Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4ab1fb33-2c26-4876-9549-4b201f8b6b22/a6e50cff97f5f9884bf0f0526c92b24f4d0c4cc5.roa
File: a6e50cff97f5f9884bf0f0526c92b24f4d0c4cc5.roa (raw, json)
Hash identifier: 9CojkgikMF6C8Qsn0YKZiIb0xbpIP4NTnKZhmNQ5Fno=
Subject key identifier: 3B:F6:AF:0A:BD:1C:A9:AA:32:EF:A1:0E:CD:86:CF:84:61:90:15:E5
Certificate issuer: /CN=2cb72688104ed29264f079ae92d8d441e6eb06a9
Certificate serial: 1A1713
Authority key identifier: 3A:A9:68:CD:02:9F:30:FD:1E:1B:0C:C6:8B:B0:D9:A5:48:8D:7C:1E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2cb72688104ed29264f079ae92d8d441e6eb06a9.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4ab1fb33-2c26-4876-9549-4b201f8b6b22/a6e50cff97f5f9884bf0f0526c92b24f4d0c4cc5.roa
Signing time: Fri 06 Oct 2023 19:57:05 +0000
ROA not before: Thu 05 Oct 2023 19:57:04 +0000
ROA not after: Mon 06 Oct 2025 19:57:04 +0000
asID: 269886
IP address blocks: 45.191.109.0/24 maxlen: 24
45.191.110.0/24 maxlen: 24
45.191.111.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1709843 (0x1a1713)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cb72688104ed29264f079ae92d8d441e6eb06a9
Validity
Not Before: Oct 5 19:57:04 2023 GMT
Not After : Oct 6 19:57:04 2025 GMT
Subject: CN=a6e50cff97f5f9884bf0f0526c92b24f4d0c4cc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:24:4b:83:10:25:b5:6e:cb:2f:42:90:e3:bf:
7a:45:42:40:75:e2:cf:36:43:8d:ba:38:4b:cc:45:
da:34:34:b0:2f:19:7c:15:35:32:4e:d2:d7:38:f5:
5c:d1:04:40:fd:41:4c:8d:64:da:9a:94:88:c5:60:
fd:ce:9e:0a:73:42:01:7b:fb:5e:01:8d:5d:37:f2:
b7:71:20:a5:7d:42:99:87:ca:07:19:c5:c0:b0:02:
89:49:87:e1:fa:b0:fa:54:a8:89:59:7a:f1:41:1d:
3e:73:13:28:c0:df:5a:3f:46:07:ec:7c:ef:ce:15:
be:a8:ce:3f:55:44:5c:93:f6:a2:3d:5a:bc:69:63:
a8:94:01:54:14:f0:4e:b3:fe:0d:4f:31:f2:6d:8e:
bb:e6:88:80:8f:e3:8a:1e:b9:dc:55:4c:a8:0c:b4:
0d:08:bb:48:6e:e6:b0:23:a6:a5:47:cd:89:d7:9a:
73:0f:a9:e7:b5:9c:69:43:48:e0:ac:7a:4e:4d:7e:
71:a6:d6:e8:2f:23:93:de:44:4d:aa:47:02:c7:21:
c9:1d:c4:c1:cf:ea:bb:f9:7b:fa:20:23:68:43:a6:
25:a8:e4:30:45:78:81:be:ca:b0:87:31:41:06:57:
2a:2a:d6:db:00:81:c3:ba:62:93:7a:c7:82:2c:df:
4e:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:F6:AF:0A:BD:1C:A9:AA:32:EF:A1:0E:CD:86:CF:84:61:90:15:E5
X509v3 Authority Key Identifier:
keyid:3A:A9:68:CD:02:9F:30:FD:1E:1B:0C:C6:8B:B0:D9:A5:48:8D:7C:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2cb72688104ed29264f079ae92d8d441e6eb06a9.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4ab1fb33-2c26-4876-9549-4b201f8b6b22/a6e50cff97f5f9884bf0f0526c92b24f4d0c4cc5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/4ab1fb33-2c26-4876-9549-4b201f8b6b22/2cb72688104ed29264f079ae92d8d441e6eb06a9.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.191.109.0-45.191.111.255
Signature Algorithm: sha256WithRSAEncryption
56:67:91:b1:ab:10:e3:d7:29:1c:f8:0d:ca:b6:d7:48:aa:ac:
90:da:d9:b4:9e:a2:6e:59:fd:7e:5e:07:55:01:09:51:37:9f:
bb:7e:a6:8c:d2:dc:9e:a6:ba:48:71:85:6f:82:c0:b7:e6:16:
7e:a1:d8:a0:79:59:f8:8f:ed:d4:38:46:61:64:3b:dc:0d:2b:
cd:f1:d8:51:7c:25:40:f4:3f:fd:51:da:ae:21:e9:a2:ac:ec:
b8:85:f9:4d:9a:e6:22:16:82:df:fa:60:0c:0b:cd:b8:24:5c:
31:87:b6:8c:4b:71:be:ce:67:b2:cc:b1:1c:06:92:ce:b3:be:
6d:28:c4:f2:64:b3:31:b1:57:c6:2b:02:e3:e0:ba:a7:3d:e7:
91:b0:fb:35:4f:c0:13:ef:23:8e:48:c3:e4:e0:e5:99:ee:84:
fa:39:6d:8b:aa:11:99:6d:da:45:7e:52:ae:c3:02:00:bc:ba:
17:85:02:b9:fc:ca:ef:94:d4:be:62:8b:8c:15:fd:74:b2:f6:
03:f3:64:7d:5b:cb:89:3f:f8:50:29:2a:22:6f:f5:99:4c:1e:
84:8a:c2:39:ec:eb:c0:ab:9e:cc:73:04:4b:89:ae:e9:fc:63:
3b:7b:46:1f:21:57:33:19:78:72:f8:fe:df:62:1a:1d:bd:6a:
0c:2f:08:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:41 2024 by rpki-client on console-ams.rpki-client.org