Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/32cfc704-a7b0-4f22-8841-666bd3c39492/2ab50f8419f92b452cb76da98e6b8161cd48fe1d.roa
File: 2ab50f8419f92b452cb76da98e6b8161cd48fe1d.roa (raw, json)
Hash identifier: awwTjtCn+kacgtZxFLCaC+D58idduX4fSb69b42bl5c=
Subject key identifier: A3:FF:9E:EA:4F:54:8A:F6:01:5D:9A:5F:67:DB:C6:91:65:98:8B:7D
Certificate issuer: /CN=dd9b1c33269fd77ee0908dd34d4a659cafbb2430
Certificate serial: 022BD9
Authority key identifier: 43:CE:D6:B6:77:7B:59:6D:D9:A7:34:06:01:AB:E1:E3:27:57:01:52
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dd9b1c33269fd77ee0908dd34d4a659cafbb2430.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/32cfc704-a7b0-4f22-8841-666bd3c39492/2ab50f8419f92b452cb76da98e6b8161cd48fe1d.roa
Signing time: Fri 28 Jul 2023 19:53:55 +0000
ROA not before: Thu 27 Jul 2023 19:53:55 +0000
ROA not after: Mon 28 Jul 2025 19:53:55 +0000
asID: 266876
IP address blocks: 45.160.35.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 142297 (0x22bd9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd9b1c33269fd77ee0908dd34d4a659cafbb2430
Validity
Not Before: Jul 27 19:53:55 2023 GMT
Not After : Jul 28 19:53:55 2025 GMT
Subject: CN=2ab50f8419f92b452cb76da98e6b8161cd48fe1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:20:35:e4:f1:d8:fa:9e:07:17:fd:90:1b:18:
44:11:8c:2c:f1:4f:de:69:2d:a5:ae:15:b0:67:95:
f7:b9:c4:ce:98:f5:df:54:e1:34:ba:4f:1e:01:4c:
80:e0:1a:8a:1f:b3:d1:05:97:0d:26:58:a8:7a:11:
c3:ab:e9:4e:21:f5:c8:6e:25:0a:fa:76:5c:67:43:
0c:d3:98:b7:1b:74:e9:74:2e:d9:46:ec:11:86:ea:
3a:06:23:df:cd:2c:88:49:30:0e:46:0f:39:6b:9c:
36:e0:fc:0c:a5:c7:c8:99:cb:9b:8a:86:00:58:c0:
81:56:b1:5e:94:d5:6e:82:db:0e:8e:63:2f:6a:a6:
3c:af:1c:6e:3f:c9:2b:5b:4d:64:c9:d6:49:b5:db:
7f:b9:5f:9f:24:da:19:10:6f:b5:6d:db:87:96:6b:
04:71:15:00:a6:16:72:69:6f:d7:b6:93:5b:7d:54:
6a:df:59:f0:50:e3:0d:d7:0e:5d:a9:d7:01:37:ec:
0e:2d:3e:43:5a:ee:60:57:57:a9:81:d5:6c:7a:52:
04:1d:df:28:fc:bc:44:ef:73:d9:35:bb:95:f8:fb:
13:ec:94:3d:a3:93:af:42:a7:ac:50:d2:98:0a:e0:
93:ef:94:cb:88:8a:3f:53:fc:0e:fb:f1:0d:56:51:
92:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:FF:9E:EA:4F:54:8A:F6:01:5D:9A:5F:67:DB:C6:91:65:98:8B:7D
X509v3 Authority Key Identifier:
keyid:43:CE:D6:B6:77:7B:59:6D:D9:A7:34:06:01:AB:E1:E3:27:57:01:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dd9b1c33269fd77ee0908dd34d4a659cafbb2430.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/32cfc704-a7b0-4f22-8841-666bd3c39492/2ab50f8419f92b452cb76da98e6b8161cd48fe1d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/32cfc704-a7b0-4f22-8841-666bd3c39492/dd9b1c33269fd77ee0908dd34d4a659cafbb2430.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.160.35.0/24
Signature Algorithm: sha256WithRSAEncryption
85:53:a9:6f:23:12:14:14:e1:d0:1f:56:1f:09:fe:6d:e5:53:
35:06:7a:b1:60:14:ef:d7:16:cb:18:2b:92:c8:c6:09:6d:d1:
ec:30:88:ad:bb:d5:42:f5:e2:70:35:9e:88:a6:bd:63:e7:f5:
d0:13:9b:be:35:dc:2e:5f:86:3f:59:35:64:36:e8:d0:15:c8:
75:4b:e0:39:93:5e:94:e9:bf:05:b0:9d:e9:00:c8:fd:e9:5d:
cd:ab:44:02:db:a9:ee:d3:0f:4c:af:c6:23:ec:62:05:2c:c0:
a4:40:2d:aa:cc:39:67:ee:6a:7d:b2:2b:f7:c7:5b:9d:bf:1d:
73:0d:d0:2c:bb:d1:4d:2b:dd:bb:bd:17:05:49:7b:7d:a2:3e:
ee:81:2d:c2:e9:c8:bb:1f:37:2b:69:f6:6e:83:bb:d2:17:0d:
7c:51:78:e4:b1:5c:da:3e:5e:98:52:14:36:61:40:12:d3:46:
ea:24:91:c6:76:48:58:39:52:cd:84:35:29:6f:0e:fa:5f:89:
2d:e4:14:3f:da:96:36:86:bb:b0:3a:08:65:d0:06:d7:bb:05:
37:8e:9c:10:d4:76:0c:5c:da:cc:60:bb:15:e7:07:a5:c6:b4:
8f:dc:52:04:c7:16:72:ac:1e:85:cb:6b:1e:e0:d7:b4:44:4f:
49:77:75:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:04 2024 by rpki-client on console-fra.rpki-client.org