Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/81049f88-bd42-4cae-b6ff-905071ba89e2/08d49a1cac0de37ebb5763f8b45933376e310639.roa
File: 08d49a1cac0de37ebb5763f8b45933376e310639.roa (raw, json)
Hash identifier: kw2uNZyG5tzwT/CyLm5HyKZo0CTh6o6sVF2th+5SBtw=
Subject key identifier: B6:6B:F8:FA:97:EC:F2:59:BA:B8:A8:AB:A3:6B:53:C2:B7:47:97:C0
Certificate issuer: /CN=dd138b8ca95e6a9f9b4da79a251cae5840e1b370
Certificate serial: 0A1986
Authority key identifier: 6E:61:07:E7:A9:6D:EA:C6:DC:86:C2:37:4C:5F:81:94:43:A6:D2:0F
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dd138b8ca95e6a9f9b4da79a251cae5840e1b370.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/81049f88-bd42-4cae-b6ff-905071ba89e2/08d49a1cac0de37ebb5763f8b45933376e310639.roa
Signing time: Tue 09 Apr 2024 13:05:35 +0000
ROA not before: Tue 09 Apr 2024 13:05:35 +0000
ROA not after: Thu 09 Apr 2026 13:05:35 +0000
asID: 267706
IP address blocks: 45.164.228.0/23 maxlen: 24
45.164.230.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 661894 (0xa1986)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd138b8ca95e6a9f9b4da79a251cae5840e1b370
Validity
Not Before: Apr 9 13:05:35 2024 GMT
Not After : Apr 9 13:05:35 2026 GMT
Subject: CN=08d49a1cac0de37ebb5763f8b45933376e310639
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:65:6f:bb:e0:9b:ce:fa:5d:8e:05:96:b1:3b:
12:c8:dc:84:99:8c:d0:cd:b6:3b:38:2c:a3:be:07:
6c:6e:51:6d:1a:d4:7d:7e:55:b9:27:9d:be:c3:94:
79:76:ce:d4:3e:79:a6:ec:4f:33:7e:76:2a:7e:16:
97:7d:2e:63:07:64:34:e4:d9:a3:a2:c0:94:1a:49:
70:40:a1:e6:cc:ca:03:83:36:93:cb:61:19:7a:f6:
9d:f9:30:18:b9:ef:56:48:d0:89:6c:6e:90:b8:36:
5c:56:8b:c1:2e:18:91:e7:d9:a0:e7:20:0f:b9:ba:
f4:eb:2c:ec:3d:8b:69:ee:7f:8d:f4:0d:a7:0b:ed:
06:8a:a2:9c:8f:1f:4f:ad:fe:91:1d:fd:12:ae:d6:
89:e2:73:7c:1e:15:fe:85:c3:f8:c6:a0:bd:c3:61:
36:9d:fb:85:bf:d5:f6:a1:c7:08:45:c4:08:f8:4a:
9b:cc:e4:c1:64:8b:fc:92:f2:17:58:8f:08:9a:98:
5c:de:8b:cc:2f:d2:72:d9:b4:05:96:2c:cd:ea:68:
f8:f5:19:ec:28:07:4c:70:30:18:84:94:f3:3c:3a:
59:5f:a2:59:d8:81:e7:36:61:bf:fa:d2:69:a6:4b:
b2:26:7e:cd:b9:2a:07:1f:83:fb:f5:3a:38:4f:df:
95:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:6B:F8:FA:97:EC:F2:59:BA:B8:A8:AB:A3:6B:53:C2:B7:47:97:C0
X509v3 Authority Key Identifier:
keyid:6E:61:07:E7:A9:6D:EA:C6:DC:86:C2:37:4C:5F:81:94:43:A6:D2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dd138b8ca95e6a9f9b4da79a251cae5840e1b370.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/81049f88-bd42-4cae-b6ff-905071ba89e2/08d49a1cac0de37ebb5763f8b45933376e310639.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/81049f88-bd42-4cae-b6ff-905071ba89e2/dd138b8ca95e6a9f9b4da79a251cae5840e1b370.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.164.228.0-45.164.230.255
Signature Algorithm: sha256WithRSAEncryption
74:4d:0a:a9:31:c6:cc:3b:ae:d2:c6:a1:0c:9b:eb:ed:88:fb:
35:fa:f6:a0:ee:a9:64:01:f9:b4:d5:c8:26:6d:f4:8d:73:8c:
fe:51:b3:18:ec:0c:95:53:dd:20:ea:d6:b9:de:6f:cb:9f:32:
52:26:b6:6b:60:e5:c2:15:4d:dd:df:6c:a4:48:10:3a:41:44:
18:cb:b3:c8:72:2f:cf:ea:5e:3e:a7:90:13:f5:66:d6:0e:23:
87:fb:2a:d8:e6:56:d8:4f:1c:3a:2c:69:ba:1b:0e:31:48:68:
4a:43:9f:21:81:83:fc:58:73:69:b9:25:36:7d:de:ed:bf:00:
ba:a5:8b:9a:e8:80:1f:b3:2c:2c:07:5a:68:30:e7:5b:d7:68:
e3:15:79:ec:2c:8d:7e:01:49:6b:95:34:54:ad:c5:ee:b3:e3:
6b:a1:34:8a:b8:5a:09:f2:9d:49:51:37:01:8d:cc:0d:98:51:
a2:25:ea:bf:af:d8:b2:9d:e2:de:ab:c0:bf:3f:92:e5:18:43:
a4:14:b3:76:3d:ed:d6:62:ae:a0:9a:85:00:35:07:d4:9e:04:
ea:68:91:18:fb:12:5f:d9:aa:af:08:b5:70:e0:65:f8:a1:af:
13:0c:8b:5e:fa:0c:3a:6c:56:ce:d8:93:55:a8:99:c2:b0:d6:
f6:99:75:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:39 2024 by rpki-client on console-ams.rpki-client.org