Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/81c0ed88-23aa-434c-ab96-0650ae7fd486/ee3c678b86e83a8bd54e24c19ad80ead43941de2.roa
File: ee3c678b86e83a8bd54e24c19ad80ead43941de2.roa (raw, json)
Hash identifier: 8dRkY9V74MWWXxtXvP1STiVQTc8/3nkryQCsSlktsD0=
Subject key identifier: 78:3E:30:3A:10:53:D9:E5:28:3C:91:B1:81:2E:2E:58:D9:E4:27:91
Certificate issuer: /CN=3bac802a13d8e3e1c4a05f9a396fca3ff0817e04
Certificate serial: 0D6B00
Authority key identifier: A1:88:2D:3E:B4:49:04:90:10:F8:26:C3:E9:34:C6:82:9C:EA:91:81
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3bac802a13d8e3e1c4a05f9a396fca3ff0817e04.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/81c0ed88-23aa-434c-ab96-0650ae7fd486/ee3c678b86e83a8bd54e24c19ad80ead43941de2.roa
Signing time: Wed 24 Mar 2021 14:41:05 +0000
ROA not before: Wed 24 Mar 2021 14:41:05 +0000
ROA not after: Tue 24 Mar 2026 14:41:05 +0000
asID: 266667
IP address blocks: 45.228.172.0/24 maxlen: 24
45.228.173.0/24 maxlen: 24
45.228.174.0/24 maxlen: 24
45.228.175.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 879360 (0xd6b00)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bac802a13d8e3e1c4a05f9a396fca3ff0817e04
Validity
Not Before: Mar 24 14:41:05 2021 GMT
Not After : Mar 24 14:41:05 2026 GMT
Subject: CN=ee3c678b86e83a8bd54e24c19ad80ead43941de2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:59:e4:76:a6:d3:e0:c4:39:da:8f:c0:7d:05:
cf:d6:66:ef:f9:a8:2d:41:4d:80:f9:ff:05:af:3b:
a6:8e:46:22:dd:b9:09:ef:6c:75:7c:16:51:80:15:
04:60:71:40:6a:89:72:b2:48:cb:f1:c2:e1:33:7d:
4b:1f:e0:77:91:6a:b6:5d:c5:7f:25:c2:e9:81:40:
af:62:56:ef:a6:79:30:b3:99:da:03:5c:1f:61:51:
dc:d3:0d:da:54:85:0b:98:38:be:04:db:b0:06:5d:
74:ef:64:10:72:aa:14:3d:df:8d:d2:1e:6f:48:d6:
51:1f:e6:11:9f:d4:5b:ec:37:87:6a:f3:db:be:af:
c5:5c:44:95:b1:cf:25:3c:ef:0b:15:fb:90:e9:0d:
ea:0e:67:33:50:be:bf:fa:01:1e:2b:b1:96:5b:d3:
16:e3:01:bb:e2:71:8c:c1:b8:69:cb:3f:d1:f3:47:
21:5e:ed:33:a5:df:7f:a2:41:33:36:5c:d5:87:e0:
20:57:a7:09:80:55:73:2f:cd:14:7e:4c:7a:46:23:
41:32:f8:e7:df:bc:b1:20:d8:86:4c:64:ec:35:40:
2a:43:45:2b:d8:be:e7:85:50:2a:a3:6e:60:bc:05:
db:c1:73:fe:77:f8:ec:f3:25:f4:ee:4f:5a:c7:67:
09:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:3E:30:3A:10:53:D9:E5:28:3C:91:B1:81:2E:2E:58:D9:E4:27:91
X509v3 Authority Key Identifier:
keyid:A1:88:2D:3E:B4:49:04:90:10:F8:26:C3:E9:34:C6:82:9C:EA:91:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3bac802a13d8e3e1c4a05f9a396fca3ff0817e04.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/81c0ed88-23aa-434c-ab96-0650ae7fd486/ee3c678b86e83a8bd54e24c19ad80ead43941de2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/81c0ed88-23aa-434c-ab96-0650ae7fd486/3bac802a13d8e3e1c4a05f9a396fca3ff0817e04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.228.172.0/22
Signature Algorithm: sha256WithRSAEncryption
51:ff:cf:e7:13:ec:21:7c:de:aa:e4:f3:3b:9a:5a:a8:1f:fd:
cd:16:11:17:f5:af:f2:0c:3e:94:f9:0b:fa:32:29:e5:23:13:
6f:d4:72:82:ef:2c:73:2c:6d:ed:a6:dc:97:55:5d:b1:9f:b0:
a7:63:f5:51:68:4c:7e:28:5c:6a:77:71:3c:56:d0:fc:ec:81:
52:14:e4:f6:0f:ca:2b:4e:4f:4e:10:12:14:6c:c7:fb:45:c8:
b0:d6:5d:46:90:69:49:1c:61:4e:71:d3:30:52:b4:63:a2:0c:
9f:95:f9:15:a3:df:54:9c:54:aa:0b:13:1c:96:54:bd:15:7c:
d8:25:c8:c5:c1:00:af:1d:f8:14:bf:d7:95:91:f7:d4:56:3a:
1a:81:c2:cb:45:a4:2c:04:3d:ea:26:97:0b:61:d8:65:d3:99:
46:81:92:da:2f:a0:68:d9:7f:4c:f4:4b:6a:ac:d5:1d:64:69:
30:d8:7b:75:6c:0b:19:02:98:19:2a:6f:b2:91:aa:7a:34:56:
75:eb:e1:ba:a8:82:64:5c:cf:7e:84:98:72:ca:a7:31:3a:92:
1a:11:a5:99:54:24:f2:72:d3:03:7e:a6:a6:ae:ca:b5:1e:80:
b3:1c:ec:73:b3:12:5c:3c:ba:a0:41:40:bc:14:f7:75:86:f3:
f5:1a:58:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:39 2024 by rpki-client on console-ams.rpki-client.org