Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4a87288c-dc34-400d-ba64-dce6349ee941/acb677542f0dec1cbcc656f42cbf7923f673d0ca.roa
File: acb677542f0dec1cbcc656f42cbf7923f673d0ca.roa (raw, json)
Hash identifier: HKSIRYw+yyTV0GNRtwShYUh7gaM9GH/ryjmVhZm9ppM=
Subject key identifier: A8:EF:64:8B:37:5E:41:99:D5:F7:EF:EC:40:81:76:12:28:8E:F1:B0
Certificate issuer: /CN=d8f699f3525b39056b0d16e9f4fb58026a19a277
Certificate serial: 1418FE
Authority key identifier: 69:38:49:00:80:EB:4C:0E:1A:D8:53:F7:3F:ED:A5:8C:98:62:CF:46
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d8f699f3525b39056b0d16e9f4fb58026a19a277.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4a87288c-dc34-400d-ba64-dce6349ee941/acb677542f0dec1cbcc656f42cbf7923f673d0ca.roa
Signing time: Thu 03 Aug 2023 19:54:52 +0000
ROA not before: Wed 02 Aug 2023 19:54:52 +0000
ROA not after: Sun 03 Aug 2025 19:54:52 +0000
asID: 265828
IP address blocks: 45.71.196.0/22 maxlen: 23
2803:4c20::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1317118 (0x1418fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8f699f3525b39056b0d16e9f4fb58026a19a277
Validity
Not Before: Aug 2 19:54:52 2023 GMT
Not After : Aug 3 19:54:52 2025 GMT
Subject: CN=acb677542f0dec1cbcc656f42cbf7923f673d0ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:24:6a:c5:3e:8d:cd:b9:1d:6d:48:13:3e:7d:
c5:17:05:dc:bf:75:7d:60:74:d2:a2:63:65:1a:24:
44:55:01:26:59:2f:18:f4:cc:f7:48:ac:5f:fa:29:
e9:40:aa:ef:7a:a1:61:d1:7a:0d:e8:43:6b:30:6d:
55:af:88:6f:2d:dd:2a:f2:ad:57:05:23:8f:e0:1a:
32:d7:c8:f7:48:c8:5e:0e:7c:ae:58:8b:92:80:42:
5e:95:1f:be:34:e7:a9:ca:d3:a5:9f:4e:d2:e2:42:
31:90:9c:81:88:7e:d0:a3:01:eb:5d:b9:4e:44:79:
6c:0a:a3:c5:eb:ac:34:b7:2a:40:3c:b6:63:5b:e7:
fa:f7:10:ac:5f:a5:35:fa:20:0c:64:66:65:11:f5:
07:39:99:47:5b:55:4a:78:cf:be:e9:18:c3:83:6e:
4f:ba:26:b0:3b:04:04:2a:77:7e:44:34:06:f3:e4:
18:d1:51:0c:a3:e0:1b:e9:57:61:93:5e:a1:e5:20:
78:67:2e:62:4c:61:06:63:32:7a:50:bd:e9:78:14:
7e:cd:55:1f:57:dd:aa:88:86:e7:e6:d9:d9:08:e6:
e2:76:1a:1d:d1:d1:75:3e:0a:13:63:7f:a5:05:ea:
60:1d:d1:4b:4f:6d:cb:90:90:8b:fd:54:68:c3:e9:
09:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:EF:64:8B:37:5E:41:99:D5:F7:EF:EC:40:81:76:12:28:8E:F1:B0
X509v3 Authority Key Identifier:
keyid:69:38:49:00:80:EB:4C:0E:1A:D8:53:F7:3F:ED:A5:8C:98:62:CF:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d8f699f3525b39056b0d16e9f4fb58026a19a277.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4a87288c-dc34-400d-ba64-dce6349ee941/acb677542f0dec1cbcc656f42cbf7923f673d0ca.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/4a87288c-dc34-400d-ba64-dce6349ee941/d8f699f3525b39056b0d16e9f4fb58026a19a277.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.71.196.0/22
IPv6:
2803:4c20::/32
Signature Algorithm: sha256WithRSAEncryption
1f:11:af:ae:e9:9c:db:76:de:f2:91:c9:82:3f:8f:77:9d:9f:
da:19:5c:0f:15:ab:f2:79:7f:58:cb:6a:45:f7:67:84:03:58:
98:cd:4c:1b:4c:6a:e0:a8:b9:90:92:f4:52:13:d7:57:4c:91:
e8:7a:7b:84:fb:6f:75:b2:2d:69:7e:d8:bb:34:ff:51:37:af:
a3:52:27:43:eb:b9:b3:be:fe:f6:62:9a:91:40:69:96:6a:eb:
e8:af:60:e3:5b:c8:e0:0d:a9:9b:22:87:5f:ab:5d:76:61:a1:
ff:ce:f5:54:33:d9:77:f0:c1:15:5e:36:ae:97:61:d7:00:17:
53:a9:32:37:d1:3a:22:2b:0f:37:93:a5:ba:22:6d:8c:eb:c9:
3a:ff:85:fd:5b:e2:f2:ac:37:07:f1:14:11:4a:fc:84:f8:d9:
72:9a:8e:79:19:33:39:28:64:2b:ba:0b:b4:5d:97:89:ee:57:
a6:c5:c4:3d:41:d7:14:ad:f9:ef:7b:0d:8c:79:1a:4c:b5:56:
da:77:12:ec:3f:08:98:34:e2:67:dc:07:f3:d8:7e:74:ba:88:
62:26:ee:8a:71:9d:df:f2:61:1d:56:b2:93:12:fc:6b:5e:e2:
00:2a:c5:c9:d0:a4:ce:52:6d:ff:72:25:67:ec:74:6a:10:a4:
cb:be:82:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:41 2024 by rpki-client on console-fra.rpki-client.org