Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4219d5e8-53b7-4f1c-96c1-e971723a6fab/17f2cf85b12ca5507f74820640185e7d85a03a50.roa
File: 17f2cf85b12ca5507f74820640185e7d85a03a50.roa (raw, json)
Hash identifier: FamgKSYNodU+YiyVRcbsiIZ3KMylFY5h/De/tlHufno=
Subject key identifier: 87:AE:D7:CE:61:FD:52:CF:95:24:96:13:B2:F9:59:27:B7:2C:2B:DB
Certificate issuer: /CN=b237ad19586522bd4228c8593de2f297c35868d7
Certificate serial: 1F4298
Authority key identifier: EC:AE:37:59:E1:EF:9E:77:59:63:74:A0:E6:B1:4F:FC:9D:13:33:3F
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b237ad19586522bd4228c8593de2f297c35868d7.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4219d5e8-53b7-4f1c-96c1-e971723a6fab/17f2cf85b12ca5507f74820640185e7d85a03a50.roa
Signing time: Wed 13 Dec 2023 04:41:36 +0000
ROA not before: Wed 13 Dec 2023 04:41:35 +0000
ROA not after: Sat 13 Dec 2025 04:41:35 +0000
asID: 266845
IP address blocks: 45.239.32.0/24 maxlen: 24
45.239.33.0/24 maxlen: 24
2803:3ca0::/32 maxlen: 32
2803:3ca0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2048664 (0x1f4298)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b237ad19586522bd4228c8593de2f297c35868d7
Validity
Not Before: Dec 13 04:41:35 2023 GMT
Not After : Dec 13 04:41:35 2025 GMT
Subject: CN=17f2cf85b12ca5507f74820640185e7d85a03a50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:3c:06:b4:1e:e7:4c:e8:c5:67:29:55:13:f7:
5b:aa:5d:59:1d:53:1e:43:b9:65:4d:5c:54:34:f3:
b1:1c:a8:71:61:e0:fc:b6:0e:bf:16:97:d1:88:ee:
7e:9d:7c:8f:e3:4e:b3:5a:b7:92:82:3c:26:1e:30:
34:c9:7d:1f:e3:b2:bb:16:f8:23:77:02:06:00:fa:
d1:61:65:2e:9b:61:0a:2d:4f:4f:8a:9a:20:c3:51:
85:4d:17:38:43:29:34:78:d0:74:e4:2f:84:f9:bf:
b7:3a:2e:98:4e:f0:63:cc:0c:d0:f2:53:99:bf:70:
90:4b:f7:3a:3e:9c:89:eb:99:7a:20:42:38:b8:36:
f9:55:60:9b:bf:d7:09:f2:cc:23:c6:2e:78:c0:6e:
35:8e:60:34:5e:b9:d4:2e:de:9d:bf:94:65:da:db:
90:ff:c3:21:d1:74:98:e5:f7:f3:06:0c:42:20:e0:
e8:f9:37:e4:33:b8:49:21:00:10:af:11:7d:23:7a:
bd:a0:22:23:db:d9:c8:52:cf:76:d8:db:a9:43:52:
ca:fc:a1:b8:9a:7d:a8:21:fd:99:d6:15:d9:bf:a3:
c4:b1:f4:dd:60:f6:29:83:e9:d4:51:72:c4:10:aa:
63:0b:e1:c1:a7:7d:42:7f:28:93:95:af:06:a7:5e:
73:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:AE:D7:CE:61:FD:52:CF:95:24:96:13:B2:F9:59:27:B7:2C:2B:DB
X509v3 Authority Key Identifier:
keyid:EC:AE:37:59:E1:EF:9E:77:59:63:74:A0:E6:B1:4F:FC:9D:13:33:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b237ad19586522bd4228c8593de2f297c35868d7.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4219d5e8-53b7-4f1c-96c1-e971723a6fab/17f2cf85b12ca5507f74820640185e7d85a03a50.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/4219d5e8-53b7-4f1c-96c1-e971723a6fab/b237ad19586522bd4228c8593de2f297c35868d7.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.239.32.0/23
IPv6:
2803:3ca0::/32
Signature Algorithm: sha256WithRSAEncryption
0a:eb:16:8e:18:75:d1:38:5f:36:97:a8:9d:db:56:13:54:63:
86:29:2a:6f:6e:a8:ab:e6:90:6c:19:4e:d7:4f:74:01:c0:90:
90:87:88:3e:78:02:30:1c:b0:b2:82:5f:bf:42:00:91:31:2e:
0b:45:5e:77:4c:fb:c5:fe:ff:b2:53:cb:25:f1:ed:36:b0:94:
42:e2:23:f6:d5:4a:5e:5f:5f:3e:2c:f1:24:f3:52:a7:f5:85:
2f:40:46:a4:6b:07:90:a9:e7:05:f7:b1:2a:4a:04:ae:1f:1f:
b0:ec:0b:77:45:1f:a8:56:f5:a2:6c:85:ad:08:e0:62:06:ff:
88:2f:2f:fe:12:52:41:98:d5:5c:3e:c3:6a:34:26:4d:01:a8:
ea:69:fa:13:0a:95:25:c4:b7:ee:db:dc:2d:cb:ec:0c:aa:b5:
ea:91:ac:a0:99:0c:04:c6:3e:ca:c1:bc:38:a1:6c:77:00:18:
13:95:f2:b7:c7:ca:5a:a2:ba:35:c9:79:ac:0b:71:3f:55:9c:
02:7a:4c:fb:95:51:c9:57:85:16:17:af:ca:5b:fb:0e:8b:1d:
5b:c9:a0:23:c8:f0:b8:27:36:1e:15:6e:76:36:59:b9:0e:c3:
7e:d4:46:76:53:bc:c3:b2:88:c8:17:7a:9d:03:07:36:ad:9e:
b1:2a:6e:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:31 2024 by rpki-client on console-fra.rpki-client.org