Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5b1f730e-78a1-4428-8a56-fca3d599c817/3097abb097d883af067f4ca139103c39bc572d8f.roa
File: 3097abb097d883af067f4ca139103c39bc572d8f.roa (raw, json)
Hash identifier: nApqH9JXc5dQ5b/D48jj5e8fg1MJESa7jw7/LUAVy7w=
Subject key identifier: 2F:10:F5:BA:AA:27:C5:42:2B:FF:0B:B1:3C:05:8E:76:1F:32:49:7F
Certificate issuer: /CN=04f58d398e1a46504b7f27afcca2bf534c8d8b95
Certificate serial: 0F577F
Authority key identifier: CA:70:FA:56:DC:47:4F:E9:CF:E0:CC:6F:71:88:52:AB:C2:EF:48:B3
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/04f58d398e1a46504b7f27afcca2bf534c8d8b95.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5b1f730e-78a1-4428-8a56-fca3d599c817/3097abb097d883af067f4ca139103c39bc572d8f.roa
Signing time: Tue 27 Feb 2024 18:05:46 +0000
ROA not before: Tue 27 Feb 2024 18:05:46 +0000
ROA not after: Fri 27 Feb 2026 18:05:46 +0000
asID: 266670
IP address blocks: 45.225.68.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1005439 (0xf577f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04f58d398e1a46504b7f27afcca2bf534c8d8b95
Validity
Not Before: Feb 27 18:05:46 2024 GMT
Not After : Feb 27 18:05:46 2026 GMT
Subject: CN=3097abb097d883af067f4ca139103c39bc572d8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ea:6b:dc:67:c4:09:88:f8:3e:dc:9c:ea:ac:
f9:ac:46:79:ce:82:42:e9:0b:a4:bd:b4:8e:db:db:
df:40:60:84:39:09:46:46:c0:78:55:7e:8a:8b:23:
86:c7:3f:5b:34:af:c6:aa:a0:de:6a:4b:a4:bb:de:
bf:5f:ad:b7:ec:cb:14:cd:69:7a:b0:24:4e:31:b4:
ba:80:eb:a2:1d:d7:60:b9:1a:ed:6b:1b:13:12:c9:
67:5b:30:cf:1a:26:a8:e9:8d:d3:87:9f:92:e6:78:
74:34:1a:58:20:da:41:c4:90:52:fb:87:1f:ed:40:
12:29:4c:ae:d8:73:07:eb:e6:66:7d:95:99:4a:ae:
69:27:21:6d:1b:2f:dd:42:6a:67:8e:27:7b:8d:9b:
47:1f:d3:6d:49:c3:7c:1f:b5:55:5b:7d:7d:82:c2:
80:63:f2:b0:5c:62:14:f8:7a:e5:75:7b:18:53:83:
4f:8f:e6:c7:52:e9:47:6d:5b:91:2f:71:7d:8d:24:
27:da:f5:d0:8d:e1:e5:19:23:b3:70:90:6a:fa:a1:
44:dc:9d:d5:2b:fb:f1:9d:2d:26:ca:eb:13:08:f1:
9d:59:26:88:d7:1b:2c:56:a3:4c:85:11:2f:7e:eb:
b8:bf:8f:d0:af:e2:37:11:dd:f4:0b:6a:69:61:c2:
50:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:10:F5:BA:AA:27:C5:42:2B:FF:0B:B1:3C:05:8E:76:1F:32:49:7F
X509v3 Authority Key Identifier:
keyid:CA:70:FA:56:DC:47:4F:E9:CF:E0:CC:6F:71:88:52:AB:C2:EF:48:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/04f58d398e1a46504b7f27afcca2bf534c8d8b95.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5b1f730e-78a1-4428-8a56-fca3d599c817/3097abb097d883af067f4ca139103c39bc572d8f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/5b1f730e-78a1-4428-8a56-fca3d599c817/04f58d398e1a46504b7f27afcca2bf534c8d8b95.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.225.68.0/23
Signature Algorithm: sha256WithRSAEncryption
8f:19:49:91:44:32:65:02:84:79:3e:e5:da:92:60:4f:d0:a5:
cb:2b:d8:57:5d:9a:b8:d5:81:9e:ad:72:78:3e:0e:bd:65:48:
b2:9d:d1:89:f4:89:85:6c:99:13:da:25:3f:c3:02:d1:d3:fb:
4d:06:46:f7:75:9a:05:23:7e:14:db:a7:f7:57:32:53:10:a7:
41:f2:69:09:55:81:12:31:d6:68:66:5e:fa:b2:08:3c:25:b3:
9e:01:46:29:c7:00:51:7d:c5:f1:d9:74:e3:0e:fd:af:df:81:
00:35:1c:db:f6:b4:88:37:24:cb:6e:d5:6f:0e:45:c0:34:6a:
55:23:61:65:06:65:92:06:70:83:af:6a:06:bb:3f:40:65:b1:
16:7d:28:6a:88:dd:a6:bb:5a:32:80:0a:eb:a5:c6:6c:ac:40:
0b:17:f2:97:29:22:8d:09:54:97:1e:f7:f9:3b:00:db:be:a4:
c6:81:33:c4:94:f0:b9:f9:5f:85:66:2b:f0:5a:32:a9:2e:73:
be:7c:84:2a:41:03:a8:50:0d:17:8c:9b:2d:c0:1a:f8:af:7b:
8b:df:29:98:18:3e:0d:0f:13:28:78:bd:11:3a:a2:b6:d9:fd:
0e:fd:eb:57:78:be:3e:66:24:2e:70:ad:96:3b:56:01:e1:cb:
4c:cf:f0:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:36 2024 by rpki-client on console-ams.rpki-client.org