Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6f3c7c9a-c2cb-4650-a953-f7b81258f942/452f82ac6c8f16818f28037e47f202eb6136caff.roa
File: 452f82ac6c8f16818f28037e47f202eb6136caff.roa (raw, json)
Hash identifier: XZvs6Ds+qxxWVCd78PqfGimpP1MqDfMy7epn5xYXjF8=
Subject key identifier: 15:53:05:EC:38:0C:EF:97:F7:86:60:A5:9E:D9:97:99:EF:BE:D7:DC
Certificate issuer: /CN=580bb6ad5a7e41db42c5a6f5b88efe8aef60c064
Certificate serial: 1EEA56
Authority key identifier: C6:09:F3:88:24:4D:CB:B7:E6:06:F6:F4:2D:68:B2:C8:4F:56:6D:74
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/580bb6ad5a7e41db42c5a6f5b88efe8aef60c064.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/6f3c7c9a-c2cb-4650-a953-f7b81258f942/452f82ac6c8f16818f28037e47f202eb6136caff.roa
Signing time: Wed 10 Jan 2024 19:59:49 +0000
ROA not before: Wed 10 Jan 2024 19:59:49 +0000
ROA not after: Sat 10 Jan 2026 19:59:49 +0000
asID: 267798
IP address blocks: 45.173.16.0/22 maxlen: 22
45.173.16.0/24 maxlen: 24
45.173.17.0/24 maxlen: 24
45.173.18.0/24 maxlen: 24
45.173.19.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2026070 (0x1eea56)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=580bb6ad5a7e41db42c5a6f5b88efe8aef60c064
Validity
Not Before: Jan 10 19:59:49 2024 GMT
Not After : Jan 10 19:59:49 2026 GMT
Subject: CN=452f82ac6c8f16818f28037e47f202eb6136caff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:b1:a0:de:08:54:f2:91:33:51:57:9b:16:7b:
73:be:59:9e:5f:57:ca:74:3d:f5:5c:b1:0c:c7:c8:
92:1f:de:a0:7d:5c:e0:93:37:f5:f6:e8:bf:f0:7e:
fa:22:fc:3d:88:51:3a:d9:d9:1a:01:07:59:5d:cf:
9c:f0:95:ac:b4:e4:6b:40:4f:5d:69:4d:07:c0:70:
b0:d4:38:fc:30:b1:a3:b1:22:4b:c3:da:9d:8d:67:
ab:4e:d6:7f:1a:d8:b6:85:de:a5:dd:dc:f9:38:0e:
c8:b2:31:26:15:97:73:6c:0b:4a:84:f8:21:59:48:
a7:03:90:db:4e:46:dc:7e:00:58:6b:0c:20:99:5c:
b7:86:ff:7a:db:2d:1f:06:36:eb:89:77:be:c6:1f:
a6:e4:01:3a:b1:d6:30:4b:9a:9a:68:58:07:33:73:
4e:99:f4:d3:27:9b:64:7f:8a:9f:17:b5:0f:a8:1f:
20:65:04:4d:92:5d:a9:cb:90:b1:47:cd:a3:14:4d:
ae:88:f2:87:5b:26:51:24:28:04:c9:08:ac:a8:69:
f0:20:d7:42:0c:b0:af:f6:df:15:19:b5:15:dc:0e:
49:3d:7c:af:de:a7:2a:d0:31:25:d3:b6:89:f6:72:
e7:18:be:86:e4:b6:bb:8b:9f:f3:12:e4:a2:a5:65:
61:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:53:05:EC:38:0C:EF:97:F7:86:60:A5:9E:D9:97:99:EF:BE:D7:DC
X509v3 Authority Key Identifier:
keyid:C6:09:F3:88:24:4D:CB:B7:E6:06:F6:F4:2D:68:B2:C8:4F:56:6D:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/580bb6ad5a7e41db42c5a6f5b88efe8aef60c064.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6f3c7c9a-c2cb-4650-a953-f7b81258f942/452f82ac6c8f16818f28037e47f202eb6136caff.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/6f3c7c9a-c2cb-4650-a953-f7b81258f942/580bb6ad5a7e41db42c5a6f5b88efe8aef60c064.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.173.16.0/22
Signature Algorithm: sha256WithRSAEncryption
74:c9:5d:0e:e4:6e:11:2f:da:04:bc:3e:84:1d:2b:e4:1a:f0:
3e:c0:59:6d:92:f2:29:90:77:70:1e:5b:76:c9:67:a7:10:a0:
84:ec:ad:ad:a9:dd:c5:9b:f3:d0:57:3f:a3:77:fe:9a:23:03:
b1:4d:bf:98:68:15:fe:be:42:55:6b:bc:ea:8b:40:42:4a:00:
73:61:c3:b8:3a:5b:69:90:22:48:a1:64:b8:e7:45:de:13:a7:
cb:51:d8:ed:14:16:d3:b4:7a:52:79:b2:4d:8b:35:ad:e8:18:
e3:88:8f:be:54:d2:df:e0:fc:9b:99:90:88:64:43:44:83:21:
72:d8:3d:23:a8:39:05:7d:56:c2:c4:e7:e7:f1:72:94:7a:55:
0c:78:72:81:61:b2:37:9f:71:c6:b6:c4:11:39:08:c7:30:6a:
ea:2d:9f:45:10:38:cc:0b:25:69:92:2b:3f:06:1a:da:db:e5:
74:79:f7:da:28:35:5b:d4:c0:de:d1:be:e3:e7:f9:fe:a1:fa:
3c:c1:76:fe:4c:98:7a:fa:82:57:05:40:03:d8:c6:27:85:46:
39:29:dc:01:fe:2f:0c:04:b7:a5:e3:27:2c:ea:d9:00:3b:34:
58:16:82:6f:56:2d:ab:80:86:9a:ac:49:3a:52:c5:f0:c2:84:
74:72:3c:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:22 2024 by rpki-client on console-fra.rpki-client.org