Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/31cd2161-a38f-4982-9480-8aac1430885b/b960913a6c7f9de8a2d4c738acfe0655a0e45484.roa
File: b960913a6c7f9de8a2d4c738acfe0655a0e45484.roa (raw, json)
Hash identifier: uBTkukHgKjT6bVtbO0P9j65QSszQt9ubxvL8+FaeWAE=
Subject key identifier: 2E:07:C1:AC:1A:EE:A7:18:97:FE:C8:BC:CC:6B:D3:59:FC:2A:FE:2C
Certificate issuer: /CN=d859ad1e19f2ad313763c624cb729482cdaa2d58
Certificate serial: 131480
Authority key identifier: DC:68:32:5F:D2:E4:7D:88:B9:02:23:DB:48:E6:6E:83:6E:D2:2D:95
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d859ad1e19f2ad313763c624cb729482cdaa2d58.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/31cd2161-a38f-4982-9480-8aac1430885b/b960913a6c7f9de8a2d4c738acfe0655a0e45484.roa
Signing time: Thu 30 Dec 2021 18:12:09 +0000
ROA not before: Wed 24 Mar 2021 03:00:00 +0000
ROA not after: Tue 24 Mar 2026 03:00:00 +0000
asID: 264679
IP address blocks: 45.171.36.0/22 maxlen: 24
168.205.120.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1250432 (0x131480)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d859ad1e19f2ad313763c624cb729482cdaa2d58
Validity
Not Before: Mar 24 03:00:00 2021 GMT
Not After : Mar 24 03:00:00 2026 GMT
Subject: CN=b960913a6c7f9de8a2d4c738acfe0655a0e45484
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:3b:c0:eb:38:2f:71:1e:21:2a:8d:bf:b3:7c:
ab:78:5a:66:c6:46:61:12:dc:1b:c6:29:62:94:f9:
17:0a:ce:33:c9:3d:b9:c5:31:10:39:01:bb:73:fa:
82:9c:d7:d0:30:22:6d:47:79:ea:30:14:43:c7:4c:
fe:4c:bd:ef:55:84:5b:e3:20:52:0a:51:a7:c9:6a:
78:40:6d:da:ba:2d:63:36:3f:9a:6d:e6:93:05:ec:
9d:46:b5:e5:a0:71:ac:e6:5c:2b:0f:b7:d5:c8:08:
2a:5b:23:cf:29:eb:c1:2b:3e:30:98:00:71:b8:5a:
65:34:c9:f4:35:bb:05:85:e7:48:f3:ee:cb:33:51:
bc:51:2f:21:cb:f6:94:12:58:1c:c2:70:ab:c1:94:
0f:e5:49:b5:f5:c9:b0:05:91:86:ff:82:95:b4:5d:
70:c2:ea:96:f4:89:f6:ca:87:67:f4:cf:fd:ee:0f:
b1:1f:35:6e:7d:cc:15:c6:86:c2:24:5f:5b:cc:2f:
76:14:94:ae:19:09:ae:f7:60:08:6e:ce:06:90:51:
63:ae:fa:23:3c:22:e6:57:c9:59:9d:e0:bb:07:f9:
89:6c:25:50:bd:24:d6:10:dc:dc:2e:b2:5f:12:43:
32:71:c6:be:7d:56:ee:0c:28:26:d8:d8:6e:4b:77:
62:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:07:C1:AC:1A:EE:A7:18:97:FE:C8:BC:CC:6B:D3:59:FC:2A:FE:2C
X509v3 Authority Key Identifier:
keyid:DC:68:32:5F:D2:E4:7D:88:B9:02:23:DB:48:E6:6E:83:6E:D2:2D:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d859ad1e19f2ad313763c624cb729482cdaa2d58.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/31cd2161-a38f-4982-9480-8aac1430885b/b960913a6c7f9de8a2d4c738acfe0655a0e45484.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/31cd2161-a38f-4982-9480-8aac1430885b/d859ad1e19f2ad313763c624cb729482cdaa2d58.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.171.36.0/22
168.205.120.0/22
Signature Algorithm: sha256WithRSAEncryption
2a:2d:de:df:df:ca:96:8c:5a:00:24:26:57:4f:98:fe:dc:c7:
ca:7d:11:52:07:98:0e:4b:53:a0:43:bd:dc:c1:c3:b3:d9:e1:
a7:ee:43:b1:f4:49:6a:b5:f9:fa:b8:2e:4f:c7:4f:ea:18:06:
c7:43:f0:f5:09:21:69:5c:53:6f:1d:69:fb:fb:1b:46:1c:de:
c1:c8:d5:3a:27:7f:82:6b:7c:aa:be:ae:ff:9b:5c:30:4c:4b:
81:b2:0d:25:6b:18:20:cd:21:0d:d7:05:64:d4:cc:48:c9:6d:
92:ed:66:ad:89:e2:ff:7a:c0:25:3e:63:f3:8a:7b:fc:ea:db:
3d:1b:42:ef:77:35:03:30:82:16:29:6f:c4:84:57:b0:87:61:
da:08:0b:9f:91:05:72:da:45:17:7f:c4:e5:8f:8c:d4:e2:8c:
82:5b:8e:52:b8:82:45:62:18:95:42:93:4c:8b:a7:46:c2:96:
bd:3e:f5:b2:e5:1c:bb:b3:70:ea:42:a2:9a:da:2f:9c:a2:97:
06:de:c8:1a:73:43:38:44:2d:6b:d8:ac:fe:2c:33:6d:86:88:
7c:42:71:9b:eb:91:b8:d9:a6:52:31:5f:b5:c2:13:b0:94:bc:
74:61:fa:b8:5e:7e:cb:44:f2:52:26:55:20:8c:68:7a:08:11:
23:0d:29:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:19 2024 by rpki-client on console-ams.rpki-client.org