Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/583a744e-f7d2-4e1c-a516-e399c27ff669/69eaf15cbc3135808f2915107881fad5f66f1280.roa
File: 69eaf15cbc3135808f2915107881fad5f66f1280.roa (raw, json)
Hash identifier: +ru2/dtKSbzUb6LuRiE7DUHIa6n/SgyMWhS7UTGGN68=
Subject key identifier: EA:BA:DA:96:54:60:F5:81:25:4C:D5:A5:2D:A5:C6:D6:D7:EB:80:BC
Certificate issuer: /CN=19bdf7eba9512ec4f3179e720563bd1d6965a593
Certificate serial: 285E01
Authority key identifier: F4:14:BC:56:FB:CD:92:A2:6B:AF:A8:87:E2:84:91:D0:6B:AB:6D:70
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/19bdf7eba9512ec4f3179e720563bd1d6965a593.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/583a744e-f7d2-4e1c-a516-e399c27ff669/69eaf15cbc3135808f2915107881fad5f66f1280.roa
Signing time: Wed 28 Feb 2024 20:44:57 +0000
ROA not before: Wed 28 Feb 2024 20:44:57 +0000
ROA not after: Sat 28 Feb 2026 20:44:57 +0000
asID: 271933
IP address blocks: 45.70.14.0/24 maxlen: 24
45.70.12.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2645505 (0x285e01)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19bdf7eba9512ec4f3179e720563bd1d6965a593
Validity
Not Before: Feb 28 20:44:57 2024 GMT
Not After : Feb 28 20:44:57 2026 GMT
Subject: CN=69eaf15cbc3135808f2915107881fad5f66f1280
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:1f:ef:4a:7f:c5:ad:a2:67:8a:eb:22:30:76:
12:0f:e0:5c:72:dd:cb:fc:da:bd:54:64:fb:15:4b:
91:4f:ae:aa:25:0a:61:ee:bd:e6:d3:30:c2:44:bb:
40:c2:c8:26:78:be:85:38:19:78:58:01:25:e6:6e:
d9:f7:01:46:d4:8c:2d:c5:bf:ea:bf:62:65:7c:8d:
14:13:57:c3:45:b3:00:c1:2e:2c:36:01:8f:0f:5d:
38:ff:38:aa:be:35:a1:00:fd:bb:71:32:17:7d:a8:
a0:7f:8b:2b:ad:3e:8d:51:26:3b:19:7f:95:d5:84:
8d:64:7c:7a:0b:bf:c5:d5:73:38:30:99:c6:fc:82:
e2:bd:03:18:17:b2:c3:0e:36:a6:a2:68:bd:57:25:
12:9e:40:81:d7:b6:6b:a6:03:2e:04:0c:d5:13:6c:
16:b5:7a:4d:2c:e3:2e:94:dc:e0:67:69:0b:b2:28:
da:0f:43:a3:6f:eb:c7:67:ce:fc:6b:24:6f:a3:87:
36:9e:54:84:5e:4e:64:2c:61:5c:d5:0b:21:45:a9:
81:3f:b0:11:56:32:b1:6d:90:2f:b1:df:bf:d3:c9:
50:e8:f6:ad:41:94:92:ff:93:0d:1c:a2:9c:03:97:
1d:01:16:1b:1e:15:e4:d8:a3:32:1f:a9:82:25:f2:
15:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:BA:DA:96:54:60:F5:81:25:4C:D5:A5:2D:A5:C6:D6:D7:EB:80:BC
X509v3 Authority Key Identifier:
keyid:F4:14:BC:56:FB:CD:92:A2:6B:AF:A8:87:E2:84:91:D0:6B:AB:6D:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/19bdf7eba9512ec4f3179e720563bd1d6965a593.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/583a744e-f7d2-4e1c-a516-e399c27ff669/69eaf15cbc3135808f2915107881fad5f66f1280.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/583a744e-f7d2-4e1c-a516-e399c27ff669/19bdf7eba9512ec4f3179e720563bd1d6965a593.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.70.12.0/22
Signature Algorithm: sha256WithRSAEncryption
22:b7:bb:72:3e:35:5f:4b:0b:db:39:23:4d:14:ec:e6:25:d8:
2e:78:d4:9a:76:cd:61:ee:96:60:a5:e2:ec:d4:b9:59:95:80:
78:c3:b6:1d:0e:81:83:62:63:1a:51:57:c4:39:24:0d:cc:af:
91:d2:75:fb:55:c1:d3:fa:61:f3:5d:22:fb:16:43:1c:63:c9:
7d:18:fd:03:8c:6f:5d:2d:c7:9f:1b:8c:5f:ee:d7:59:66:ff:
b2:a0:e6:e3:e7:3a:48:8b:d4:35:82:c5:c4:26:80:88:b8:5d:
25:79:21:2e:e2:34:d8:57:12:22:8f:27:34:e2:61:dd:41:b2:
78:92:1c:5e:43:94:d1:eb:e6:45:4b:19:27:17:6a:fe:ad:0f:
d1:cd:20:f3:0f:f1:16:1a:f7:08:a2:43:b5:79:cb:a0:15:7e:
b3:b5:ca:24:43:c8:4d:30:ef:9a:2b:83:44:bd:14:ec:8f:e7:
c1:ba:e3:db:7e:39:46:c6:0c:db:a3:56:ed:3b:9c:60:6f:51:
63:c1:be:52:42:30:20:db:55:9f:21:9d:4c:9d:6f:a8:69:bb:
8a:0b:68:51:10:c3:4d:e0:81:e5:8d:d7:f0:d3:4e:08:64:7c:
4c:17:5a:ac:79:1f:ad:61:3d:32:ad:bc:d6:fe:ab:05:28:88:
f6:ca:41:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:20 2024 by rpki-client on console-fra.rpki-client.org