Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3d59b158-2a91-4feb-ae75-8ff7dca8eff2/aca42ed3dae8cb5f9be973a2b4fc84d504a89966.roa
File: aca42ed3dae8cb5f9be973a2b4fc84d504a89966.roa (raw, json)
Hash identifier: O4JtW+dQOirDVX1PDLptL2JCSEmwG/RnJTpV9aMJUWE=
Subject key identifier: E6:3C:29:2C:14:94:83:28:CC:05:70:3C:B6:F6:26:2E:93:77:6E:F6
Certificate issuer: /CN=2fd13bb6c152df2de42e94dc89624f31b656962e
Certificate serial: 0A74A4
Authority key identifier: 9F:08:1A:56:63:F5:2E:18:0E:8A:40:DF:C8:B4:87:82:0A:6C:C5:BD
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2fd13bb6c152df2de42e94dc89624f31b656962e.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3d59b158-2a91-4feb-ae75-8ff7dca8eff2/aca42ed3dae8cb5f9be973a2b4fc84d504a89966.roa
Signing time: Wed 24 Mar 2021 14:48:08 +0000
ROA not before: Wed 24 Mar 2021 14:48:08 +0000
ROA not after: Tue 24 Mar 2026 14:48:08 +0000
asID: 269876
IP address blocks: 45.168.174.0/24 maxlen: 24
45.168.175.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 685220 (0xa74a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fd13bb6c152df2de42e94dc89624f31b656962e
Validity
Not Before: Mar 24 14:48:08 2021 GMT
Not After : Mar 24 14:48:08 2026 GMT
Subject: CN=aca42ed3dae8cb5f9be973a2b4fc84d504a89966
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:7c:95:bf:a0:c0:3a:72:aa:dc:10:e2:e1:68:
08:b4:f2:de:06:28:cd:b5:19:11:1e:76:ee:74:6d:
63:53:75:c9:6a:9f:6e:89:a9:aa:1e:57:fb:d2:bf:
bd:7c:2d:fc:79:c1:73:74:ff:a5:b6:2c:7f:79:fe:
bc:82:54:d6:a4:c6:7e:65:00:28:24:c1:05:d5:cc:
58:4f:ed:da:b5:1c:84:f5:34:b6:35:fc:d3:39:97:
12:14:bd:77:85:c1:a5:47:53:1e:9a:e4:70:b2:16:
82:8c:0c:43:76:02:65:8f:1f:34:35:fe:c9:38:3f:
14:ba:44:95:ea:6d:4d:92:72:1f:e5:5a:94:f3:b6:
31:1d:7a:39:c3:0c:78:e7:2c:20:bf:e0:45:9d:da:
2d:bf:10:31:53:59:24:8e:ed:16:a2:93:d6:2d:b4:
46:44:62:75:49:f2:ef:ab:5c:94:72:0c:7e:49:8e:
b6:58:fd:98:a9:c1:86:08:fd:3f:43:c4:32:1d:41:
83:0c:38:41:16:92:63:0c:33:72:3c:26:92:a1:86:
a5:73:22:aa:01:c3:6e:96:3e:e8:f4:8b:f2:dc:0d:
e0:42:c8:4b:31:2b:49:01:60:8b:af:20:00:34:9e:
f2:0c:d1:ee:b5:0d:19:5a:ba:c4:70:30:6d:f7:7f:
ec:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:3C:29:2C:14:94:83:28:CC:05:70:3C:B6:F6:26:2E:93:77:6E:F6
X509v3 Authority Key Identifier:
keyid:9F:08:1A:56:63:F5:2E:18:0E:8A:40:DF:C8:B4:87:82:0A:6C:C5:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2fd13bb6c152df2de42e94dc89624f31b656962e.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3d59b158-2a91-4feb-ae75-8ff7dca8eff2/aca42ed3dae8cb5f9be973a2b4fc84d504a89966.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/3d59b158-2a91-4feb-ae75-8ff7dca8eff2/2fd13bb6c152df2de42e94dc89624f31b656962e.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.168.174.0/23
Signature Algorithm: sha256WithRSAEncryption
3d:fe:30:2a:5f:ee:ba:d7:c2:6e:6b:69:07:46:67:31:79:fe:
aa:c1:84:cc:c3:a1:5a:04:41:a7:09:95:cf:4b:8c:e0:49:0e:
e1:72:d3:12:ef:d3:e9:44:4d:e0:c7:d3:7e:14:29:fb:bf:62:
16:b1:c9:83:f4:4b:cc:5e:51:c0:8b:eb:30:8f:c7:c0:af:06:
4c:6d:99:60:ee:b0:77:8f:23:0a:7a:3f:6e:45:ce:a4:59:bd:
c9:de:98:cf:65:5b:2c:94:73:2d:1e:59:1b:6a:67:19:71:c2:
c0:3b:8b:7d:4c:c2:b9:73:3c:e5:af:7e:61:19:c6:79:59:ba:
86:ad:a5:2b:4b:e5:95:21:bc:b0:ec:14:e8:10:76:8a:1a:a1:
b6:47:f6:ab:04:21:7d:0b:4d:19:46:34:49:4f:7e:6c:85:7a:
24:cb:90:a2:7f:c7:45:22:f2:b9:ca:e4:d6:51:15:18:aa:e3:
b5:d1:91:f7:d7:16:4c:03:b5:6e:f4:0a:fb:92:38:ce:bb:80:
8a:16:40:5d:e1:c5:87:8b:04:82:ea:19:63:16:28:9a:cb:72:
6e:a2:3c:6e:8a:ba:08:ba:00:a8:78:c6:cf:e8:7f:f1:69:22:
e4:38:de:4c:de:8d:1d:01:90:0f:4f:87:9c:8a:46:f3:46:b0:
fc:62:46:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:05 2024 by rpki-client on console-fra.rpki-client.org