Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5b1e152f-fc50-435b-beeb-8b3866e1b0fe/95d68da5feff75e9d90d6613b6ff5d5855689d0f.roa
File: 95d68da5feff75e9d90d6613b6ff5d5855689d0f.roa (raw, json)
Hash identifier: RdaXwqAhtmR1wnBtUdOmtMOfLblM2Lo418ua0Oi97/o=
Subject key identifier: 98:24:7C:07:2E:9B:52:EE:73:B0:77:FA:B9:1E:F9:5B:AC:C9:2A:CE
Certificate issuer: /CN=f595ed733bf54f430d174bb1f0bf895d6bc70b64
Certificate serial: 1F23E7
Authority key identifier: 34:D1:75:0D:84:1E:60:5A:A0:B8:09:8B:97:F1:F6:1C:36:10:0E:97
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f595ed733bf54f430d174bb1f0bf895d6bc70b64.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5b1e152f-fc50-435b-beeb-8b3866e1b0fe/95d68da5feff75e9d90d6613b6ff5d5855689d0f.roa
Signing time: Mon 04 Dec 2023 16:05:31 +0000
ROA not before: Mon 04 Dec 2023 16:05:31 +0000
ROA not after: Thu 04 Dec 2025 16:05:31 +0000
asID: 272979
IP address blocks: 45.189.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2040807 (0x1f23e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f595ed733bf54f430d174bb1f0bf895d6bc70b64
Validity
Not Before: Dec 4 16:05:31 2023 GMT
Not After : Dec 4 16:05:31 2025 GMT
Subject: CN=95d68da5feff75e9d90d6613b6ff5d5855689d0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:08:51:2b:0e:f3:42:1a:55:17:04:0d:c3:e0:
cd:86:c5:8e:46:0f:41:26:9a:3b:ea:30:13:c1:a4:
cb:d2:b3:b1:4b:fb:6e:b9:ac:5b:8f:c3:60:10:42:
8f:86:17:9b:58:3d:b8:39:d3:86:a5:3b:53:35:04:
5f:82:de:c8:9b:8c:50:11:32:3d:b3:ed:b2:4a:2c:
88:ab:79:ec:4c:c2:85:49:eb:9f:2f:94:f2:b2:ef:
8f:fc:3c:9a:b6:e2:3e:b4:74:35:18:0f:e4:b3:8b:
cf:cd:d5:0d:52:d4:a2:ce:56:f6:4d:30:7f:60:be:
d9:14:73:cb:80:d7:4d:dc:f5:ac:63:02:89:6e:ea:
2e:df:dd:f9:2a:65:6e:6f:46:9e:09:d3:1b:c6:fe:
ff:7a:fa:f3:96:66:78:75:9d:b6:5c:75:65:a5:a2:
08:0c:d8:ef:75:f0:f9:e7:89:72:39:98:54:86:20:
41:6e:cf:b9:db:c1:c8:7e:92:8b:3b:41:a4:66:86:
b4:ec:2b:5f:8f:ac:1c:b5:2d:34:3b:98:c1:d5:0b:
a7:fa:8a:ab:90:4c:2a:a2:c8:3b:0a:9b:64:92:f9:
9a:56:d8:44:2b:3d:aa:ea:c6:16:14:06:b8:77:57:
af:72:9b:8e:0c:a2:79:0c:15:46:18:98:1d:d5:4d:
3c:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:24:7C:07:2E:9B:52:EE:73:B0:77:FA:B9:1E:F9:5B:AC:C9:2A:CE
X509v3 Authority Key Identifier:
keyid:34:D1:75:0D:84:1E:60:5A:A0:B8:09:8B:97:F1:F6:1C:36:10:0E:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f595ed733bf54f430d174bb1f0bf895d6bc70b64.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5b1e152f-fc50-435b-beeb-8b3866e1b0fe/95d68da5feff75e9d90d6613b6ff5d5855689d0f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/5b1e152f-fc50-435b-beeb-8b3866e1b0fe/f595ed733bf54f430d174bb1f0bf895d6bc70b64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.189.191.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:de:d8:ae:83:58:e5:ab:35:18:06:69:12:5f:94:17:ac:8d:
e5:37:0d:12:af:44:d4:a3:07:29:18:a1:df:84:a4:7c:7d:29:
f9:79:11:d4:71:c4:ee:1b:c2:54:c9:24:09:23:75:2c:b9:35:
68:24:ac:c2:91:2f:cd:d1:38:6e:92:f9:a9:51:76:06:46:e0:
a6:df:06:86:d2:6b:a2:7b:53:d4:fe:dd:49:7d:94:3f:70:d7:
31:1c:ad:6d:6e:84:02:d3:a1:5d:f5:dd:67:b4:7b:c3:2e:8b:
dc:bd:d9:20:84:a8:ed:5d:a8:a8:c3:57:bc:d9:2d:bf:8f:db:
4c:12:cf:0c:12:80:bd:52:51:59:a9:d8:45:f5:7a:14:3e:d2:
40:10:64:c8:09:07:d2:3d:23:4f:f6:de:1b:82:04:5e:1b:0f:
4e:35:5c:53:42:72:13:94:04:ea:02:bf:63:00:89:e0:57:24:
e2:01:f9:d4:4c:0d:c9:02:8a:04:4b:74:dc:15:8a:7e:b7:36:
bb:23:35:d2:7e:79:92:0a:20:53:6a:41:41:f4:d3:19:7e:d5:
d6:6d:76:96:30:4b:dd:98:a5:14:58:82:9f:d8:39:98:c7:86:
1c:dd:01:0f:05:63:87:6a:ee:f9:b9:46:7e:93:fc:c1:fa:f2:
1c:7c:37:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:36 2024 by rpki-client on console-ams.rpki-client.org