Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/54d86626-0a96-4858-9139-c387fc99fc19/e2cbd843eff06eab4c3ae60e8caaf035865c4900.roa
File: e2cbd843eff06eab4c3ae60e8caaf035865c4900.roa (raw, json)
Hash identifier: p+OY5ckY3loNzf2RXU2he4C4blEmeQQFHvOgLWHb9/o=
Subject key identifier: 4B:2C:84:2A:8A:3B:34:EF:B5:4A:73:66:8E:E3:FF:C8:3D:07:63:0C
Certificate issuer: /CN=dce19eee3e5c1bb13241d78afef96a9a5f803f4b
Certificate serial: 086C3E
Authority key identifier: 28:3D:A4:6D:B8:4F:E7:98:B7:F4:BE:C0:29:18:DA:29:27:06:9B:BD
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dce19eee3e5c1bb13241d78afef96a9a5f803f4b.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/54d86626-0a96-4858-9139-c387fc99fc19/e2cbd843eff06eab4c3ae60e8caaf035865c4900.roa
Signing time: Tue 12 Mar 2024 15:24:38 +0000
ROA not before: Tue 12 Mar 2024 15:24:37 +0000
ROA not after: Thu 12 Mar 2026 15:24:37 +0000
asID: 271860
IP address blocks: 45.71.32.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 551998 (0x86c3e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dce19eee3e5c1bb13241d78afef96a9a5f803f4b
Validity
Not Before: Mar 12 15:24:37 2024 GMT
Not After : Mar 12 15:24:37 2026 GMT
Subject: CN=e2cbd843eff06eab4c3ae60e8caaf035865c4900
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:96:b3:b7:1e:c2:3f:7c:1f:e8:26:c4:74:4f:
26:91:39:b7:ba:00:26:26:21:a3:94:ee:b6:16:4d:
e5:c3:2b:fc:fb:89:29:42:4a:54:cd:d9:2d:a9:8b:
32:ea:5b:bb:cb:2b:ec:4b:d8:51:0f:b7:a4:d7:3b:
cd:6b:91:e6:69:1c:46:02:6a:4d:b0:aa:28:dc:0a:
d6:d8:13:f8:a3:b2:5f:37:68:47:bf:60:f4:e3:56:
57:ab:58:43:1d:0d:60:f0:28:e1:73:ca:29:74:12:
61:6d:10:88:6b:3d:d6:85:a9:3c:7f:0c:b8:4f:73:
a5:e7:ee:9e:c1:50:4b:24:a7:d7:7c:37:ed:01:87:
62:67:d7:db:77:7c:01:31:5f:99:58:f5:fd:75:b9:
6f:30:76:3b:17:ff:71:92:ea:05:13:b4:31:d1:e8:
48:ba:1e:9e:93:08:af:60:f8:ed:b1:3a:4d:35:d4:
b8:65:2f:fe:4e:94:a5:16:b7:7a:41:d6:6d:37:c0:
92:42:4d:fc:f5:1f:cf:73:72:4b:7e:0f:f5:c8:c7:
03:68:79:34:fc:3f:97:ad:b7:98:25:a8:e4:91:d5:
a7:de:18:2a:cd:84:a4:8c:b7:d0:47:d0:b4:d4:60:
69:82:32:7b:ce:90:22:0f:43:54:d8:a6:f1:81:20:
7e:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:2C:84:2A:8A:3B:34:EF:B5:4A:73:66:8E:E3:FF:C8:3D:07:63:0C
X509v3 Authority Key Identifier:
keyid:28:3D:A4:6D:B8:4F:E7:98:B7:F4:BE:C0:29:18:DA:29:27:06:9B:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dce19eee3e5c1bb13241d78afef96a9a5f803f4b.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/54d86626-0a96-4858-9139-c387fc99fc19/e2cbd843eff06eab4c3ae60e8caaf035865c4900.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/54d86626-0a96-4858-9139-c387fc99fc19/dce19eee3e5c1bb13241d78afef96a9a5f803f4b.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.71.32.0/22
Signature Algorithm: sha256WithRSAEncryption
1b:14:fb:2b:1c:1e:b0:7c:67:59:a3:b9:2e:df:2f:c4:b4:b2:
be:e5:da:a4:98:6f:74:8c:69:44:28:8b:c9:02:2d:eb:ba:12:
81:1f:a3:9d:d1:70:47:ca:cb:76:ff:70:d0:46:b8:85:5f:99:
90:0c:69:82:8f:2c:85:eb:20:00:d8:17:86:c4:c3:d6:1d:12:
b6:49:25:14:e6:72:da:d0:fb:9b:d5:52:60:4c:e6:c5:82:51:
1c:c9:e5:39:e6:d6:e3:da:60:30:c6:c4:9e:3a:11:77:4a:72:
9a:60:b6:a8:57:bf:5e:df:99:dc:71:86:5d:97:58:a9:e7:07:
06:76:57:32:87:fc:ab:7f:01:fc:a0:c8:41:d3:7d:e6:7d:41:
70:eb:f1:5a:95:fd:09:22:1f:58:c7:29:e2:2e:45:dd:5a:6f:
de:9c:9c:70:e5:78:db:18:9e:8b:91:02:2e:82:81:22:1b:da:
26:2d:05:89:e5:aa:8c:db:1c:ea:76:67:b0:da:21:16:da:2c:
26:56:dc:bb:3c:e9:05:65:f3:ea:a1:e9:c6:c2:69:b5:19:c2:
1e:5c:63:4b:72:59:a8:d5:4f:68:6c:96:24:ec:e8:61:15:d5:
a3:fd:1d:65:54:aa:78:6e:fc:4b:c2:23:0a:c3:2d:c9:bd:10:
e4:5e:f0:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:35 2024 by rpki-client on console-ams.rpki-client.org