Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3791117c-4cb4-4228-a81e-9052636292c3/b2ac649c972d294e251feb7ea2278b01b3cacec9.roa
File: b2ac649c972d294e251feb7ea2278b01b3cacec9.roa (raw, json)
Hash identifier: xgCqTkPCdFG0Q55Qwlctson7LUxyyAvGXdiC/4Nt6Jo=
Subject key identifier: 47:EC:EC:3A:D6:3E:C7:63:50:81:EE:14:2D:3A:2A:48:D0:F5:A7:BD
Certificate issuer: /CN=687a3e9f15d3c290c441b7a80b9b1761c83b0283
Certificate serial: 20690C
Authority key identifier: A0:84:26:4A:90:E0:2A:5C:EF:69:2C:57:1A:46:F9:B5:F0:70:A5:BE
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/687a3e9f15d3c290c441b7a80b9b1761c83b0283.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3791117c-4cb4-4228-a81e-9052636292c3/b2ac649c972d294e251feb7ea2278b01b3cacec9.roa
Signing time: Fri 24 Mar 2023 08:30:18 +0000
ROA not before: Thu 23 Mar 2023 08:30:18 +0000
ROA not after: Sat 22 Mar 2025 08:30:18 +0000
asID: 265729
IP address blocks: 45.7.208.0/24 maxlen: 24
45.7.209.0/24 maxlen: 24
45.7.210.0/24 maxlen: 24
45.7.211.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2124044 (0x20690c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=687a3e9f15d3c290c441b7a80b9b1761c83b0283
Validity
Not Before: Mar 23 08:30:18 2023 GMT
Not After : Mar 22 08:30:18 2025 GMT
Subject: CN=b2ac649c972d294e251feb7ea2278b01b3cacec9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:8b:11:41:a9:fc:c5:75:69:8e:7e:c9:f3:49:
18:e9:2d:9f:e3:ce:35:57:c9:1a:09:73:b8:0a:6b:
d4:f8:81:c9:b3:f9:0e:1b:cc:8b:cf:71:f4:17:dc:
9f:df:de:80:f3:16:e5:87:7a:31:04:e3:3e:f7:e6:
e8:f0:0b:43:fd:1a:6c:1d:d7:27:e4:c3:01:4c:49:
ba:aa:3f:f8:96:8a:37:37:46:b1:19:98:f1:46:b0:
ba:5b:9c:9c:d9:5c:89:4c:ff:ed:37:5c:4a:b0:0b:
34:40:4a:44:69:75:8b:22:99:3b:97:bd:a8:fb:6c:
a1:2c:8a:83:3d:9f:50:9b:91:c6:c0:a0:8a:12:8b:
43:7a:27:ef:05:42:0a:c3:22:88:61:93:25:0c:e7:
2e:e7:56:63:f2:8f:65:04:05:dd:95:bb:8c:8a:bb:
ba:91:cf:5d:e5:49:39:1f:33:c8:90:67:7d:37:5c:
2a:9a:d0:6a:6f:30:a7:58:6b:a2:ad:eb:60:dc:2c:
37:be:e4:d3:15:03:ad:f8:10:97:c3:74:52:d5:95:
26:f6:b0:34:ab:d7:2d:10:d5:ca:37:e4:b0:b2:bc:
e2:dd:51:86:6a:e7:ce:b7:ef:a7:5c:03:88:c3:25:
c2:6a:b7:cd:7e:0e:5e:6b:14:7d:35:50:8c:e1:26:
4a:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:EC:EC:3A:D6:3E:C7:63:50:81:EE:14:2D:3A:2A:48:D0:F5:A7:BD
X509v3 Authority Key Identifier:
keyid:A0:84:26:4A:90:E0:2A:5C:EF:69:2C:57:1A:46:F9:B5:F0:70:A5:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/687a3e9f15d3c290c441b7a80b9b1761c83b0283.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3791117c-4cb4-4228-a81e-9052636292c3/b2ac649c972d294e251feb7ea2278b01b3cacec9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/3791117c-4cb4-4228-a81e-9052636292c3/687a3e9f15d3c290c441b7a80b9b1761c83b0283.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.7.208.0/22
Signature Algorithm: sha256WithRSAEncryption
8a:62:d9:02:c3:3a:e3:0a:08:43:fe:19:cd:8a:e6:06:f0:ef:
dc:d0:34:21:3f:75:61:f3:93:0b:e1:ba:6a:96:aa:28:4b:3f:
de:83:d6:a9:40:6c:3e:2b:28:8a:f2:84:64:6e:16:bd:c6:20:
c5:24:4c:2e:d2:8a:81:f3:19:6e:e7:9a:26:df:ed:3e:e5:f5:
f7:e1:fb:e3:df:28:d4:33:2a:b1:e0:e4:88:c5:07:8d:3c:e4:
e5:b1:f5:3e:9c:6f:63:32:3e:6e:d8:fa:d2:b3:5a:6b:3a:62:
78:51:10:89:3b:09:5b:89:88:41:6b:8e:69:e6:87:2b:e5:b1:
c2:b3:4b:a3:3f:ca:de:48:ae:40:10:04:7e:1c:4d:c3:df:90:
87:99:a4:8a:c1:cd:90:3d:16:54:e1:74:19:58:75:50:39:40:
ba:da:0d:3d:5b:b8:54:e8:98:ae:dc:0d:b2:a9:92:6b:fa:c7:
2a:d5:35:ad:27:10:64:75:00:b2:dc:8f:3e:ad:05:1d:06:e2:
8b:2d:57:62:8b:7d:20:e7:cf:ee:05:34:68:8f:d8:ef:26:f3:
2b:7c:41:a2:22:a1:97:68:c9:56:60:78:cc:8d:68:97:93:40:
21:ff:fb:8d:d2:d9:20:96:2e:42:f6:e5:a3:62:35:cd:18:65:
47:6b:ab:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:04 2024 by rpki-client on console-fra.rpki-client.org