa:c2:89:74:77:f5:87:
cb:65:d8:03:12:27:e4:a5:82:97:7f:84:b1:74:37:00:cd:e0:
a2:50:b0:23:52:d7:fb:75:c9:fa:4e:41:25:42:de:ab:f9:d9:
2d:88:d1:eb:cd:fe:f6:d7:8a:85:14:8c:c1:bb:98:50:38:cf:
f8:94:c8:e9:38:a7:62:5d:a1:e6:ac:d5:ec:73:21:39:48:85:
52:16:71:36:58:db:9c:c4:7b:35:5f:bc:cf:44:46:03:d6:b5:
5a:12:17:fd:b8:9a:f9:5e:1a:70:9c:74:c9:b4:11:b9:ac:e0:
da:10:96:0f:8e:6e:a3:33:f8:01:74:d1:26:de:2c:96:c3:77:
58:cd:0e:5e:0d:98:95:9a:56:86:1c:af:8c:23:e1:7f:3e:44:
40:b8:11:36:73:76:7b:b8:5e:d9:b1:01:41:84:61:94:44:03:
27:a6:85:4a:07:cc:91:b3:ad:61:c3:10:80:07:c2:b7:d0:71:
59:1e:2c:fa:76:32:0f:e9:54:89:33:07:13:f8:d9:bf:05:cd:
a4:c9:75:39:45:b8:7b:67:49:42:c2:b1:ae:9c:40:91:dd:d9:
54:66:4c:61:7c:a6:d7:a7:fb:e0:63:39:1f:32:14:c2:b9:b6:
dd:f9:f3:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:19 2024 by rpki-client on console-ams.rpki-client.org