Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/466f77bb-8dbf-417c-b7ce-8ecc3457b915/938e779db9b0d51bcabe7331485326814d0f2415.roa
File: 938e779db9b0d51bcabe7331485326814d0f2415.roa (raw, json)
Hash identifier: xHAfmLTmE7w4g1NUya4HkjGQIlUyKKLlDwOY3g3Xco8=
Subject key identifier: 7C:F7:74:80:CB:8C:EC:D5:32:67:11:9F:6F:D0:26:0B:76:48:3B:BF
Certificate issuer: /CN=239ac677d20da31c1af262c7528bd5cc25d5e101
Certificate serial: 210890
Authority key identifier: BF:E5:26:A4:0D:A6:A1:88:79:13:66:60:4F:F1:C9:54:2A:19:B0:64
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/239ac677d20da31c1af262c7528bd5cc25d5e101.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/466f77bb-8dbf-417c-b7ce-8ecc3457b915/938e779db9b0d51bcabe7331485326814d0f2415.roa
Signing time: Fri 23 Jun 2023 14:35:24 +0000
ROA not before: Thu 22 Jun 2023 14:35:24 +0000
ROA not after: Mon 23 Jun 2025 14:35:24 +0000
asID: 265862
IP address blocks: 45.224.188.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2164880 (0x210890)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=239ac677d20da31c1af262c7528bd5cc25d5e101
Validity
Not Before: Jun 22 14:35:24 2023 GMT
Not After : Jun 23 14:35:24 2025 GMT
Subject: CN=938e779db9b0d51bcabe7331485326814d0f2415
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:4b:a6:c6:cf:35:a4:d4:cd:04:73:9d:e5:34:
34:07:4a:aa:c3:64:0b:45:bf:59:5b:a9:ef:df:f8:
67:2a:54:2c:f6:ad:30:3a:ef:99:0c:ab:64:9e:05:
a8:00:b7:aa:67:07:ba:33:c5:28:69:70:b7:d9:04:
bd:43:e8:b1:21:df:68:0b:ad:4e:24:3b:c7:f4:9e:
2d:cf:80:b3:f7:23:bf:be:f6:e0:a5:e5:ff:28:e3:
61:b6:8e:73:f8:14:91:99:49:09:93:99:96:6e:29:
e7:5e:87:69:47:8a:be:5c:d6:99:7c:bc:31:a3:67:
20:fa:ed:2e:db:44:b1:d9:ca:30:34:a5:a5:61:84:
50:47:11:2c:4c:e3:fd:62:b7:07:ec:28:55:b0:4f:
44:7a:47:3f:b2:58:d3:aa:47:01:39:59:b7:f7:e1:
d8:d6:85:82:eb:65:12:43:be:27:dc:f0:f3:7a:4c:
4d:f2:ea:6a:90:3e:98:f0:22:11:1b:02:d1:80:43:
4b:45:18:14:de:78:b9:df:38:8d:4d:f7:48:27:76:
ec:22:69:b7:e0:49:32:8b:e7:4d:33:79:86:65:a2:
e8:ab:a5:58:0d:c2:c5:47:c7:22:83:f2:5d:fa:dc:
11:75:9b:b3:c6:46:b3:b9:af:8c:4c:96:d4:8e:9b:
be:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:F7:74:80:CB:8C:EC:D5:32:67:11:9F:6F:D0:26:0B:76:48:3B:BF
X509v3 Authority Key Identifier:
keyid:BF:E5:26:A4:0D:A6:A1:88:79:13:66:60:4F:F1:C9:54:2A:19:B0:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/239ac677d20da31c1af262c7528bd5cc25d5e101.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/466f77bb-8dbf-417c-b7ce-8ecc3457b915/938e779db9b0d51bcabe7331485326814d0f2415.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/466f77bb-8dbf-417c-b7ce-8ecc3457b915/239ac677d20da31c1af262c7528bd5cc25d5e101.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.224.188.0/22
Signature Algorithm: sha256WithRSAEncryption
31:e2:e0:db:d1:52:59:0b:1d:19:8f:cd:cd:81:3b:d2:51:e2:
fc:bc:82:bc:89:28:79:72:71:da:3a:32:29:1a:08:4f:c6:75:
2c:a0:c6:21:a8:f9:18:4f:4f:8b:01:2a:8b:19:05:b0:71:de:
d5:3b:00:ec:e7:11:1a:90:a5:69:8f:39:c2:9d:df:a4:1d:a3:
69:e2:aa:f0:a2:20:66:9a:6e:49:c9:cf:05:b4:26:af:7e:4a:
ee:d8:ea:c3:8c:73:ab:18:ac:3f:64:af:d4:f4:89:ab:d8:5d:
b4:6c:1b:8c:9b:cb:54:5d:c2:f9:8a:7c:b3:23:8b:8b:33:25:
da:0d:13:63:b2:9f:2f:53:d0:5a:8c:88:b3:ce:8f:f3:d0:3e:
6d:51:a5:74:fb:39:c3:67:5e:da:12:c1:56:08:63:b9:fa:76:
67:ed:ce:cc:9b:6e:fe:b0:2d:eb:28:cf:94:91:51:c3:b1:fe:
d2:fd:a6:2e:1d:41:f8:ac:24:24:52:a3:f0:47:6b:bd:99:e0:
b9:6a:7a:ea:0e:b8:bd:e9:7d:cf:63:f2:d1:ae:05:18:2b:d1:
f3:b5:dc:b6:69:61:6a:6d:95:3a:32:71:92:ff:88:28:ba:20:
1e:a7:03:0b:e6:9c:70:fc:88:b8:9e:56:0a:c4:f9:c2:f1:2c:
63:f7:e8:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:20 2024 by rpki-client on console-ams.rpki-client.org