Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2fc42fdf-2d8b-46a5-8f9b-68d6e3403e4e/d0e0174e7409f9a433b4c60d1f0b72ea7cea852f.roa
File: d0e0174e7409f9a433b4c60d1f0b72ea7cea852f.roa (raw, json)
Hash identifier: CWDn6c9NUFPK5bv8UlYSZd0qCH9yOUP2HUi4W/g3o1k=
Subject key identifier: BC:48:9F:BE:24:12:9A:45:37:07:D2:F6:CE:66:95:3B:21:68:88:0D
Certificate issuer: /CN=259c4fb25c604824d214cf7cbe588eab433a5691
Certificate serial: 28C2FF
Authority key identifier: 3F:31:C8:54:2E:52:5E:69:30:FE:E3:42:F0:40:D8:8D:07:34:6E:D0
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/259c4fb25c604824d214cf7cbe588eab433a5691.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/2fc42fdf-2d8b-46a5-8f9b-68d6e3403e4e/d0e0174e7409f9a433b4c60d1f0b72ea7cea852f.roa
Signing time: Thu 28 Mar 2024 17:41:13 +0000
ROA not before: Thu 28 Mar 2024 17:41:13 +0000
ROA not after: Sat 28 Mar 2026 17:41:13 +0000
asID: 273190
IP address blocks: 45.225.89.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2671359 (0x28c2ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=259c4fb25c604824d214cf7cbe588eab433a5691
Validity
Not Before: Mar 28 17:41:13 2024 GMT
Not After : Mar 28 17:41:13 2026 GMT
Subject: CN=d0e0174e7409f9a433b4c60d1f0b72ea7cea852f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:26:59:46:d8:00:a1:dc:b2:04:a2:79:ce:ee:
62:54:20:26:60:b7:04:71:5f:56:07:a6:35:19:c6:
f6:f8:7f:e6:d7:1a:6b:0f:14:21:35:0b:64:b0:3c:
fd:f9:c3:54:e5:ee:f1:e0:21:35:0a:c6:8f:1c:b2:
c7:87:7c:e8:da:e6:1c:36:85:04:26:40:31:4b:ad:
d2:cf:6d:07:59:fe:7f:a6:d6:a3:7f:a6:66:d6:b9:
bb:47:d6:fb:74:2f:45:67:93:02:f4:ae:4e:c2:d7:
65:2d:37:0e:74:19:5a:84:bb:2e:84:bf:af:98:e7:
75:37:1c:37:b2:a0:46:56:4d:db:64:63:97:7a:bc:
1e:67:27:92:c1:71:d3:59:d3:a0:cd:44:5d:c5:0e:
5f:79:03:03:be:6b:7c:b9:75:a0:f5:1b:04:c4:25:
53:00:56:c1:5a:54:e6:d4:88:ed:8e:99:81:9c:54:
62:78:ba:ff:63:c5:9e:b0:09:21:25:61:9f:89:12:
9d:8b:ef:66:18:48:85:34:fe:ca:ed:63:b4:5e:7f:
0b:0b:15:21:21:5e:a1:f4:97:e6:3c:34:2c:42:fb:
53:fc:bb:86:8a:95:15:1d:a1:fc:ea:4d:23:fd:2f:
10:cb:51:4f:ca:ef:73:76:36:82:82:d9:e1:0d:2a:
03:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:48:9F:BE:24:12:9A:45:37:07:D2:F6:CE:66:95:3B:21:68:88:0D
X509v3 Authority Key Identifier:
keyid:3F:31:C8:54:2E:52:5E:69:30:FE:E3:42:F0:40:D8:8D:07:34:6E:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/259c4fb25c604824d214cf7cbe588eab433a5691.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2fc42fdf-2d8b-46a5-8f9b-68d6e3403e4e/d0e0174e7409f9a433b4c60d1f0b72ea7cea852f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/2fc42fdf-2d8b-46a5-8f9b-68d6e3403e4e/259c4fb25c604824d214cf7cbe588eab433a5691.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.225.89.0/24
Signature Algorithm: sha256WithRSAEncryption
42:5d:b6:de:f9:44:51:e5:13:01:57:3a:a6:5b:c3:79:7b:38:
6d:c2:e6:e8:cc:80:7e:16:20:30:c7:82:00:dc:07:fd:ee:04:
88:5b:6e:36:34:e5:9e:99:66:b3:70:ac:94:fa:60:76:9c:ba:
13:36:48:57:65:9b:0d:aa:03:8f:96:7d:f9:91:ee:44:fd:7b:
64:f3:25:c5:c2:c4:d6:01:73:b3:fa:15:ff:dc:61:46:f7:e6:
e9:75:5e:b5:a9:dd:e1:8d:8f:d3:90:a0:bd:4c:7c:ea:d6:6d:
49:27:2a:25:6d:07:5e:9a:e9:49:38:24:c3:49:5f:25:71:0a:
30:36:c4:c0:87:b1:d3:ee:df:51:27:37:57:be:1d:99:01:45:
39:55:f5:b4:0d:70:68:78:c5:ac:7d:df:4c:61:de:a2:71:4a:
8d:f8:2c:9c:87:5f:f2:f1:08:cf:7d:8c:96:c4:f6:e9:c3:08:
5f:cd:2e:a4:62:46:5e:08:c3:95:d6:43:80:d7:ff:a6:cd:cc:
03:d9:08:52:10:f3:ac:cb:28:3d:b8:15:58:4f:b5:9b:da:5b:
12:59:8f:53:7c:36:ec:3e:12:a5:c4:e8:cd:bf:89:b7:37:0f:
d4:b9:5b:a8:5d:4f:2f:e7:85:60:25:a7:39:9f:47:ba:80:8a:
e0:39:ee:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:19 2024 by rpki-client on console-ams.rpki-client.org