Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/41f1dc3b-841f-44da-ba5d-0a3437bbea8e/68047a614bfdaab3a8d5ada45a1b634369b5f501.roa
File: 68047a614bfdaab3a8d5ada45a1b634369b5f501.roa (raw, json)
Hash identifier: rWLvBXwnantrESLsrLYnvgMf/dbMDXyx5SkX2FqqGIc=
Subject key identifier: 97:3D:84:23:F1:DE:87:9D:62:84:AA:51:DC:EA:1C:33:76:22:7F:4B
Certificate issuer: /CN=22a6df4fd40e763407bcafdfe5fa708cef91df5a
Certificate serial: 0BA9AD
Authority key identifier: B0:3D:51:76:39:FA:02:2E:8D:BC:CC:49:85:6F:8D:4A:0E:30:1B:B8
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/22a6df4fd40e763407bcafdfe5fa708cef91df5a.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/41f1dc3b-841f-44da-ba5d-0a3437bbea8e/68047a614bfdaab3a8d5ada45a1b634369b5f501.roa
Signing time: Wed 24 Mar 2021 14:41:02 +0000
ROA not before: Wed 24 Mar 2021 14:41:01 +0000
ROA not after: Tue 24 Mar 2026 14:41:01 +0000
asID: 269831
IP address blocks: 45.187.0.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 764333 (0xba9ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22a6df4fd40e763407bcafdfe5fa708cef91df5a
Validity
Not Before: Mar 24 14:41:01 2021 GMT
Not After : Mar 24 14:41:01 2026 GMT
Subject: CN=68047a614bfdaab3a8d5ada45a1b634369b5f501
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:f4:47:0d:bc:76:99:09:5e:ac:5a:88:3c:7a:
95:29:2b:8b:0d:67:7a:fc:d7:7b:e3:37:e4:bc:87:
f4:9f:89:c7:bf:95:f7:c5:ee:e4:a0:ad:5b:9e:81:
f2:5d:8f:6e:79:77:53:21:68:c4:59:82:57:48:cb:
e5:f8:2a:e6:4f:5a:41:b9:9c:50:f6:53:42:55:9c:
52:31:e9:6e:39:54:dc:ac:50:1b:c1:4b:cc:38:8b:
d4:bf:cd:7a:10:ea:e6:2c:6b:49:2c:98:e9:fd:ef:
a4:7d:35:d3:d8:65:30:51:aa:c8:89:78:b7:b4:7b:
5b:ab:bd:f8:23:10:3c:a8:0a:81:0f:88:d5:2f:55:
ad:a0:a3:73:59:8c:81:d6:5c:7b:3b:a0:e9:0e:f2:
f8:d5:b5:e8:bc:c9:9b:54:af:da:d5:a2:dc:fe:24:
0f:e1:6b:83:5b:88:0d:8d:b4:c0:de:79:80:47:c1:
0f:b1:ae:37:ec:37:91:d5:56:49:24:9e:03:56:d1:
02:e7:c4:0a:0d:9c:ca:dd:0a:5d:d8:74:d9:a4:8c:
6a:a3:97:d0:d8:a5:c6:84:63:ba:89:66:a7:18:ee:
e4:40:15:f2:8d:18:71:a1:32:e5:08:b6:27:79:a5:
38:ec:82:e4:b5:3b:46:4f:2b:56:28:7f:d4:bd:19:
86:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:3D:84:23:F1:DE:87:9D:62:84:AA:51:DC:EA:1C:33:76:22:7F:4B
X509v3 Authority Key Identifier:
keyid:B0:3D:51:76:39:FA:02:2E:8D:BC:CC:49:85:6F:8D:4A:0E:30:1B:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/22a6df4fd40e763407bcafdfe5fa708cef91df5a.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/41f1dc3b-841f-44da-ba5d-0a3437bbea8e/68047a614bfdaab3a8d5ada45a1b634369b5f501.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/41f1dc3b-841f-44da-ba5d-0a3437bbea8e/22a6df4fd40e763407bcafdfe5fa708cef91df5a.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.187.0.0/22
Signature Algorithm: sha256WithRSAEncryption
91:e4:65:db:33:ac:73:ba:43:fe:de:43:76:66:4e:c1:c9:2e:
72:f8:34:6c:9b:e1:44:86:ba:e4:85:e5:ae:84:8f:f5:19:b4:
41:58:68:43:6e:93:27:f0:40:06:e3:0b:0c:c2:5a:bd:ba:a1:
65:73:5c:5b:1d:03:42:fe:47:65:8d:fe:fe:c2:b8:94:ff:d4:
a3:13:34:93:94:81:a1:8e:85:72:1b:71:6b:50:69:b6:21:7d:
7a:cd:3a:02:ff:0d:4b:67:18:35:7a:ea:8f:37:e4:39:2b:ca:
e2:39:ab:ec:76:6e:4e:28:ab:ad:22:b1:0d:a0:0d:c6:4f:82:
a1:6b:03:5a:9c:94:e5:01:cb:27:01:cc:4b:b2:94:93:14:f3:
10:7d:1c:aa:66:3d:2a:ef:cd:1d:ed:8b:af:2d:f1:0a:f5:fa:
80:99:e3:25:19:57:64:b0:9e:9b:3d:a1:45:53:ec:98:86:a0:
1c:5c:38:8f:11:61:e2:71:c5:48:7a:f4:ab:41:54:25:31:e9:
dc:17:ea:8c:71:1f:5f:87:2f:41:e3:66:44:82:25:39:36:44:
7f:25:bc:be:42:c6:2f:80:9f:86:5d:2d:fd:18:a7:46:bb:75:
0b:de:58:02:25:47:b1:3e:59:cd:21:3a:3d:78:59:16:41:f8:
bf:e7:33:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:05 2024 by rpki-client on console-fra.rpki-client.org