Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/57d23f6d-7119-4d18-913d-86a3dd72a114/585e7c17988694141df16beb623bf9fef4358dc0.roa
File: 585e7c17988694141df16beb623bf9fef4358dc0.roa (raw, json)
Hash identifier: zGi4t195PqbR52dt4WZn4hZ/CrJtQh2Uuh4AFTunJ/I=
Subject key identifier: 2C:77:1E:23:05:C4:02:7A:8D:DE:81:7E:80:8D:6F:1A:6B:72:3B:82
Certificate issuer: /CN=388ebecd4ed72810f208c7c2d9865371b01c71ff
Certificate serial: 1192B3
Authority key identifier: C3:CA:30:08:2D:82:CF:1D:1A:4B:B0:88:DB:D0:39:0E:E4:36:08:12
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/388ebecd4ed72810f208c7c2d9865371b01c71ff.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/57d23f6d-7119-4d18-913d-86a3dd72a114/585e7c17988694141df16beb623bf9fef4358dc0.roa
Signing time: Tue 25 Jan 2022 10:00:03 +0000
ROA not before: Fri 24 Dec 2021 03:00:00 +0000
ROA not after: Thu 24 Dec 2026 03:00:00 +0000
asID: 269898
IP address blocks: 45.191.196.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1151667 (0x1192b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=388ebecd4ed72810f208c7c2d9865371b01c71ff
Validity
Not Before: Dec 24 03:00:00 2021 GMT
Not After : Dec 24 03:00:00 2026 GMT
Subject: CN=585e7c17988694141df16beb623bf9fef4358dc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:02:b9:d5:6d:1b:77:43:20:64:f7:2d:1f:d1:
2a:32:71:66:07:20:2b:49:3a:70:f0:2c:6b:c7:3d:
f2:c9:88:3b:0d:39:57:d6:2c:40:08:9f:c5:ec:67:
e9:09:9d:94:b5:72:e2:77:70:68:45:eb:cc:f1:82:
ef:fa:e7:3a:e9:36:9c:c7:cb:eb:6b:89:03:1b:9c:
81:c2:f4:73:97:f2:c8:db:db:ef:1e:ef:ff:0f:42:
b8:f3:30:7e:87:25:0b:e8:b6:85:38:88:df:21:5e:
12:bd:94:f2:42:06:6b:2d:c3:09:d6:67:80:2f:43:
96:81:29:a1:61:87:ca:51:1b:71:74:78:82:ec:d9:
cc:ea:8d:43:9c:a9:31:62:3f:ff:61:41:7b:fd:01:
8b:b7:01:c8:59:22:f2:af:36:ca:d0:c4:4d:6d:40:
2f:c5:a1:fe:c5:34:70:06:c8:04:9f:ad:24:fb:c6:
0b:fb:a3:93:77:66:db:6a:34:4b:0a:2b:04:1a:58:
f6:54:01:af:69:e8:21:8a:ec:6d:84:a5:10:c1:d5:
c0:3c:86:4e:e9:d2:a2:ff:53:9c:01:aa:1c:7f:fc:
6e:db:a0:d8:e7:eb:e0:f8:2f:f6:2f:92:7d:3f:fd:
21:8c:6a:b4:85:df:9f:ac:ef:53:3a:20:5b:ec:17:
1e:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:77:1E:23:05:C4:02:7A:8D:DE:81:7E:80:8D:6F:1A:6B:72:3B:82
X509v3 Authority Key Identifier:
keyid:C3:CA:30:08:2D:82:CF:1D:1A:4B:B0:88:DB:D0:39:0E:E4:36:08:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/388ebecd4ed72810f208c7c2d9865371b01c71ff.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/57d23f6d-7119-4d18-913d-86a3dd72a114/585e7c17988694141df16beb623bf9fef4358dc0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/57d23f6d-7119-4d18-913d-86a3dd72a114/388ebecd4ed72810f208c7c2d9865371b01c71ff.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.191.196.0/22
Signature Algorithm: sha256WithRSAEncryption
65:ff:df:cf:28:01:8d:54:3f:a8:cc:70:ef:b1:95:29:4b:a2:
32:ef:80:84:66:ed:a7:fb:67:87:b1:08:3c:af:3a:c4:83:6e:
54:e8:31:b4:c9:5b:09:7b:0b:c9:ef:ae:ee:c9:55:44:3b:cc:
c3:ea:2d:90:09:a1:a8:2f:70:03:3d:b6:41:e0:fc:05:a8:2f:
ed:22:01:af:76:d3:6b:59:9c:e1:5e:67:47:14:0f:80:16:81:
e4:b7:e1:4e:35:a4:34:ee:55:d8:70:7b:21:2e:19:16:8a:d2:
db:f1:7d:00:36:34:19:30:59:55:d7:b7:4a:b5:d9:47:db:a0:
14:c0:7f:d9:9e:30:f0:ac:ce:e9:35:16:4c:ce:80:52:04:14:
ae:ed:dd:c4:15:48:8d:8a:c3:f2:43:91:9b:4e:8e:3c:7b:de:
17:8e:d3:d7:14:ee:03:15:09:8c:e5:c3:34:24:f3:af:bf:5a:
88:18:50:ab:e2:57:55:7c:ff:0d:a2:af:0f:29:b4:9c:e0:cc:
b1:cd:d6:a4:f7:24:5a:12:c8:6a:f7:3f:c3:4a:49:7c:52:e3:
67:06:e0:16:1f:cf:ae:67:5c:be:99:41:73:39:9b:a4:55:6b:
da:a8:28:9b:9a:3c:e6:3e:d3:b0:ff:48:eb:64:5c:af:84:1d:
8b:3c:7c:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:44 2024 by rpki-client on console-ams.rpki-client.org