Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4659922c-b6b2-4c64-bea7-f5f2da6f635f/490aaf8e099854dab13edbe657a8732386810c49.roa
File: 490aaf8e099854dab13edbe657a8732386810c49.roa (raw, json)
Hash identifier: Zhr2sC/+Klbh+0rsAHKt9R9pHhLwgtB9xogVKZ7ZdKo=
Subject key identifier: BE:1A:AE:91:DA:CF:4C:A6:51:2A:3C:48:7E:4E:9D:62:82:7E:07:5D
Certificate issuer: /CN=f238f48f9589e438344d7270f591ba9998af2415
Certificate serial: 020B73
Authority key identifier: E2:3C:66:9C:1D:91:48:43:64:C4:41:B3:E9:9F:36:A3:9A:35:6F:5D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f238f48f9589e438344d7270f591ba9998af2415.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4659922c-b6b2-4c64-bea7-f5f2da6f635f/490aaf8e099854dab13edbe657a8732386810c49.roa
Signing time: Tue 05 Dec 2023 20:15:50 +0000
ROA not before: Tue 05 Dec 2023 20:15:50 +0000
ROA not after: Fri 05 Dec 2025 20:15:50 +0000
asID: 267808
IP address blocks: 45.172.24.0/22 maxlen: 22
45.172.24.0/24 maxlen: 24
45.172.25.0/24 maxlen: 24
45.172.26.0/24 maxlen: 24
45.172.27.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 134003 (0x20b73)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f238f48f9589e438344d7270f591ba9998af2415
Validity
Not Before: Dec 5 20:15:50 2023 GMT
Not After : Dec 5 20:15:50 2025 GMT
Subject: CN=490aaf8e099854dab13edbe657a8732386810c49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:0a:9d:b1:2c:ff:7f:47:42:3f:58:49:a9:28:
4d:51:82:04:e5:4b:5e:7a:a4:63:3b:3f:84:59:43:
e1:c3:be:54:56:f3:a3:a3:36:27:c7:e9:9f:41:2a:
a2:4b:8d:3f:4f:0b:94:2f:73:6e:76:c4:68:33:c3:
24:1c:42:b8:4a:b8:d7:71:29:1d:d9:3e:8b:e7:df:
9a:af:e6:ed:00:6e:65:b4:a8:78:c4:20:30:76:3d:
e5:7c:c5:08:07:d6:6c:fb:49:41:8e:53:20:19:4e:
cc:2d:8d:31:fa:61:94:f3:cc:eb:61:88:4c:06:e8:
e3:fa:86:f4:4b:34:60:fd:b1:ea:d4:72:52:39:ed:
03:cb:82:5c:cb:52:3c:4b:35:05:86:c5:cc:78:bf:
86:c1:72:fa:93:25:77:9a:f9:05:56:fa:0b:20:e7:
9d:72:d1:0b:77:db:09:19:ff:70:9d:fb:04:c7:5c:
94:4f:f2:a3:13:ef:ba:30:8c:bb:a7:71:16:92:a5:
2f:f4:56:4b:15:b2:28:7c:75:d3:a9:41:fd:ba:1c:
a6:a5:0c:50:65:31:66:91:37:d9:a3:58:55:63:e0:
26:d8:04:31:55:e1:67:94:1b:62:13:e8:a4:8b:e1:
a9:59:31:ba:06:0d:e6:7d:82:ad:72:75:10:94:5d:
6d:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:1A:AE:91:DA:CF:4C:A6:51:2A:3C:48:7E:4E:9D:62:82:7E:07:5D
X509v3 Authority Key Identifier:
keyid:E2:3C:66:9C:1D:91:48:43:64:C4:41:B3:E9:9F:36:A3:9A:35:6F:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f238f48f9589e438344d7270f591ba9998af2415.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4659922c-b6b2-4c64-bea7-f5f2da6f635f/490aaf8e099854dab13edbe657a8732386810c49.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/4659922c-b6b2-4c64-bea7-f5f2da6f635f/f238f48f9589e438344d7270f591ba9998af2415.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.172.24.0/22
Signature Algorithm: sha256WithRSAEncryption
30:3e:1f:31:fd:ad:c6:13:8d:42:7f:04:58:82:f3:2a:a6:a3:
f1:76:2e:ad:9e:d4:23:94:5c:0b:ef:cd:81:2f:8f:4e:1b:93:
db:38:70:50:fe:a4:d4:a0:0f:8b:7a:e2:3d:2b:54:14:6b:ba:
4a:e8:e9:bb:0d:47:b1:5f:c8:85:1b:9c:84:b0:c6:12:c4:c2:
bb:ff:f9:86:6d:7f:d4:8e:d5:71:1f:53:2b:8c:c5:28:df:de:
3b:83:a5:93:32:07:ae:35:49:8a:6c:dc:18:9d:98:5b:e2:c4:
c1:80:23:29:fd:1d:07:4c:42:5e:75:3b:4a:fd:e6:d6:da:02:
5a:25:f1:b7:21:e7:d4:a4:8e:47:38:b2:aa:a9:00:e4:58:67:
17:ab:f1:9f:5e:02:1b:9e:c3:d0:ea:69:f8:be:99:a0:69:3d:
6f:93:76:aa:89:19:2b:86:00:65:2a:bc:5e:a5:0f:a1:a8:8f:
19:5a:e0:51:2e:bb:8b:42:1b:11:e9:db:04:13:4c:8c:b2:86:
8b:0b:70:91:e1:2f:5a:7d:85:5a:4d:7f:8b:6d:ed:bd:00:63:
80:c1:bf:57:20:9c:79:4c:44:cf:53:b4:e9:38:f9:15:90:8e:
db:56:9b:65:af:4c:d3:0a:ff:bd:12:6b:ee:30:08:74:e4:13:
62:7f:61:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:20 2024 by rpki-client on console-ams.rpki-client.org