Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/338af84c-2399-49a6-8ac1-a3335d5de813/24f1dd9cad4468c90903fae373a2421ca229e76b.roa
File: 24f1dd9cad4468c90903fae373a2421ca229e76b.roa (raw, json)
Hash identifier: jx5IaIrQ+V/SsHoMfwak58ozISIA+LJP3tYPnSG/qz8=
Subject key identifier: C5:05:4B:02:6B:89:66:19:49:D1:5C:7E:B9:4B:04:7E:35:57:3A:ED
Certificate issuer: /CN=8864966ee9b1969ff07e2beb8bb4f6c083ced70d
Certificate serial: 1E0B
Authority key identifier: D5:40:B7:6A:AB:B4:BB:00:4E:24:7F:15:42:7E:3A:63:33:4C:B9:95
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8864966ee9b1969ff07e2beb8bb4f6c083ced70d.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/338af84c-2399-49a6-8ac1-a3335d5de813/24f1dd9cad4468c90903fae373a2421ca229e76b.roa
Signing time: Wed 24 Mar 2021 14:32:14 +0000
ROA not before: Wed 24 Mar 2021 14:32:13 +0000
ROA not after: Tue 24 Mar 2026 14:32:13 +0000
asID: 267686
IP address blocks: 45.163.140.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7691 (0x1e0b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8864966ee9b1969ff07e2beb8bb4f6c083ced70d
Validity
Not Before: Mar 24 14:32:13 2021 GMT
Not After : Mar 24 14:32:13 2026 GMT
Subject: CN=24f1dd9cad4468c90903fae373a2421ca229e76b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:06:71:0f:1e:d4:b6:d9:b1:ca:3a:d8:2e:bd:
b2:70:82:cd:2c:a2:ac:76:f7:59:b3:29:af:37:93:
da:50:13:ff:81:c7:f6:16:ac:8b:7d:37:0c:d7:2c:
f7:b9:79:97:25:1e:3e:9a:bf:5c:49:ba:9f:9e:b5:
19:25:59:4a:27:b3:21:01:bb:6a:d6:51:b8:d7:cc:
8f:1b:f5:5c:ae:b5:df:59:1e:97:6f:31:a1:e1:e4:
41:ae:11:b0:3c:ec:98:32:0e:aa:d2:dd:36:88:54:
d3:b0:1a:1b:25:24:56:8a:1e:dd:ba:a1:99:0b:19:
c3:a5:81:f4:a9:43:9b:aa:53:99:53:48:16:2c:52:
70:b1:5c:11:3f:7a:82:9a:da:52:21:0b:57:1d:bb:
57:96:46:fd:64:de:3c:81:51:e7:4d:e6:dd:3a:7d:
51:9e:32:c2:2d:27:a8:86:b4:de:df:93:98:68:7f:
42:29:4e:d7:26:e4:5f:3c:18:60:7b:b9:ed:42:7a:
44:92:e4:d4:79:6d:8c:2c:d2:da:12:b8:cd:3b:28:
83:fe:4e:ef:56:cd:a2:9e:6e:51:d3:7c:32:db:98:
0d:41:e4:66:d5:c0:5a:0d:5e:50:4a:a3:4f:56:27:
5b:99:82:43:d5:48:75:44:e5:37:a0:1b:7b:5c:cc:
a8:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:05:4B:02:6B:89:66:19:49:D1:5C:7E:B9:4B:04:7E:35:57:3A:ED
X509v3 Authority Key Identifier:
keyid:D5:40:B7:6A:AB:B4:BB:00:4E:24:7F:15:42:7E:3A:63:33:4C:B9:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8864966ee9b1969ff07e2beb8bb4f6c083ced70d.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/338af84c-2399-49a6-8ac1-a3335d5de813/24f1dd9cad4468c90903fae373a2421ca229e76b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/338af84c-2399-49a6-8ac1-a3335d5de813/8864966ee9b1969ff07e2beb8bb4f6c083ced70d.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.163.140.0/22
Signature Algorithm: sha256WithRSAEncryption
25:5e:2b:cb:e0:62:da:3c:14:12:22:6d:2e:57:22:dc:de:cb:
6e:d7:8f:78:18:3c:c5:2a:0d:7a:d7:0a:ef:55:14:98:05:92:
58:11:66:4e:51:45:b1:a4:6b:41:64:a6:cf:2d:73:63:c0:3c:
bd:88:5c:47:c1:97:03:40:f7:3d:8f:4c:0f:ee:8b:fc:28:9b:
1b:b1:f8:52:9f:57:2f:1e:c8:9f:9f:fe:f6:46:f3:fe:3a:e4:
24:7a:9b:d9:38:de:6e:43:89:47:7a:b5:2d:4c:9b:48:fb:82:
1c:35:60:22:ff:12:58:01:6f:21:98:87:02:11:f1:bd:9e:ed:
1f:d3:1d:39:3b:e1:d1:9a:3c:38:d8:5f:4e:ec:ed:0f:14:7f:
37:4a:c7:b3:dc:a2:9e:45:0a:4d:4b:72:5a:e4:b1:00:55:c6:
47:90:cc:ef:46:0d:47:42:36:2c:6f:01:dc:16:e2:b2:48:48:
9e:a8:b2:75:f1:95:e3:33:fb:b8:b3:75:db:a1:32:40:62:a5:
ea:59:5e:63:eb:88:f0:62:12:25:2a:5a:20:04:9f:5e:ec:dd:
d9:44:2c:56:91:8f:5d:8a:92:e0:ab:dd:ec:4a:de:d2:23:41:
bf:db:60:37:5d:ea:86:b3:6c:49:ed:21:71:ef:3e:d7:f8:4b:
6c:c0:8b:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:19 2024 by rpki-client on console-ams.rpki-client.org