Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6e1394b9-b078-44ff-8c75-9365303aca4f/7d83db07eff110ec48a0211dd4403875838a89ab.roa
File: 7d83db07eff110ec48a0211dd4403875838a89ab.roa (raw, json)
Hash identifier: 55RgJVlgEFufrOkeB4BBXavTeEw1/70eqvsR9UztYAI=
Subject key identifier: 14:84:5D:F8:BB:4A:17:C0:B4:C9:E6:36:08:D8:34:C7:82:41:21:EE
Certificate issuer: /CN=af74f3aa42340a4c03a724bcfe9d604390d00998
Certificate serial: 228360
Authority key identifier: F8:C0:0E:76:BA:BC:3C:DE:FE:23:93:A2:4A:E4:97:0A:34:85:7E:E8
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/af74f3aa42340a4c03a724bcfe9d604390d00998.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/6e1394b9-b078-44ff-8c75-9365303aca4f/7d83db07eff110ec48a0211dd4403875838a89ab.roa
Signing time: Thu 13 Jul 2023 14:44:37 +0000
ROA not before: Wed 12 Jul 2023 14:44:37 +0000
ROA not after: Sun 13 Jul 2025 14:44:37 +0000
asID: 52468
IP address blocks: 45.71.36.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2261856 (0x228360)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af74f3aa42340a4c03a724bcfe9d604390d00998
Validity
Not Before: Jul 12 14:44:37 2023 GMT
Not After : Jul 13 14:44:37 2025 GMT
Subject: CN=7d83db07eff110ec48a0211dd4403875838a89ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:c8:76:03:4d:9a:35:bd:4c:f1:04:d4:7a:97:
58:b6:82:ae:d9:a6:35:49:ae:4f:71:ff:e7:c6:e5:
48:99:53:76:b8:5f:23:7f:d8:c3:b2:09:7f:b2:cd:
d5:b3:3a:58:a9:bf:94:01:a2:83:da:54:34:3e:a3:
ce:b4:60:f6:24:a0:48:bb:9d:04:48:3e:db:b0:1b:
0e:ab:73:6a:f1:9e:ce:fb:43:91:be:bf:86:30:d4:
c9:58:8c:d6:8e:c2:25:b2:0d:5c:c9:69:79:3e:9f:
5e:23:29:bb:df:14:c3:4d:24:9d:96:19:be:a4:13:
e8:ac:d5:ad:5e:8f:1c:99:0e:4c:71:21:a9:22:de:
e6:ce:f6:87:b4:c1:2f:44:98:e7:fa:13:aa:92:94:
d6:3d:40:2d:ab:d5:9c:f0:86:d2:17:61:5f:ca:60:
27:2c:c8:de:fd:36:ee:bc:af:49:85:58:05:17:88:
eb:47:a0:ca:3a:ad:08:52:75:2a:d6:be:98:48:ce:
05:8a:03:11:d7:ab:a1:52:3e:b6:ac:19:a9:70:c3:
4f:a7:35:6e:dd:14:d7:7f:6d:e3:66:de:0c:76:73:
fa:ef:97:8a:a6:34:fc:2a:c0:ff:3f:f0:54:96:d9:
55:d9:f2:34:3d:54:31:fd:77:01:de:d3:65:1d:d4:
ab:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:84:5D:F8:BB:4A:17:C0:B4:C9:E6:36:08:D8:34:C7:82:41:21:EE
X509v3 Authority Key Identifier:
keyid:F8:C0:0E:76:BA:BC:3C:DE:FE:23:93:A2:4A:E4:97:0A:34:85:7E:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/af74f3aa42340a4c03a724bcfe9d604390d00998.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6e1394b9-b078-44ff-8c75-9365303aca4f/7d83db07eff110ec48a0211dd4403875838a89ab.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/6e1394b9-b078-44ff-8c75-9365303aca4f/af74f3aa42340a4c03a724bcfe9d604390d00998.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.71.36.0/22
Signature Algorithm: sha256WithRSAEncryption
42:a7:50:78:60:f6:c6:91:59:60:27:d0:9b:66:ca:53:b1:f9:
85:10:59:65:db:55:9f:0b:33:af:00:b4:66:cc:f1:89:1b:f8:
ee:3e:f0:de:ff:c6:b1:2d:ba:94:0b:f6:60:47:fd:19:0e:6c:
28:dc:8a:96:10:03:a3:8e:78:ca:4e:36:53:f1:d9:33:f5:4d:
aa:d1:b4:a4:f2:d8:4f:cd:41:ea:38:77:c0:d3:17:61:9d:71:
47:76:ac:96:36:84:b6:08:36:41:01:65:54:ed:41:0f:45:b0:
db:e1:1b:34:ef:26:07:79:2b:f4:29:23:00:a3:ae:8f:df:50:
07:1f:7a:0d:c2:3d:64:fc:42:fa:28:27:47:c4:35:6e:57:ec:
9e:95:d5:b9:a6:76:95:39:89:ad:32:88:29:5b:4d:10:7a:8b:
c1:5b:1a:7e:3c:fd:f1:37:54:f8:c4:b0:c7:90:66:1b:c8:62:
55:c1:74:4b:22:34:57:57:b7:c6:b7:d5:bb:b7:f4:ad:fb:f3:
e7:e5:01:0f:79:3b:1d:87:2b:4d:30:5e:2e:f2:45:10:13:ec:
2d:c2:e3:80:9b:7f:ce:81:51:0e:64:e5:8a:81:0f:3f:df:1d:
8b:1c:22:0f:ce:16:04:34:0d:65:e8:d9:f8:b3:a3:02:83:20:
44:de:93:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:22 2024 by rpki-client on console-fra.rpki-client.org