Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/326db356-47be-4fd5-81f9-79e20824eeb9/312d574b1fac3794a5153cce8e7d94274b41c2b4.roa
File: 312d574b1fac3794a5153cce8e7d94274b41c2b4.roa (raw, json)
Hash identifier: gP7qxrIk9eE+ZjQE6qXS+cdc3RvlkRoeAnDMKGcWR8k=
Subject key identifier: 65:B8:44:88:FF:7A:4B:79:38:2B:6E:68:7B:9F:43:EB:ED:96:89:CA
Certificate issuer: /CN=f0973f64f8f7a17366a92ab7845b32edddce23cd
Certificate serial: 18FD55
Authority key identifier: ED:12:6C:20:6F:96:13:60:53:21:3B:B8:B6:37:0E:8A:83:B0:8E:E3
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f0973f64f8f7a17366a92ab7845b32edddce23cd.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/326db356-47be-4fd5-81f9-79e20824eeb9/312d574b1fac3794a5153cce8e7d94274b41c2b4.roa
Signing time: Tue 12 Jul 2022 17:59:50 +0000
ROA not before: Tue 12 Jul 2022 03:00:00 +0000
ROA not after: Fri 12 Jul 2024 03:00:00 +0000
asID: 3356
IP address blocks: 45.65.203.0/24 maxlen: 24
2801:1a:3000::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1637717 (0x18fd55)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0973f64f8f7a17366a92ab7845b32edddce23cd
Validity
Not Before: Jul 12 03:00:00 2022 GMT
Not After : Jul 12 03:00:00 2024 GMT
Subject: CN=312d574b1fac3794a5153cce8e7d94274b41c2b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:6f:1b:e0:3b:a8:7b:68:63:d7:3d:56:43:22:
27:84:df:e2:85:e8:22:9b:08:4c:ca:7c:0c:d6:f9:
47:3a:2d:82:d6:eb:58:af:bc:e2:9f:3c:90:49:3d:
1a:ad:35:73:e0:71:78:37:d2:cc:f7:e2:d6:69:05:
76:67:a5:e1:d6:de:4c:5f:7e:2e:09:95:ff:75:a2:
38:cf:fa:2b:68:3c:90:10:20:37:28:08:14:22:56:
6f:95:19:68:b5:ed:2e:96:45:83:0d:63:ae:aa:ed:
f2:21:1b:6f:d8:95:96:0a:fb:85:59:b1:07:ac:be:
e6:83:7a:3c:fd:c1:3c:dd:f8:49:9b:ea:c1:a5:e2:
7e:7d:05:f5:04:a3:21:3a:e1:ba:25:a4:52:c1:a0:
36:e4:fe:4a:9c:a9:4d:b3:dc:07:d6:d2:4c:7d:02:
c7:8e:1f:50:b2:e7:de:6a:5b:dc:77:8a:eb:1f:66:
ce:4f:a0:13:15:66:56:72:3a:7a:71:29:06:d3:7d:
ab:b4:48:a7:e7:6a:ca:44:e2:3d:4e:1a:9b:35:8c:
09:8f:e7:1d:cc:e5:1f:14:ab:cb:e5:3f:49:74:08:
5c:ed:b1:21:0f:da:66:53:1a:99:d8:72:ba:15:90:
f8:f6:c1:4a:22:6c:81:81:32:d6:63:94:29:57:de:
49:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:B8:44:88:FF:7A:4B:79:38:2B:6E:68:7B:9F:43:EB:ED:96:89:CA
X509v3 Authority Key Identifier:
keyid:ED:12:6C:20:6F:96:13:60:53:21:3B:B8:B6:37:0E:8A:83:B0:8E:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f0973f64f8f7a17366a92ab7845b32edddce23cd.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/326db356-47be-4fd5-81f9-79e20824eeb9/312d574b1fac3794a5153cce8e7d94274b41c2b4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/326db356-47be-4fd5-81f9-79e20824eeb9/f0973f64f8f7a17366a92ab7845b32edddce23cd.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.65.203.0/24
IPv6:
2801:1a:3000::/48
Signature Algorithm: sha256WithRSAEncryption
46:19:94:61:51:cf:d8:fd:a1:e5:0b:d9:d5:e2:40:c0:43:00:
d6:3b:ec:8e:1d:9c:86:cf:6a:bf:5a:86:27:18:f5:83:44:ad:
c7:60:08:00:92:d3:51:04:92:f0:99:ad:ad:5a:2d:63:b6:8c:
4a:d3:39:5d:cf:5d:dd:8d:24:29:74:c3:8b:0f:6f:51:78:2d:
12:26:bc:93:a4:e1:5f:c4:96:78:df:12:7f:f6:46:7d:00:d7:
72:0a:bd:a7:51:3a:e6:a4:de:b4:0d:13:4c:a5:eb:c0:9c:b0:
14:45:44:60:a3:c4:66:4e:5b:ae:61:f0:3a:7c:31:a9:a1:db:
34:ec:bb:b0:eb:28:5e:16:ed:0e:b2:4a:12:be:84:76:74:c7:
3d:fa:6e:7d:4e:7d:02:6b:29:ae:92:31:e0:b3:5c:0a:bf:20:
be:1f:c0:9b:66:48:cb:6d:b7:73:25:a1:19:49:14:e1:79:a4:
3d:4b:c7:48:40:42:0c:ca:f8:4f:fa:8c:be:6b:21:34:bf:7a:
33:be:de:93:94:fa:53:12:ca:7f:04:85:d7:c0:71:81:91:38:
7c:f9:9b:3d:9d:36:9d:68:65:cf:39:8b:07:46:fd:df:dc:21:
bd:a5:66:c1:99:97:be:85:c8:b9:cc:66:2a:98:44:8f:dd:46:
9a:e8:4b:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:26 2024 by rpki-client on console-fra.rpki-client.org