Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/704efe10-5f80-40a3-b317-758e6932ec3d/0323156e2ae3163e958d94c24c8a0a825da69082.roa
File: 0323156e2ae3163e958d94c24c8a0a825da69082.roa (raw, json)
Hash identifier: 0HvVnKCKMbtEVPvnMgqNY46Vtk9ASHl/V2SdLM0PTXg=
Subject key identifier: D3:C8:18:B3:85:C2:6B:D0:7B:8F:AA:E7:01:30:9F:32:9F:7F:A2:DF
Certificate issuer: /CN=5be393491eb2c03f14214a706c7be3bb76a02485
Certificate serial: 23AD76
Authority key identifier: 81:52:EF:3A:9B:F5:23:2B:AA:03:28:C5:89:F0:B8:04:1E:FB:36:22
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5be393491eb2c03f14214a706c7be3bb76a02485.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/704efe10-5f80-40a3-b317-758e6932ec3d/0323156e2ae3163e958d94c24c8a0a825da69082.roa
Signing time: Tue 03 Oct 2023 20:25:15 +0000
ROA not before: Mon 02 Oct 2023 20:25:15 +0000
ROA not after: Fri 03 Oct 2025 21:25:15 +0000
asID: 266802
IP address blocks: 45.236.168.0/22 maxlen: 24
2803:a8a0::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2338166 (0x23ad76)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5be393491eb2c03f14214a706c7be3bb76a02485
Validity
Not Before: Oct 2 20:25:15 2023 GMT
Not After : Oct 3 21:25:15 2025 GMT
Subject: CN=0323156e2ae3163e958d94c24c8a0a825da69082
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:aa:2c:a4:17:43:8a:d6:18:78:89:0e:01:af:
df:4f:66:2f:61:57:5b:03:be:da:1b:9d:29:5a:67:
31:1c:5d:f4:e6:e0:5f:a9:fd:87:46:fe:c1:b6:d3:
26:a1:09:ce:ec:0e:49:7b:1b:3f:e5:7f:b1:f2:ca:
10:7e:6e:29:64:0e:87:4c:f8:7a:0d:5c:e5:17:21:
e4:dc:c7:30:da:47:18:ac:45:4a:94:58:12:ae:9a:
f8:20:65:36:bd:31:ef:6b:ff:40:fd:c4:08:ca:da:
a6:bc:63:40:95:84:2e:60:5b:bc:4f:48:f6:31:93:
6d:ca:cb:f5:d8:3a:ed:ff:e9:37:55:a2:e2:88:59:
7e:2b:4d:73:78:b8:f0:b2:87:83:c2:3b:22:1a:31:
81:26:5b:cb:98:88:59:59:a3:02:64:09:b5:4e:49:
35:14:c6:a0:35:89:e0:90:0c:4e:7b:75:86:d3:3d:
47:41:25:c4:85:eb:de:dd:6e:18:f4:66:71:ba:6b:
14:8f:2f:f6:6f:c4:56:97:78:08:ef:38:b5:f5:5f:
78:63:81:47:00:46:97:f7:a0:76:41:6a:bc:ce:af:
38:d8:0b:bb:bc:75:7c:0d:8c:03:1e:7d:ba:b8:a7:
5d:72:36:e7:e6:fc:7f:cc:31:aa:fa:98:8f:81:41:
cd:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:C8:18:B3:85:C2:6B:D0:7B:8F:AA:E7:01:30:9F:32:9F:7F:A2:DF
X509v3 Authority Key Identifier:
keyid:81:52:EF:3A:9B:F5:23:2B:AA:03:28:C5:89:F0:B8:04:1E:FB:36:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5be393491eb2c03f14214a706c7be3bb76a02485.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/704efe10-5f80-40a3-b317-758e6932ec3d/0323156e2ae3163e958d94c24c8a0a825da69082.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/704efe10-5f80-40a3-b317-758e6932ec3d/5be393491eb2c03f14214a706c7be3bb76a02485.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.236.168.0/22
IPv6:
2803:a8a0::/32
Signature Algorithm: sha256WithRSAEncryption
6d:ed:06:25:1e:e7:8f:00:9c:b9:7c:5c:8e:04:10:02:aa:06:
d3:c7:40:56:55:ed:30:2f:88:f2:c1:c3:94:58:dc:d5:c5:e6:
f0:24:4b:51:b1:81:03:ca:5f:63:52:cf:39:1f:00:39:48:5f:
8a:8e:d1:ea:90:52:0d:cc:48:a4:eb:4e:f6:7e:ec:36:62:ca:
43:35:2e:0d:55:5d:b7:0b:a4:dc:5d:d0:75:f9:7d:6b:ae:4c:
a7:ed:c6:20:64:67:06:1c:f0:f9:42:68:e5:f5:b1:eb:93:18:
1a:e3:fb:d4:59:e3:5d:2e:29:3a:83:9d:8c:a2:d5:2a:c1:c9:
ca:10:83:2f:7f:2f:c5:f8:9f:29:a6:41:c0:d0:91:61:10:4e:
de:31:4e:59:00:4a:c6:9e:3d:b8:49:ef:b6:85:85:c4:83:23:
87:9e:e3:8d:76:c2:09:c4:9b:f9:41:f2:67:73:f0:ff:8f:be:
cf:ae:12:51:e9:15:e7:d1:e8:45:da:e5:b7:e3:61:d2:bf:c7:
65:cb:c5:08:70:70:70:dc:76:c8:8e:ab:f2:1b:16:fb:fc:33:
c2:de:e9:14:44:a5:f6:13:e5:8d:6b:03:61:3a:8d:c7:79:6f:
ea:61:04:e9:f8:a8:ea:1a:af:cc:99:dd:92:42:8f:e4:9e:4a:
23:21:6e:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:50 2024 by rpki-client on console-fra.rpki-client.org