Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6af7e935-f69d-4ea1-8649-d127bc9db1c7/88dafe4d7b44cf0998ab83c977b030a2a7a9b609.roa
File: 88dafe4d7b44cf0998ab83c977b030a2a7a9b609.roa (raw, json)
Hash identifier: /ULF9ItVbgkAn1EhnOER02azrhSRE53vTP0/DCwal3Y=
Subject key identifier: 2F:7F:6C:08:BF:6E:F1:7C:01:83:28:C6:7D:39:D8:8A:7F:5A:A2:FD
Certificate issuer: /CN=ffe64fcbdace0b26df99b62a807cea23c8707e12
Certificate serial: 1B8620
Authority key identifier: 20:E0:45:88:BA:C8:ED:0C:36:11:AD:F3:B0:C6:C6:A4:1C:FA:1E:75
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ffe64fcbdace0b26df99b62a807cea23c8707e12.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/6af7e935-f69d-4ea1-8649-d127bc9db1c7/88dafe4d7b44cf0998ab83c977b030a2a7a9b609.roa
Signing time: Tue 12 Sep 2023 18:23:37 +0000
ROA not before: Mon 11 Sep 2023 18:23:37 +0000
ROA not after: Fri 12 Sep 2025 18:23:37 +0000
asID: 263218
IP address blocks: 45.191.244.0/24 maxlen: 24
45.191.245.0/24 maxlen: 24
45.191.247.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1803808 (0x1b8620)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffe64fcbdace0b26df99b62a807cea23c8707e12
Validity
Not Before: Sep 11 18:23:37 2023 GMT
Not After : Sep 12 18:23:37 2025 GMT
Subject: CN=88dafe4d7b44cf0998ab83c977b030a2a7a9b609
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:02:52:b2:64:34:02:d4:4b:4e:24:a9:df:6c:
d6:7f:a6:c4:9b:bd:20:4d:28:7f:dd:15:12:88:47:
03:67:71:01:ef:c4:b8:53:a0:43:a3:fd:82:fa:59:
35:68:21:ea:33:74:f0:fe:21:28:5d:d1:0e:89:a3:
0b:3a:73:c4:ad:25:e9:f3:04:08:50:1a:17:83:82:
15:d9:f6:7f:4d:c2:c7:1a:f4:26:76:cf:31:55:88:
1e:5d:33:72:10:b4:2a:e0:6c:b1:25:71:e4:82:48:
07:cd:3c:21:91:3c:8d:81:be:e3:ed:dc:e5:1c:1b:
78:19:a3:0a:66:a5:95:44:31:71:9a:d0:18:94:3c:
e7:f0:ac:ac:aa:e0:47:65:22:6c:ec:cd:3f:e9:31:
d7:f7:35:63:b8:e6:9f:63:d1:1f:e1:e6:8b:e8:06:
4f:dc:d2:71:b8:e0:3f:b6:3a:e8:f2:e8:b5:93:ad:
47:fc:5c:dd:d1:de:bb:7e:00:2b:5d:5d:a8:79:5b:
fb:58:26:13:1b:57:bb:39:67:0c:e6:4c:1f:fc:24:
77:f6:fa:b3:f2:0e:23:50:56:02:19:c7:ff:0f:54:
6c:f4:8f:e6:f1:4c:14:ca:39:21:1f:c5:11:01:d3:
47:34:51:fe:81:30:88:7b:09:b3:d5:9e:39:3e:c3:
e3:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:7F:6C:08:BF:6E:F1:7C:01:83:28:C6:7D:39:D8:8A:7F:5A:A2:FD
X509v3 Authority Key Identifier:
keyid:20:E0:45:88:BA:C8:ED:0C:36:11:AD:F3:B0:C6:C6:A4:1C:FA:1E:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ffe64fcbdace0b26df99b62a807cea23c8707e12.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6af7e935-f69d-4ea1-8649-d127bc9db1c7/88dafe4d7b44cf0998ab83c977b030a2a7a9b609.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/6af7e935-f69d-4ea1-8649-d127bc9db1c7/ffe64fcbdace0b26df99b62a807cea23c8707e12.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.191.244.0/23
45.191.247.0/24
Signature Algorithm: sha256WithRSAEncryption
48:e5:5c:97:7a:55:9d:fc:d3:f5:34:d8:09:b3:34:b9:cc:4f:
77:55:83:d6:21:9c:2f:12:53:31:86:fa:45:c4:f3:9a:a5:3b:
ed:35:dd:2d:c3:ba:96:1c:95:a0:17:d3:c3:7c:74:d4:a0:1a:
95:73:9f:12:23:33:e6:e8:42:c6:ce:78:11:56:31:e3:21:d9:
e7:d2:6d:81:cc:76:be:a6:64:43:a6:f5:1f:2c:bf:e0:1b:f5:
b2:af:fe:2b:b3:17:0b:75:bf:08:52:18:be:0d:0d:6e:4c:4e:
fd:31:cf:33:d1:ac:6b:f1:1d:9b:63:57:62:26:5a:41:a8:53:
f4:f0:b2:4e:3a:53:83:dc:57:19:eb:bc:36:77:f4:a0:da:0d:
f4:b6:46:99:4c:a3:56:19:01:e4:4d:fe:63:eb:c8:2e:de:5a:
12:c3:e6:80:a3:5e:21:b4:fe:b8:7f:68:b2:84:53:1d:ac:9e:
d4:1f:ab:c9:a1:63:2a:15:5b:6a:99:ce:3f:fb:92:cf:fb:af:
28:2e:c0:d4:1d:5b:bf:86:70:ce:f9:11:a5:9e:b7:d4:5b:fa:
3c:03:d7:7a:1c:72:bc:8d:ce:83:61:08:81:90:1b:c1:cd:76:
db:3b:16:0b:be:9c:28:88:44:ba:9f:59:09:36:f6:08:4d:d7:
3b:7d:0f:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:21 2024 by rpki-client on console-fra.rpki-client.org