Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4642638e-5ad1-4be3-aa7e-4237c60bf808/170dd66fa1b2c367dd2fcf7ce0ec321163736812.roa
File: 170dd66fa1b2c367dd2fcf7ce0ec321163736812.roa (raw, json)
Hash identifier: PEaYPNVou9U3o3Pyi5pP8LAFH1t/q1eP8WmFwqRRaUc=
Subject key identifier: ED:B4:6E:0E:A2:63:DA:A4:E1:02:E7:24:39:06:D5:6C:2E:E0:86:42
Certificate issuer: /CN=d67a2511cddb03773fd7ab77a77fce811a97e2f5
Certificate serial: 0CE577
Authority key identifier: 51:02:5E:78:BE:A6:CA:C5:FC:23:16:42:9F:68:67:60:C4:94:98:68
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d67a2511cddb03773fd7ab77a77fce811a97e2f5.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4642638e-5ad1-4be3-aa7e-4237c60bf808/170dd66fa1b2c367dd2fcf7ce0ec321163736812.roa
Signing time: Wed 24 Mar 2021 14:29:39 +0000
ROA not before: Wed 24 Mar 2021 14:29:38 +0000
ROA not after: Tue 24 Mar 2026 14:29:38 +0000
asID: 3356
IP address blocks: 45.163.31.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 845175 (0xce577)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d67a2511cddb03773fd7ab77a77fce811a97e2f5
Validity
Not Before: Mar 24 14:29:38 2021 GMT
Not After : Mar 24 14:29:38 2026 GMT
Subject: CN=170dd66fa1b2c367dd2fcf7ce0ec321163736812
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3a:9f:10:3f:de:be:a2:48:58:25:af:5d:a8:
d2:93:98:fd:69:85:e8:73:25:48:a7:29:71:a3:fb:
03:ce:63:e7:57:14:64:85:91:88:01:03:8d:c9:ca:
e5:7a:83:f5:d5:2e:ac:ef:ae:c9:50:73:c6:cf:77:
f8:3c:e6:c1:52:4d:ec:ed:ae:84:c2:18:07:f4:d2:
ce:77:3a:d3:ce:b7:53:ce:7f:4e:23:32:67:f3:63:
d4:f2:25:8b:66:4f:e0:d2:4d:a8:b0:a2:dd:3f:14:
f6:d7:64:95:ac:57:8d:c7:3b:7d:5b:8e:65:05:15:
dc:6e:0b:13:6a:9a:47:07:55:af:a4:f5:be:23:c5:
e3:de:56:9a:94:b4:8c:76:6d:f9:c2:81:e4:f1:89:
94:c8:ac:e5:17:ac:7d:d1:64:2f:d2:f2:06:88:d2:
29:69:46:ba:6c:23:78:c6:cf:a5:b1:59:d9:e4:76:
8b:f7:2a:94:8d:92:73:80:ca:93:a3:8d:e9:34:6a:
ee:91:dc:ca:89:06:56:2b:09:0d:c4:e5:59:2f:13:
30:b4:5a:56:8c:29:61:30:82:9f:27:cd:1e:3e:22:
bf:c7:98:f8:22:cd:65:a3:2c:8d:cc:82:d8:42:2d:
72:62:33:02:0c:21:89:e9:c2:3c:ad:12:3d:59:b0:
1e:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:B4:6E:0E:A2:63:DA:A4:E1:02:E7:24:39:06:D5:6C:2E:E0:86:42
X509v3 Authority Key Identifier:
keyid:51:02:5E:78:BE:A6:CA:C5:FC:23:16:42:9F:68:67:60:C4:94:98:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d67a2511cddb03773fd7ab77a77fce811a97e2f5.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4642638e-5ad1-4be3-aa7e-4237c60bf808/170dd66fa1b2c367dd2fcf7ce0ec321163736812.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/4642638e-5ad1-4be3-aa7e-4237c60bf808/d67a2511cddb03773fd7ab77a77fce811a97e2f5.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.163.31.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:41:a1:68:c7:f2:4d:a1:52:5d:2f:47:d5:72:8f:35:26:db:
12:d3:62:ff:07:28:8b:9b:16:be:34:28:43:23:b9:2f:b4:d1:
49:61:54:1c:ec:b8:dd:0c:fa:08:59:af:5e:5c:26:91:0b:6f:
6d:84:df:e3:a3:81:a9:96:03:e6:ec:fe:96:f9:b8:26:93:fa:
86:e5:7d:91:ef:b9:60:94:a1:b0:1d:ca:5c:a2:2c:52:12:d1:
20:3a:23:82:2c:8f:e9:1c:9f:27:ce:2b:db:0d:99:28:cf:39:
73:b6:7d:c1:8e:bc:1a:da:0c:2d:9b:cb:97:d5:3b:8c:5e:99:
32:cc:4b:f1:38:f3:18:76:ec:d5:a7:b8:b0:7b:4b:f1:91:6e:
6e:ed:f7:ed:6b:ec:b1:b1:21:30:e9:f5:44:55:79:7b:08:86:
c3:51:f0:13:11:21:d4:27:8a:69:b6:47:47:1c:ff:0b:a3:f5:
6d:a7:dc:17:d3:29:d5:50:e7:f6:13:9d:2f:87:73:62:b5:de:
60:e5:c0:32:1c:04:5e:88:00:0c:89:7d:5a:02:9e:2b:54:25:
44:23:d0:90:33:ad:f4:72:19:c6:a6:f4:cc:66:1e:11:fc:72:
7c:d9:c0:23:75:36:06:3a:2a:a3:33:db:52:fe:0b:5a:82:a2:
4b:03:6e:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:21 2024 by rpki-client on console-ams.rpki-client.org