Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/85465a00-5312-479b-b0bc-50a855713057/1b8a7d2587055252433b2fafccdd0877d55530d4.roa
File: 1b8a7d2587055252433b2fafccdd0877d55530d4.roa (raw, json)
Hash identifier: jpELAEOfpWE3AmoxbipWJ1qMA0D3LDSorlu+UMBoanA=
Subject key identifier: 41:6F:2F:2A:96:18:DD:66:41:76:DC:DE:E2:E2:1D:FC:5C:40:03:62
Certificate issuer: /CN=598aa2c9c73a82e14dd9e582bacf5cf0d1f1e6a8
Certificate serial: 255B95
Authority key identifier: 27:30:5C:FD:AC:91:C7:E5:F4:45:EC:BC:15:6B:7D:1A:97:E6:E1:4C
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/598aa2c9c73a82e14dd9e582bacf5cf0d1f1e6a8.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/85465a00-5312-479b-b0bc-50a855713057/1b8a7d2587055252433b2fafccdd0877d55530d4.roa
Signing time: Thu 28 Dec 2023 16:53:12 +0000
ROA not before: Thu 28 Dec 2023 16:53:12 +0000
ROA not after: Sun 28 Dec 2025 16:53:12 +0000
asID: 264825
IP address blocks: 45.169.145.0/24 maxlen: 24
45.169.147.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2448277 (0x255b95)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=598aa2c9c73a82e14dd9e582bacf5cf0d1f1e6a8
Validity
Not Before: Dec 28 16:53:12 2023 GMT
Not After : Dec 28 16:53:12 2025 GMT
Subject: CN=1b8a7d2587055252433b2fafccdd0877d55530d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:af:e2:24:7d:1d:25:26:9d:2b:ef:55:d0:28:
d8:35:ed:88:d9:e7:6b:46:d0:f9:d0:e8:19:38:4a:
58:50:1b:4b:4d:76:39:02:96:1c:ac:0e:a1:b4:fd:
53:33:b8:ae:f7:67:ea:c7:79:f1:ce:19:bc:e0:92:
3d:3d:fb:47:11:f3:3a:b0:ad:1c:1d:36:ce:e7:58:
af:7b:05:bd:0b:61:49:a7:61:01:eb:4a:ef:bd:7b:
10:27:fd:e1:51:44:d8:e9:d6:50:1a:c6:10:5d:4d:
c4:86:e7:a2:96:fb:8b:d0:60:da:43:13:ac:9d:2d:
03:3f:4a:52:6f:73:46:55:2b:62:0d:29:c3:84:bd:
05:c1:88:c8:ae:a5:e8:e9:85:aa:63:37:a5:de:48:
f0:68:8c:dc:71:0c:42:c3:62:24:f0:a7:fd:92:0f:
89:7b:19:6b:29:29:56:0b:7e:f8:b1:a2:73:0e:78:
23:95:b1:02:f8:0e:32:59:c2:01:73:89:d1:80:14:
c7:24:28:c5:36:0e:00:b9:b2:a8:eb:91:ce:e0:a3:
aa:ef:9b:13:fb:91:d2:a7:2d:6a:fe:42:f2:85:72:
c3:7d:a4:4e:00:42:fc:ea:d6:d8:8d:31:ab:f1:b3:
42:c0:0e:94:a7:8f:88:7c:2d:ae:a5:07:73:fa:99:
dd:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:6F:2F:2A:96:18:DD:66:41:76:DC:DE:E2:E2:1D:FC:5C:40:03:62
X509v3 Authority Key Identifier:
keyid:27:30:5C:FD:AC:91:C7:E5:F4:45:EC:BC:15:6B:7D:1A:97:E6:E1:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/598aa2c9c73a82e14dd9e582bacf5cf0d1f1e6a8.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/85465a00-5312-479b-b0bc-50a855713057/1b8a7d2587055252433b2fafccdd0877d55530d4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/85465a00-5312-479b-b0bc-50a855713057/598aa2c9c73a82e14dd9e582bacf5cf0d1f1e6a8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.169.145.0/24
45.169.147.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:c5:ce:2b:3e:d2:96:a8:2e:87:68:9d:f2:d2:48:20:cc:03:
39:65:55:b2:37:f2:1f:36:94:b6:ed:00:51:39:d4:3a:77:36:
92:cd:ea:d2:d6:c4:b2:e2:ab:43:63:ea:e3:92:b4:c3:f0:72:
4b:f5:af:1b:99:cb:fa:5a:36:8b:fc:4c:89:ed:07:49:d5:a6:
6b:69:d4:66:82:22:1f:39:6c:5a:0b:92:c4:53:73:2f:a2:ea:
e4:42:2d:0f:ab:4b:ab:72:ac:cf:e7:68:ca:f5:ef:83:8a:76:
d2:26:78:55:d6:63:97:c0:9f:2f:5b:17:50:ad:3c:e8:4e:53:
06:c4:dd:89:b7:2f:84:51:65:35:25:ca:3b:c9:8b:12:33:23:
a2:23:e6:2e:d2:3c:0c:9a:a8:60:77:37:bd:c1:d7:f0:1a:e6:
32:72:d4:2b:42:9c:42:aa:c7:4a:f6:67:59:c8:4d:69:da:63:
27:82:3c:bc:e7:27:2e:36:eb:60:c7:14:06:ed:d4:b3:be:3e:
7d:da:ca:08:e0:d3:a2:73:df:5f:75:cf:ae:a1:9f:0f:cd:d0:
35:53:a6:4d:2c:6a:11:84:bf:90:c5:f3:6c:f0:7f:5b:c5:42:
bc:4f:55:ee:d2:6b:da:31:2c:3f:9f:9f:fa:b1:46:e1:1b:1f:
74:b3:97:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:53 2024 by rpki-client on console-fra.rpki-client.org