Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/43153f92-a8f1-4794-bb75-d111cdf58cff/496898008af9cee96e72821b0db5d179339146b2.roa
File: 496898008af9cee96e72821b0db5d179339146b2.roa (raw, json)
Hash identifier: 5Hy4efGXDzstwHZtJclJ+9HqeW6N8rQWWdjvyWHb8/0=
Subject key identifier: 91:21:5D:F0:A4:B4:01:F7:A7:52:85:C3:F0:15:76:56:02:B4:34:11
Certificate issuer: /CN=a072744812c9d37a960b2eaee018f541354a6d6b
Certificate serial: 0C52E0
Authority key identifier: 13:12:6F:A0:D7:42:92:D4:67:DC:18:AA:43:D7:8A:ED:22:D6:E6:E4
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a072744812c9d37a960b2eaee018f541354a6d6b.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/43153f92-a8f1-4794-bb75-d111cdf58cff/496898008af9cee96e72821b0db5d179339146b2.roa
Signing time: Wed 24 Mar 2021 14:38:13 +0000
ROA not before: Wed 24 Mar 2021 14:38:13 +0000
ROA not after: Tue 24 Mar 2026 14:38:13 +0000
asID: 52471
IP address blocks: 45.169.192.0/22 maxlen: 24
2803:33a0::/32 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 807648 (0xc52e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a072744812c9d37a960b2eaee018f541354a6d6b
Validity
Not Before: Mar 24 14:38:13 2021 GMT
Not After : Mar 24 14:38:13 2026 GMT
Subject: CN=496898008af9cee96e72821b0db5d179339146b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:b4:7a:8e:8e:e8:00:ad:55:b2:d6:1a:ae:32:
9c:f2:19:42:a7:2f:49:29:b0:66:12:35:e0:4e:f3:
57:21:f2:87:09:57:88:ac:67:77:4b:8f:da:00:0b:
0b:9a:e7:8e:86:8b:55:8e:f1:93:10:8d:a9:94:cb:
fc:97:6f:b1:58:63:79:ec:76:c1:55:56:f0:68:37:
95:e9:ff:dd:94:b0:a2:5b:43:b1:22:3b:a8:72:96:
de:26:de:c1:a0:83:29:6f:72:70:df:1e:78:a4:fd:
02:47:3d:2f:3c:ba:89:8f:83:97:2c:07:b9:5b:ae:
99:ac:f7:de:7b:f8:1c:95:39:53:3f:4b:6b:52:b0:
76:ff:2c:21:3f:0c:e9:72:5b:54:40:7b:87:e9:a4:
fd:6f:46:11:32:26:10:66:3d:dc:e0:d8:27:e1:8d:
55:9c:bb:b0:93:dd:cc:25:7e:7c:12:29:3c:88:40:
63:45:99:f3:f7:96:14:07:3d:20:cf:3f:30:4c:85:
3a:d4:c1:80:c5:89:f6:89:14:da:34:cc:f7:b6:f9:
82:45:ec:e6:97:c0:ab:87:65:8d:41:d2:a6:ac:1e:
e1:94:2c:b8:c0:3d:0f:97:32:13:4e:df:43:51:c6:
93:41:26:ad:8b:fb:eb:1d:ce:a7:e9:c3:56:b9:86:
d6:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:21:5D:F0:A4:B4:01:F7:A7:52:85:C3:F0:15:76:56:02:B4:34:11
X509v3 Authority Key Identifier:
keyid:13:12:6F:A0:D7:42:92:D4:67:DC:18:AA:43:D7:8A:ED:22:D6:E6:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a072744812c9d37a960b2eaee018f541354a6d6b.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/43153f92-a8f1-4794-bb75-d111cdf58cff/496898008af9cee96e72821b0db5d179339146b2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/43153f92-a8f1-4794-bb75-d111cdf58cff/a072744812c9d37a960b2eaee018f541354a6d6b.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.169.192.0/22
IPv6:
2803:33a0::/32
Signature Algorithm: sha256WithRSAEncryption
5f:74:9c:ad:7c:0d:95:1a:a2:5d:59:98:a8:59:4b:90:90:3a:
e7:3f:d1:93:33:a8:f8:02:c8:93:8c:79:0b:08:6e:47:a3:4e:
61:5d:cb:44:f6:74:47:d4:a9:94:ff:c7:12:16:48:1a:f0:93:
52:47:87:bb:d0:fa:97:15:8b:52:f0:70:e9:a0:18:fb:e5:26:
e9:04:eb:c0:7b:94:76:0d:70:33:41:e5:31:a5:77:4e:49:8c:
82:82:ae:86:99:da:6d:9b:ed:4c:15:52:7b:94:fc:c5:83:c3:
80:28:05:3f:2c:25:9e:c4:33:61:98:9e:a1:8f:88:d1:6f:b4:
7c:6d:b5:2b:0f:84:a7:21:9c:3b:11:b8:e0:f0:48:89:c9:ab:
72:c6:e7:1b:b0:19:15:b0:16:7e:71:cb:4a:32:a6:18:23:0c:
23:6c:26:ae:2a:d8:88:ee:6b:88:6e:f0:dc:8c:12:9a:40:7d:
e6:42:ba:97:88:af:4d:8a:a0:13:4d:c9:ea:f8:d5:d9:61:c8:
89:ea:31:f1:c2:cf:20:ef:6d:4c:ea:44:e9:88:c5:a4:52:ae:
84:74:5b:15:69:b9:3b:c5:d7:1d:55:8e:b3:43:ad:b7:87:9d:
eb:23:5d:4c:c1:af:80:44:1f:5e:49:0a:d4:c1:b5:4c:9e:21:
55:24:a5:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:31 2024 by rpki-client on console-fra.rpki-client.org