Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5b1e152f-fc50-435b-beeb-8b3866e1b0fe/d8d2259fea6865c5f9f3b7b2460391068d8a2098.roa
File: d8d2259fea6865c5f9f3b7b2460391068d8a2098.roa (raw, json)
Hash identifier: KZrPEyhC6drCqQIB+7evRXn8IYTV4TXab0tnfoo77P4=
Subject key identifier: BB:B1:20:50:BD:FA:BB:87:4C:75:12:29:AB:73:DD:DF:7F:DE:62:3D
Certificate issuer: /CN=f595ed733bf54f430d174bb1f0bf895d6bc70b64
Certificate serial: 15621C
Authority key identifier: 34:D1:75:0D:84:1E:60:5A:A0:B8:09:8B:97:F1:F6:1C:36:10:0E:97
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f595ed733bf54f430d174bb1f0bf895d6bc70b64.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5b1e152f-fc50-435b-beeb-8b3866e1b0fe/d8d2259fea6865c5f9f3b7b2460391068d8a2098.roa
Signing time: Mon 14 Nov 2022 23:17:29 +0000
ROA not before: Sun 13 Nov 2022 23:16:54 +0000
ROA not after: Thu 14 Nov 2024 23:16:54 +0000
asID: 271842
IP address blocks: 45.189.188.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1401372 (0x15621c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f595ed733bf54f430d174bb1f0bf895d6bc70b64
Validity
Not Before: Nov 13 23:16:54 2022 GMT
Not After : Nov 14 23:16:54 2024 GMT
Subject: CN=d8d2259fea6865c5f9f3b7b2460391068d8a2098
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:18:c4:4d:98:5b:33:d4:a6:34:45:d7:5f:68:
e2:3c:b7:39:11:17:3b:44:c3:51:fe:d9:e2:9c:06:
dd:1a:8a:4e:f3:84:31:47:76:61:93:ce:dc:f4:f1:
a0:66:ff:3d:75:e0:7c:c8:36:8d:40:b8:3b:7d:fd:
bb:f2:7b:c3:3b:84:38:40:36:b7:b4:52:9d:cc:dd:
95:65:23:64:84:2b:bb:cc:3a:a4:26:6d:11:1d:34:
44:0a:d1:ba:f7:0f:7f:78:b2:e3:cb:5e:39:cf:f7:
ad:41:c7:d2:c0:41:97:47:21:76:6b:03:23:ed:fa:
5c:23:e3:6b:4a:97:f1:e9:a9:e7:60:89:87:2a:15:
e7:96:db:49:c4:17:17:08:5d:9d:47:fa:bd:c0:9d:
ec:60:4e:30:bc:d6:b9:ff:19:82:1c:ed:1d:72:a8:
b3:eb:85:95:79:b0:93:17:15:ae:26:f4:1f:33:e4:
65:b8:80:1d:b7:98:3e:ef:2e:60:3e:30:dc:9f:bf:
86:eb:4e:1d:d1:dc:d6:cf:02:e7:49:e3:fa:ca:a2:
14:f4:17:c8:d6:67:49:70:2c:d6:30:98:ee:34:9a:
f1:13:d8:49:2b:db:1e:b0:64:ea:bc:70:82:73:b3:
0e:3b:df:ad:47:ad:b3:78:1f:c1:c7:ec:b3:6f:26:
f0:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:B1:20:50:BD:FA:BB:87:4C:75:12:29:AB:73:DD:DF:7F:DE:62:3D
X509v3 Authority Key Identifier:
keyid:34:D1:75:0D:84:1E:60:5A:A0:B8:09:8B:97:F1:F6:1C:36:10:0E:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f595ed733bf54f430d174bb1f0bf895d6bc70b64.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5b1e152f-fc50-435b-beeb-8b3866e1b0fe/d8d2259fea6865c5f9f3b7b2460391068d8a2098.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/5b1e152f-fc50-435b-beeb-8b3866e1b0fe/f595ed733bf54f430d174bb1f0bf895d6bc70b64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.189.188.0/22
Signature Algorithm: sha256WithRSAEncryption
77:69:e4:c2:64:77:3b:30:7c:66:43:f0:3c:d2:1b:2c:ac:e7:
cb:5b:d2:14:ca:ad:d5:51:cc:22:10:80:5a:5b:eb:02:b4:be:
97:61:c9:a0:0b:37:c7:3f:43:dd:38:a4:d7:3a:1d:7e:8a:88:
6f:a0:39:87:7b:21:20:b6:6f:a8:a8:4c:11:ec:dc:94:00:76:
a2:7c:09:e0:47:78:5d:d9:9f:9f:a3:14:d0:de:2a:a0:27:91:
fd:70:2a:6d:c6:da:b0:43:b3:34:1a:7a:7a:e2:9b:c1:bb:f3:
56:c9:d6:6c:97:1c:86:e6:7e:02:86:e4:d4:11:25:88:ec:b1:
42:35:44:52:da:85:c4:f6:ef:ab:30:77:df:d3:11:88:b3:df:
ee:05:e3:2e:a3:2b:25:f1:3c:42:5f:f2:c9:d0:4b:bb:37:f4:
58:20:b3:fa:7b:d1:c8:e4:b2:92:49:90:fe:b0:6c:47:d5:b6:
61:e0:f8:3a:17:24:70:81:64:ae:e1:99:03:8b:a4:fc:1a:a5:
ee:3f:89:4c:8c:2e:c4:0d:9f:3b:ec:9a:d3:a2:c9:2d:97:4a:
ca:b6:ac:3e:ad:c3:4c:fb:39:23:4b:40:13:71:5c:61:4d:ee:
f0:9a:14:37:bd:af:4a:92:24:5d:39:0f:c4:21:1b:52:cb:97:
13:02:0d:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:44 2024 by rpki-client on console-fra.rpki-client.org