Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/425a0a2e-106c-47b4-8f12-3be91ade2099/04208bf2af008fcf9fba0e743012ea3f3fc6da4d.roa
File: 04208bf2af008fcf9fba0e743012ea3f3fc6da4d.roa (raw, json)
Hash identifier: DyHaU78cVz4jIen5For5WTsLOKUT1sXIvwsOHTBazTM=
Subject key identifier: 95:82:1E:FF:3C:CF:60:64:F7:43:0B:23:28:10:6C:6D:B0:D9:FF:72
Certificate issuer: /CN=b44cb5800e96935d03e5d14faab2003de5a3deb7
Certificate serial: 21FB00
Authority key identifier: A2:C1:FC:16:13:33:E5:CE:7D:49:A4:36:72:11:73:EA:28:44:8D:02
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b44cb5800e96935d03e5d14faab2003de5a3deb7.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/425a0a2e-106c-47b4-8f12-3be91ade2099/04208bf2af008fcf9fba0e743012ea3f3fc6da4d.roa
Signing time: Fri 25 Aug 2023 19:30:48 +0000
ROA not before: Thu 24 Aug 2023 19:30:48 +0000
ROA not after: Mon 25 Aug 2025 19:30:48 +0000
asID: 267766
IP address blocks: 45.170.184.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2226944 (0x21fb00)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b44cb5800e96935d03e5d14faab2003de5a3deb7
Validity
Not Before: Aug 24 19:30:48 2023 GMT
Not After : Aug 25 19:30:48 2025 GMT
Subject: CN=04208bf2af008fcf9fba0e743012ea3f3fc6da4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:cc:fa:88:bb:2c:fb:0e:bf:db:63:9d:3d:a4:
15:51:bf:5f:79:27:45:42:10:cf:fc:c7:e6:12:cb:
30:42:52:6b:97:d7:ce:b9:92:86:3c:8d:f8:c3:6f:
8a:5f:7a:de:56:bd:2b:7b:cf:2e:72:bb:8d:64:2c:
64:18:5b:d2:38:8c:9d:a8:73:b9:2e:3e:d7:a2:27:
e5:9d:14:40:7f:da:84:46:6d:22:c9:28:50:6e:1d:
be:7e:59:0d:61:45:3c:65:f8:32:2e:b2:48:d8:0f:
d1:67:5b:18:3e:16:12:b1:2f:8e:dc:49:82:95:d7:
7c:a2:92:0c:45:36:dc:17:e5:1b:69:c3:4c:62:23:
43:17:b4:ab:88:f2:a7:1d:45:ec:5f:ed:e2:aa:36:
0e:83:a4:4a:06:74:83:af:26:71:06:85:41:bb:73:
ba:87:04:43:b0:e8:5c:68:83:08:31:92:f7:18:8b:
62:0b:3d:e7:18:f2:62:8b:f6:7f:dc:56:90:be:b9:
b8:38:3a:25:49:e0:7c:80:ad:ca:37:54:cb:5b:64:
b5:5a:c4:2a:e8:dc:de:2f:a6:20:86:4b:97:e9:e4:
45:fa:82:87:14:94:52:7b:ee:94:f1:09:ea:2e:fe:
a8:3e:94:8b:01:fe:46:1a:f5:74:77:76:2c:2f:de:
b0:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:82:1E:FF:3C:CF:60:64:F7:43:0B:23:28:10:6C:6D:B0:D9:FF:72
X509v3 Authority Key Identifier:
keyid:A2:C1:FC:16:13:33:E5:CE:7D:49:A4:36:72:11:73:EA:28:44:8D:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b44cb5800e96935d03e5d14faab2003de5a3deb7.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/425a0a2e-106c-47b4-8f12-3be91ade2099/04208bf2af008fcf9fba0e743012ea3f3fc6da4d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/425a0a2e-106c-47b4-8f12-3be91ade2099/b44cb5800e96935d03e5d14faab2003de5a3deb7.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.170.184.0/22
Signature Algorithm: sha256WithRSAEncryption
68:19:a4:44:ad:3d:69:fd:43:f4:7e:28:bc:c4:39:e6:0f:6d:
bb:02:59:bd:a2:9c:ea:c3:88:86:29:6c:3d:81:d9:af:9b:bb:
c4:0d:74:40:5d:52:33:50:61:8c:96:d7:2c:1b:5c:4c:97:c2:
bc:91:6e:cb:d1:ae:1e:31:f4:49:ea:d3:13:3a:ec:ae:3a:e8:
e2:1a:a6:ce:d2:33:a9:3f:27:b7:a1:56:ed:0a:a3:97:c0:9f:
51:87:65:a1:a3:ff:42:e0:2f:eb:a1:0c:a5:cb:5e:1a:a7:9a:
f1:1f:bf:77:a2:b2:17:14:4f:e2:d6:75:30:87:80:0f:5e:7e:
8c:b7:67:71:c2:e3:82:47:fb:54:df:d5:17:19:16:a6:14:b0:
34:b0:8a:d1:d0:67:62:6f:a4:d7:b8:fd:1a:0f:db:80:a7:c4:
20:47:ca:d2:9f:98:ff:dc:2b:8d:ef:9d:15:7f:09:12:8f:f9:
10:e9:9f:e8:b1:12:ec:67:86:2b:5b:85:7c:e3:83:87:34:db:
b1:eb:68:04:61:9d:60:a6:f7:81:76:6c:37:ee:77:27:a4:1c:
93:36:02:50:1f:3c:40:6a:bd:1c:cc:01:34:c3:e8:a5:dc:da:
8e:b9:b6:39:ad:ae:fa:45:17:c1:a4:91:2a:0d:e5:56:c0:0e:
08:9a:92:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:20 2024 by rpki-client on console-ams.rpki-client.org