Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/82124976-cabd-45bc-87d6-d972b64d0f40/ff731bcfd1b3e2491e720e9e6bfbaece4ee2f690.roa
File: ff731bcfd1b3e2491e720e9e6bfbaece4ee2f690.roa (raw, json)
Hash identifier: 8GohuAcI0tH85/kj1OGcZQzfVTNvF45R+yM9/ikRZPA=
Subject key identifier: 4D:B9:D0:A4:91:86:81:D2:7F:E1:3A:8F:1B:CE:45:67:79:B3:F4:74
Certificate issuer: /CN=9dcf18a346927814b6691b49d822d55f0dc1093b
Certificate serial: 25C952
Authority key identifier: CE:2C:E9:B9:A2:FC:3A:4A:A0:C4:13:39:3B:72:F8:12:DF:25:03:CF
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9dcf18a346927814b6691b49d822d55f0dc1093b.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/82124976-cabd-45bc-87d6-d972b64d0f40/ff731bcfd1b3e2491e720e9e6bfbaece4ee2f690.roa
Signing time: Mon 22 Jan 2024 07:30:00 +0000
ROA not before: Mon 22 Jan 2024 07:30:00 +0000
ROA not after: Wed 21 Jan 2026 07:30:00 +0000
asID: 270094
IP address blocks: 45.237.132.0/24 maxlen: 24
45.237.133.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2476370 (0x25c952)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dcf18a346927814b6691b49d822d55f0dc1093b
Validity
Not Before: Jan 22 07:30:00 2024 GMT
Not After : Jan 21 07:30:00 2026 GMT
Subject: CN=ff731bcfd1b3e2491e720e9e6bfbaece4ee2f690
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ef:09:7d:7d:bf:c3:9d:e8:38:ca:d9:d7:3b:
3e:ba:bf:fc:71:f7:04:00:ff:e1:15:fb:a7:a0:d5:
d8:50:10:75:dc:c6:cf:b5:6d:72:10:b0:4c:5b:fd:
0a:73:01:1f:83:f8:aa:e6:6c:ba:29:eb:c3:e8:93:
0e:2d:47:69:28:ba:c9:23:e9:80:fd:2e:a4:84:6a:
c6:1f:f5:85:ac:f2:84:ba:19:77:68:73:33:06:4a:
4d:d7:4c:f7:7d:67:51:65:a1:34:bb:6e:04:c9:bf:
b8:ef:1a:86:8f:82:cf:93:18:a2:37:a1:4a:42:e2:
aa:97:ed:48:1e:75:c6:40:3d:88:23:fc:62:80:4a:
70:3d:10:91:7d:e6:6d:cb:ec:fb:f8:19:29:45:1c:
9d:08:3d:e9:19:f4:ea:c3:dd:7f:98:87:3f:7a:ac:
50:d1:95:f9:0d:5b:13:cc:da:6f:ab:1e:18:6e:18:
b9:31:b5:32:51:3d:49:ae:81:60:92:73:19:1d:a8:
84:18:29:8a:aa:36:44:f3:f3:8f:98:0f:16:6d:7f:
79:20:10:4d:a3:11:f4:43:ee:2e:5d:9e:19:d4:a0:
42:dd:9c:34:38:15:5c:b0:74:09:47:bf:3a:f8:d8:
52:4e:67:51:32:73:8b:8f:22:b5:f0:4b:22:22:ff:
c5:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:B9:D0:A4:91:86:81:D2:7F:E1:3A:8F:1B:CE:45:67:79:B3:F4:74
X509v3 Authority Key Identifier:
keyid:CE:2C:E9:B9:A2:FC:3A:4A:A0:C4:13:39:3B:72:F8:12:DF:25:03:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9dcf18a346927814b6691b49d822d55f0dc1093b.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/82124976-cabd-45bc-87d6-d972b64d0f40/ff731bcfd1b3e2491e720e9e6bfbaece4ee2f690.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/82124976-cabd-45bc-87d6-d972b64d0f40/9dcf18a346927814b6691b49d822d55f0dc1093b.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.237.132.0/23
Signature Algorithm: sha256WithRSAEncryption
8a:ae:df:d7:3c:e8:d0:19:48:2d:5b:58:ca:9a:48:36:97:81:
d4:f1:a0:4c:c2:30:e7:41:c7:11:93:be:96:51:89:30:b6:dd:
19:28:bb:ae:58:8a:63:bb:75:c5:3b:22:92:8d:c6:af:e7:91:
6d:a9:ec:d6:98:2d:55:20:8d:19:f6:b5:b1:4e:e1:49:54:d0:
f2:c8:5d:c2:70:20:eb:0e:2e:29:7f:5b:8f:18:ce:b5:3a:a0:
5c:da:3d:96:5a:9a:2d:c2:6c:64:b6:7e:72:86:64:a0:70:4d:
36:67:bd:cb:bc:ea:ad:f1:d4:52:51:25:ce:26:e2:c4:13:c2:
6c:8c:28:b0:33:c4:26:8d:03:f2:31:56:b9:9b:3a:a7:ae:c0:
87:c1:7f:86:c5:62:44:4c:03:30:f4:a6:38:62:22:fc:21:89:
9a:96:d7:05:7c:7f:f6:54:41:bc:f2:b5:48:98:3d:7c:8e:4f:
39:81:42:f5:a6:55:f9:a4:e3:c3:c8:23:9d:5d:4e:48:47:81:
b5:de:08:11:42:0b:07:70:bf:89:8b:a5:2d:ac:5a:32:2a:f6:
89:b8:44:4c:19:af:ba:69:d1:6d:82:0b:9c:a8:ab:1d:8e:46:
d1:77:55:77:25:38:89:db:69:1f:a0:51:4c:69:7d:9c:b5:b6:
aa:a4:df:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:39 2024 by rpki-client on console-ams.rpki-client.org