Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/84c08841-437f-4c6a-91e6-183763f57c51/09f967f9f2c8c757a901ba5863a87e38a497183f.roa
File: 09f967f9f2c8c757a901ba5863a87e38a497183f.roa (raw, json)
Hash identifier: MUOlwOB0IW1LHO1RykGvQXqdM+soq3x+870Cwc4IC4U=
Subject key identifier: 98:AD:DD:9B:21:73:28:5E:7F:0F:3D:25:3D:01:82:A4:2A:A0:C4:5F
Certificate issuer: /CN=f4cc2529c25b6ff72b64f9e86fd3c50d5a4a3ccb
Certificate serial: 08229A
Authority key identifier: 56:61:2E:13:6C:AF:57:C0:54:E7:1B:C5:5A:79:B9:9D:78:9E:1A:8B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f4cc2529c25b6ff72b64f9e86fd3c50d5a4a3ccb.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/84c08841-437f-4c6a-91e6-183763f57c51/09f967f9f2c8c757a901ba5863a87e38a497183f.roa
Signing time: Fri 15 Mar 2024 00:57:58 +0000
ROA not before: Fri 15 Mar 2024 00:57:58 +0000
ROA not after: Sun 15 Mar 2026 00:57:58 +0000
asID: 269836
IP address blocks: 45.176.70.0/24 maxlen: 24
45.176.71.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 533146 (0x8229a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4cc2529c25b6ff72b64f9e86fd3c50d5a4a3ccb
Validity
Not Before: Mar 15 00:57:58 2024 GMT
Not After : Mar 15 00:57:58 2026 GMT
Subject: CN=09f967f9f2c8c757a901ba5863a87e38a497183f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:86:1b:6f:5b:4d:da:0f:6a:c2:83:cd:0a:d2:
0c:16:ef:74:09:89:fc:2e:4c:0f:c4:94:49:1e:10:
b8:35:fc:35:ae:ea:e3:b3:5c:ac:0a:71:92:b7:52:
3b:45:2d:0f:2d:bf:f8:21:96:e1:38:33:3f:2d:6f:
0a:ec:fe:6e:79:97:d8:94:1d:cb:70:3e:94:2c:1d:
5b:5b:8c:74:f7:f3:c1:89:a0:31:67:46:ec:a2:7c:
e3:fb:4c:a0:e9:e0:31:d9:cb:af:a4:cf:7f:50:8b:
18:5a:db:27:59:f7:69:4e:6b:c5:1f:bf:67:99:c1:
08:db:fc:3e:e6:c0:27:73:4d:c3:2f:b0:20:0e:de:
6d:f5:7e:a0:ef:eb:08:dd:43:cb:3b:87:e5:59:64:
78:05:a3:ea:86:90:45:92:c4:ba:68:be:c2:55:35:
17:19:bc:31:a6:58:be:64:54:d3:49:eb:56:a8:34:
c8:0b:19:3a:63:b8:4e:c6:f6:65:e6:e0:0a:9f:7f:
73:bc:e7:97:b2:c4:1e:66:3a:be:b9:d1:02:8c:63:
ad:85:0d:83:5c:16:9f:e4:1b:6c:2a:81:2d:22:0f:
7c:87:9e:7d:56:cf:ba:a5:84:d6:10:b1:51:5f:ed:
88:f6:8c:69:f2:e0:53:34:d2:8e:54:25:61:e2:ab:
cf:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:AD:DD:9B:21:73:28:5E:7F:0F:3D:25:3D:01:82:A4:2A:A0:C4:5F
X509v3 Authority Key Identifier:
keyid:56:61:2E:13:6C:AF:57:C0:54:E7:1B:C5:5A:79:B9:9D:78:9E:1A:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f4cc2529c25b6ff72b64f9e86fd3c50d5a4a3ccb.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/84c08841-437f-4c6a-91e6-183763f57c51/09f967f9f2c8c757a901ba5863a87e38a497183f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/84c08841-437f-4c6a-91e6-183763f57c51/f4cc2529c25b6ff72b64f9e86fd3c50d5a4a3ccb.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.176.70.0/23
Signature Algorithm: sha256WithRSAEncryption
0e:d3:4b:30:f5:54:ae:f7:2e:15:3c:6f:c4:31:13:8b:54:11:
0e:6d:1a:83:b9:91:00:17:e7:1b:80:8a:76:d4:da:8f:3d:e4:
34:47:99:8c:a3:8f:ca:31:a6:6f:80:ef:f7:f2:61:30:8c:e0:
37:d9:34:da:0e:d0:02:6f:8f:79:04:6c:c4:1b:52:73:10:81:
5c:d8:7c:bf:0c:a6:b5:dc:e4:47:17:77:58:7e:b7:f1:4d:be:
8b:3c:6c:2e:48:6c:30:56:cd:23:b5:8e:3f:c9:36:9b:93:2a:
6b:44:42:3b:69:a2:28:3c:a2:7d:3c:7a:e7:a9:ba:23:10:5d:
55:5c:85:3c:17:22:54:fc:ff:35:5b:e9:81:5a:88:03:08:e8:
62:78:c7:22:61:e5:11:53:18:8b:17:59:a9:82:ad:0f:99:5e:
47:f7:28:65:5a:d1:b9:2d:3c:5e:3a:b6:71:66:e8:8b:f0:7a:
f0:c5:6f:e5:69:39:5c:94:c7:2c:12:b1:7d:22:79:f9:95:69:
d2:ec:93:3c:5b:09:68:08:87:e6:f3:db:9c:cf:5c:53:e1:2d:
2f:d0:54:28:09:8f:f7:3d:8e:fd:c3:4d:cc:b6:77:f9:51:dc:
49:fc:b5:25:6a:3a:ae:2d:c6:ed:40:1c:91:68:18:af:93:ab:
a3:22:06:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:23 2024 by rpki-client on console-fra.rpki-client.org