Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6e1394b9-b078-44ff-8c75-9365303aca4f/cf1bfd00095dbed24728e5763b7f3358cda4a05e.roa
File: cf1bfd00095dbed24728e5763b7f3358cda4a05e.roa (raw, json)
Hash identifier: uu/CobLXSss+z5XWhOANUC9ToCmZnRrCLCyyuqs8Sog=
Subject key identifier: E2:85:25:CD:D6:77:13:CE:72:C5:36:ED:46:FE:CA:46:2E:D4:9C:FF
Certificate issuer: /CN=af74f3aa42340a4c03a724bcfe9d604390d00998
Certificate serial: 228EBF
Authority key identifier: F8:C0:0E:76:BA:BC:3C:DE:FE:23:93:A2:4A:E4:97:0A:34:85:7E:E8
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/af74f3aa42340a4c03a724bcfe9d604390d00998.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/6e1394b9-b078-44ff-8c75-9365303aca4f/cf1bfd00095dbed24728e5763b7f3358cda4a05e.roa
Signing time: Thu 13 Jul 2023 14:44:39 +0000
ROA not before: Wed 12 Jul 2023 14:44:37 +0000
ROA not after: Sun 13 Jul 2025 14:44:37 +0000
asID: 27947
IP address blocks: 45.71.38.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2264767 (0x228ebf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af74f3aa42340a4c03a724bcfe9d604390d00998
Validity
Not Before: Jul 12 14:44:37 2023 GMT
Not After : Jul 13 14:44:37 2025 GMT
Subject: CN=cf1bfd00095dbed24728e5763b7f3358cda4a05e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:6e:14:a1:20:6b:04:70:ae:fb:a7:da:4d:79:
54:ff:e3:4b:47:91:e7:56:28:21:97:89:70:a7:b7:
27:e9:04:0f:17:4c:b7:d6:49:85:17:c2:19:b5:d0:
fb:57:f6:e7:18:d1:78:c3:2f:ad:ec:ae:53:95:3f:
0e:84:9a:30:db:b0:b7:1d:24:c1:ea:5b:fe:b8:56:
c3:3d:b2:9e:e2:ac:99:38:54:ac:2d:d3:ce:a0:40:
82:72:10:63:30:27:34:04:21:6e:8c:e4:77:7a:25:
d4:df:bb:3d:9f:3e:08:ad:a7:28:2d:40:76:a6:92:
4d:42:a8:c1:c7:b9:71:53:68:f5:23:71:73:d3:73:
1f:67:91:ae:78:a4:59:fe:3c:3a:96:1d:2e:75:b9:
0c:b1:1c:f0:70:a8:7e:3f:d2:08:c7:b8:09:ce:63:
4c:99:08:b8:d9:0e:f3:a3:7d:6c:3c:b6:c9:27:ca:
2d:99:06:24:a6:e3:4b:8c:03:bc:32:b5:ac:83:05:
b4:43:0a:38:46:51:04:1c:30:f9:bc:92:92:e8:dc:
1d:88:5f:36:0c:d6:dd:9d:16:4b:d4:27:62:4e:26:
f7:34:b9:48:43:2d:b5:6c:77:61:85:93:68:ed:52:
95:86:43:58:66:a0:fc:84:95:b0:f2:1c:f8:88:39:
8e:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:85:25:CD:D6:77:13:CE:72:C5:36:ED:46:FE:CA:46:2E:D4:9C:FF
X509v3 Authority Key Identifier:
keyid:F8:C0:0E:76:BA:BC:3C:DE:FE:23:93:A2:4A:E4:97:0A:34:85:7E:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/af74f3aa42340a4c03a724bcfe9d604390d00998.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6e1394b9-b078-44ff-8c75-9365303aca4f/cf1bfd00095dbed24728e5763b7f3358cda4a05e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/6e1394b9-b078-44ff-8c75-9365303aca4f/af74f3aa42340a4c03a724bcfe9d604390d00998.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.71.38.0/24
Signature Algorithm: sha256WithRSAEncryption
29:ee:64:74:ea:5c:c6:2f:45:ae:82:17:ce:61:da:a4:6f:09:
d0:69:e7:17:bb:6b:10:41:28:d1:08:08:b1:44:8d:c9:1e:49:
a3:dd:42:77:b1:54:26:41:93:be:05:83:60:78:ce:ad:63:68:
35:63:f9:c6:90:29:cd:6a:3e:b5:43:42:cb:5b:ba:6c:4c:96:
43:65:59:e5:32:d4:7c:aa:e4:2f:05:c1:ca:ba:58:27:14:4a:
9c:cd:be:85:0e:31:f2:1d:f1:dc:2e:b3:e6:d5:7a:12:f3:74:
ed:6c:45:42:23:4a:d8:54:b6:da:c8:08:54:12:7a:ca:6e:7a:
50:2e:ba:0a:3d:2f:cd:55:c3:5d:bd:a8:7c:7f:03:d5:76:bc:
fd:2a:26:15:dc:4c:f4:82:55:97:a7:47:fd:02:38:98:97:e1:
4b:2c:18:1d:d0:69:ed:7b:32:14:3d:9a:3a:6b:b8:c9:b9:3c:
e3:cb:b2:54:14:99:2a:01:24:c6:96:de:8d:42:a7:3d:ce:c6:
31:8e:d1:b4:cc:12:ce:29:d2:a3:c8:b7:41:60:aa:d0:7c:f2:
2a:91:76:a2:83:f9:cc:a6:76:e3:45:96:07:ba:ee:50:7c:9b:
33:ff:72:cc:81:7c:27:3e:3e:18:a4:b8:db:12:70:16:d5:87:
08:ca:d1:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:38 2024 by rpki-client on console-ams.rpki-client.org