Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6a899f67-c65f-4d64-b9fe-2de6a60c7307/4e3e7b716cd025c289190341ff038e778c129310.roa
File: 4e3e7b716cd025c289190341ff038e778c129310.roa (raw, json)
Hash identifier: 12GlkIgK/ScZ7jK0rQZJ33Nn50fua/uG4C7pY664BHE=
Subject key identifier: E5:D3:E2:DD:08:E4:4E:81:35:69:4D:2A:B1:67:D4:E0:22:3B:C6:FB
Certificate issuer: /CN=1dfddfe2f66b991bd6c0a52036c8bafed2f1f289
Certificate serial: 21E012
Authority key identifier: 2F:F0:EB:90:52:72:03:93:9D:EB:1E:9A:33:44:7B:44:E1:57:DD:72
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1dfddfe2f66b991bd6c0a52036c8bafed2f1f289.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/6a899f67-c65f-4d64-b9fe-2de6a60c7307/4e3e7b716cd025c289190341ff038e778c129310.roa
Signing time: Mon 14 Aug 2023 07:01:13 +0000
ROA not before: Sun 13 Aug 2023 07:01:12 +0000
ROA not after: Thu 14 Aug 2025 07:01:12 +0000
asID: 265554
IP address blocks: 45.170.132.0/24 maxlen: 24
45.170.134.0/23 maxlen: 24
2803:aba0:2000::/39 maxlen: 40
2803:aba0:2200::/40 maxlen: 40
2803:aba0:2300::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2220050 (0x21e012)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dfddfe2f66b991bd6c0a52036c8bafed2f1f289
Validity
Not Before: Aug 13 07:01:12 2023 GMT
Not After : Aug 14 07:01:12 2025 GMT
Subject: CN=4e3e7b716cd025c289190341ff038e778c129310
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:7c:f5:0e:5e:83:0f:bf:1d:89:50:8e:b5:20:
c4:a1:e6:da:a3:56:b8:d3:67:d5:d6:e6:b7:4b:e3:
e0:35:06:2b:84:b8:4a:91:8a:84:61:37:98:a9:a1:
6e:9f:e2:f5:69:0c:f6:52:d4:f6:05:2f:97:51:f3:
ff:02:bd:92:61:8c:bd:b2:be:dc:7d:63:a5:ad:b4:
11:04:2e:97:4a:66:a9:74:bb:2c:7f:2b:1c:28:9a:
1f:55:32:07:32:c9:1d:a3:09:37:7e:07:2a:26:71:
3c:dd:cb:c2:9b:ca:b1:72:1a:3e:36:7b:ef:58:b1:
f1:8f:a6:d2:1c:92:3d:d4:22:ec:40:ab:7b:21:43:
20:13:f0:62:c1:da:a4:8b:65:07:8d:82:ea:11:f0:
63:a9:a3:9d:3c:3a:c1:11:96:80:a4:94:7a:33:b2:
0e:74:e1:e1:f8:8d:7f:d3:1d:41:6c:90:34:5a:e7:
2c:51:a1:e7:d9:58:35:3a:f2:f3:d3:94:63:b6:0b:
c8:3a:bb:89:5a:49:c7:ec:17:f3:59:9e:4c:91:38:
79:16:a7:ba:02:71:e9:3a:cf:70:cd:ee:6d:ad:cf:
dc:0a:e8:36:86:6e:a8:71:70:86:de:29:b9:63:f5:
a0:4a:77:d1:34:1a:45:ba:be:a2:7d:ee:ad:96:bb:
de:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:D3:E2:DD:08:E4:4E:81:35:69:4D:2A:B1:67:D4:E0:22:3B:C6:FB
X509v3 Authority Key Identifier:
keyid:2F:F0:EB:90:52:72:03:93:9D:EB:1E:9A:33:44:7B:44:E1:57:DD:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1dfddfe2f66b991bd6c0a52036c8bafed2f1f289.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6a899f67-c65f-4d64-b9fe-2de6a60c7307/4e3e7b716cd025c289190341ff038e778c129310.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/6a899f67-c65f-4d64-b9fe-2de6a60c7307/1dfddfe2f66b991bd6c0a52036c8bafed2f1f289.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.170.132.0/24
45.170.134.0/23
IPv6:
2803:aba0:2000::-2803:aba0:2300:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
12:0f:18:27:18:56:c2:2d:37:f9:1f:80:6a:96:8f:bb:04:82:
4b:59:5c:89:c0:64:c9:b7:8f:0b:f6:e4:a6:40:6d:8c:64:43:
94:89:f2:53:06:0b:a1:93:71:f8:fa:a3:17:82:4a:57:03:74:
0c:64:20:d5:2f:c3:b7:11:29:78:2f:44:d2:98:da:6e:10:06:
31:b4:48:02:13:5a:22:66:e7:b0:8b:e1:af:d3:a7:7a:f4:81:
e1:04:80:94:d8:59:5a:6c:8d:dc:4e:1d:e2:5f:de:72:33:5e:
52:fe:da:c0:3a:7f:68:7f:a2:7d:4d:4b:84:9f:65:bb:84:e0:
11:55:0f:d4:58:09:f1:5c:13:5f:f2:4d:54:92:66:fb:21:bd:
c1:92:7b:72:03:aa:c9:fb:df:d8:de:99:25:17:8d:9c:3f:fe:
08:0e:30:4a:d2:5d:74:2e:6f:7d:da:f3:26:70:f2:cf:0e:1f:
88:77:2c:dd:5c:bf:8b:68:fb:94:53:85:1f:bc:a4:f7:89:d4:
a9:bf:de:8d:3a:4c:1a:2e:c0:dd:db:36:a1:44:05:c5:17:b6:
82:2f:20:0a:37:77:bb:e4:d9:17:45:aa:14:0f:b4:b1:d1:b0:
f8:5c:e7:77:02:87:8b:88:4c:ac:c3:01:2d:6b:d1:ce:82:52:
d3:a1:de:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:49 2024 by rpki-client on console-fra.rpki-client.org