Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/71b2d803-0a93-4e95-99f0-13c753ed136c/fdc7c8fe999b357ec93d7530e255aba3684f65cf.roa
File: fdc7c8fe999b357ec93d7530e255aba3684f65cf.roa (raw, json)
Hash identifier: LpzyCAdN7Gzhc2dpcql//cE8w1gWFqzXyzXvITAfSvY=
Subject key identifier: 03:A5:CE:2D:5A:FF:4D:70:19:1D:D7:00:87:16:0B:13:09:1B:7F:82
Certificate issuer: /CN=a6ebe33530373d2c2bffaaed1e53f05db8e2a436
Certificate serial: 1762DA
Authority key identifier: 05:2B:45:49:AE:7E:4E:27:CD:57:65:C8:E8:2C:77:61:8C:EC:27:51
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a6ebe33530373d2c2bffaaed1e53f05db8e2a436.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/71b2d803-0a93-4e95-99f0-13c753ed136c/fdc7c8fe999b357ec93d7530e255aba3684f65cf.roa
Signing time: Tue 31 Oct 2023 00:26:29 +0000
ROA not before: Tue 31 Oct 2023 00:26:29 +0000
ROA not after: Fri 31 Oct 2025 00:26:29 +0000
asID: 267857
IP address blocks: 45.177.108.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1532634 (0x1762da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6ebe33530373d2c2bffaaed1e53f05db8e2a436
Validity
Not Before: Oct 31 00:26:29 2023 GMT
Not After : Oct 31 00:26:29 2025 GMT
Subject: CN=fdc7c8fe999b357ec93d7530e255aba3684f65cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:c5:23:66:66:3e:ad:40:c7:f5:c2:b7:4f:68:
88:c6:d9:0f:38:ae:b7:0f:4f:38:ec:17:2f:7b:45:
a6:77:d8:e2:7c:fc:02:c0:88:f9:64:8e:d8:ea:f4:
39:f8:62:c4:2d:49:0e:86:1b:cc:09:1d:70:bf:68:
ae:96:be:47:1f:57:06:ac:6e:d2:2f:47:c2:eb:3e:
c1:f5:54:3b:43:68:6b:3a:84:cf:95:19:a9:a6:82:
f3:4d:ac:bd:f6:69:28:ea:ba:06:ef:5b:09:c0:34:
d9:1f:af:bb:2d:0d:54:e6:b5:f9:c3:e6:2e:1d:0a:
6f:8f:9e:bb:c2:3b:37:d9:2b:a0:69:7c:e4:b5:de:
e1:78:fc:d9:12:f9:28:2f:14:b9:77:93:42:e4:ca:
5b:30:8d:a9:16:2f:09:bd:47:46:63:c8:c4:2b:8a:
d8:64:22:e7:a1:28:98:fc:80:f5:0b:29:9c:e3:b5:
a0:6c:4e:16:26:74:ae:2c:cb:06:46:9c:a1:1f:43:
e4:4b:db:e5:12:e7:a6:d6:bb:88:75:d0:f7:88:29:
ea:66:a3:80:69:94:32:4a:0b:b4:76:2c:4c:c7:dd:
43:97:6d:cb:59:f7:61:20:bf:d0:7a:9c:cc:d7:df:
d5:63:ed:62:a4:a7:d1:0a:cf:61:d2:ae:4e:92:83:
77:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:A5:CE:2D:5A:FF:4D:70:19:1D:D7:00:87:16:0B:13:09:1B:7F:82
X509v3 Authority Key Identifier:
keyid:05:2B:45:49:AE:7E:4E:27:CD:57:65:C8:E8:2C:77:61:8C:EC:27:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a6ebe33530373d2c2bffaaed1e53f05db8e2a436.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/71b2d803-0a93-4e95-99f0-13c753ed136c/fdc7c8fe999b357ec93d7530e255aba3684f65cf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/71b2d803-0a93-4e95-99f0-13c753ed136c/a6ebe33530373d2c2bffaaed1e53f05db8e2a436.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.177.108.0/22
Signature Algorithm: sha256WithRSAEncryption
b3:9f:2c:a6:54:46:ad:31:d4:13:1b:0d:27:1a:af:ee:48:23:
31:98:08:c6:c1:e1:8d:bc:be:8f:c7:9d:93:3c:ab:01:ba:9c:
ce:a9:78:e9:cc:28:2b:cc:ce:fb:aa:b7:ca:75:c4:76:be:78:
07:9e:85:56:82:a2:28:45:89:66:5d:fb:58:9d:47:69:b0:65:
26:d2:bc:d1:e5:c6:af:40:c0:be:08:9d:b4:f9:ce:1e:49:20:
ac:d7:52:e0:d8:ae:6a:ee:d0:47:89:55:23:a0:9e:b0:b0:3f:
f0:07:12:a5:17:3e:fb:4f:84:aa:96:80:99:00:57:0e:c8:1f:
2c:40:9e:53:e2:21:3c:2b:81:2e:94:44:b6:33:d7:9c:1e:3e:
86:d8:90:73:cf:0b:6f:fc:31:69:dd:65:b6:52:82:41:64:a5:
05:a1:e6:47:6d:15:87:fc:0f:ad:93:fb:17:0c:22:93:6c:88:
f9:e3:9c:9e:fd:08:3c:70:a6:e2:7e:10:3e:05:4a:ba:6e:55:
c4:ec:55:fe:bf:82:b8:6d:77:75:54:3f:7a:3e:ff:26:2c:3b:
20:90:44:4e:08:cc:59:63:af:bf:86:7c:42:98:44:ad:02:b2:
a9:a1:2a:86:21:09:a7:68:38:70:47:be:e4:49:72:96:15:e2:
59:b5:fe:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:38 2024 by rpki-client on console-ams.rpki-client.org