Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/85745477-cf2f-4c9b-bbc1-366019d6950c/258ccbe59d95e03b37a0ad10a611709ac5e3300e.roa
File: 258ccbe59d95e03b37a0ad10a611709ac5e3300e.roa (raw, json)
Hash identifier: nnpmiAMgP4webetVvpNWi4jMcJoHtqwHEg1NhItamxM=
Subject key identifier: A6:44:A0:EA:83:B1:9C:04:FB:3C:E9:C8:CE:A7:12:07:2B:8B:CD:E5
Certificate issuer: /CN=10c38b9181161ced9b3aca715f10eb6f09968296
Certificate serial: 249C55
Authority key identifier: 32:4D:86:3A:FF:AF:AC:1D:7E:B0:AC:0A:5D:8D:43:65:EE:3B:C0:17
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/10c38b9181161ced9b3aca715f10eb6f09968296.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/85745477-cf2f-4c9b-bbc1-366019d6950c/258ccbe59d95e03b37a0ad10a611709ac5e3300e.roa
Signing time: Thu 04 Jan 2024 17:52:45 +0000
ROA not before: Thu 04 Jan 2024 17:52:44 +0000
ROA not after: Sun 04 Jan 2026 17:52:44 +0000
asID: 269791
IP address blocks: 45.184.102.0/24 maxlen: 24
2801:16:4800::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2399317 (0x249c55)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10c38b9181161ced9b3aca715f10eb6f09968296
Validity
Not Before: Jan 4 17:52:44 2024 GMT
Not After : Jan 4 17:52:44 2026 GMT
Subject: CN=258ccbe59d95e03b37a0ad10a611709ac5e3300e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:41:5e:44:9b:98:b8:2f:18:06:37:36:5f:79:
50:ff:48:eb:53:a1:73:4b:8c:c2:b4:1b:ff:a1:59:
f0:91:1d:75:e3:57:71:84:a2:46:83:7b:1e:94:a5:
32:72:09:b4:7a:e4:ff:8c:e0:0e:58:82:95:f8:9a:
8e:81:b5:9f:bf:7d:f4:d6:7e:c1:1c:85:99:94:6f:
5b:d9:66:47:54:2b:8a:dc:89:c8:9c:dd:54:28:6c:
97:a9:94:3e:c6:a5:ef:73:c1:e0:15:e1:a8:b8:db:
c0:8c:20:d1:ec:fc:80:0a:4f:5a:ec:ce:33:bc:03:
ad:9e:d4:20:30:2d:86:15:20:1d:49:05:a0:40:69:
01:ac:cc:ce:6d:8d:59:78:3e:37:57:d8:31:9b:73:
39:89:82:2d:69:aa:5e:c9:c2:cc:df:40:f4:1d:6b:
27:70:3d:6f:8e:fb:a2:c6:b5:cb:5d:93:8d:d6:82:
3f:31:cb:63:07:ac:43:bb:5b:06:52:c5:76:77:e0:
c3:6a:ff:67:b1:ea:52:1c:f8:62:45:80:61:4e:78:
2b:0b:79:a4:a5:cf:6b:98:12:67:a7:2d:63:b7:6b:
5b:5d:e4:88:37:f8:ef:ec:f9:48:a9:1b:43:48:42:
6c:e4:05:60:0e:29:f3:b3:50:2d:fe:83:6c:f1:24:
26:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:44:A0:EA:83:B1:9C:04:FB:3C:E9:C8:CE:A7:12:07:2B:8B:CD:E5
X509v3 Authority Key Identifier:
keyid:32:4D:86:3A:FF:AF:AC:1D:7E:B0:AC:0A:5D:8D:43:65:EE:3B:C0:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/10c38b9181161ced9b3aca715f10eb6f09968296.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/85745477-cf2f-4c9b-bbc1-366019d6950c/258ccbe59d95e03b37a0ad10a611709ac5e3300e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/85745477-cf2f-4c9b-bbc1-366019d6950c/10c38b9181161ced9b3aca715f10eb6f09968296.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.184.102.0/24
IPv6:
2801:16:4800::/48
Signature Algorithm: sha256WithRSAEncryption
4c:ba:8f:e3:3f:9a:99:dd:65:83:4d:cb:3e:1b:12:ca:db:2d:
bf:da:47:79:07:67:8d:c7:c0:2b:3b:7a:d9:7e:91:2c:2a:ac:
0e:b4:3d:44:a2:1d:55:06:77:ae:8e:6f:0a:c9:67:78:32:fd:
09:35:77:bf:60:3d:fe:7e:fa:4c:20:94:ca:9d:f5:c9:9b:ce:
af:5c:3f:c3:54:11:9e:6b:c5:ec:82:8a:9f:98:d5:f9:96:b3:
87:2b:af:9b:b8:69:7b:13:de:a4:b7:71:2d:fc:4a:d2:9d:96:
09:0f:36:39:a2:cc:83:9e:e2:96:55:2c:87:00:13:8c:ad:5e:
e2:a1:93:c5:70:ff:f0:5e:12:2e:7a:14:00:9d:a6:1b:25:b2:
9d:61:31:5d:f2:12:54:4d:f1:ed:96:05:d0:20:08:8c:79:ae:
c5:26:ae:0c:30:3b:b3:ee:3f:ac:d1:85:76:e7:b6:61:cb:a8:
12:f6:aa:c0:66:04:81:de:e9:e5:58:84:66:f0:57:f6:5a:be:
b5:6b:2e:4a:67:24:4c:3e:e5:11:29:2d:ee:fc:f9:66:db:a0:
66:41:52:87:8f:a4:1e:fe:99:9b:01:29:28:88:29:f2:79:65:
3e:33:2f:e9:63:7f:9e:c2:3d:aa:df:e8:e7:38:5c:91:7e:dd:
7d:f0:d4:f3
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIDJJxVMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDEw
YzM4YjkxODExNjFjZWQ5YjNhY2E3MTVmMTBlYjZmMDk5NjgyOTYwHhcNMjQwMTA0
MTc1MjQ0WhcNMjYwMTA0MTc1MjQ0WjAzMTEwLwYDVQQDEygyNThjY2JlNTlkOTVl
MDNiMzdhMGFkMTBhNjExNzA5YWM1ZTMzMDBlMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAvEFeRJuYuC8YBjc2X3lQ/0jrU6FzS4zCtBv/oVnwkR1141dx
hKJGg3selKUycgm0euT/jOAOWIKV+JqOgbWfv3301n7BHIWZlG9b2WZHVCuK3InI
nN1UKGyXqZQ+xqXvc8HgFeGouNvAjCDR7PyACk9a7M4zvAOtntQgMC2GFSAdSQWg
QGkBrMzObY1ZeD43V9gxm3M5iYItaapeycLM30D0HWsncD1vjvuixrXLXZON1oI/
MctjB6xDu1sGUsV2d+DDav9nsepSHPhiRYBhTngrC3mkpc9rmBJnpy1jt2tbXeSI
N/jv7PlIqRtDSEJs5AVgDinzs1At/oNs8SQmUwIDAQABo4ICbDCCAmgwHQYDVR0O
BBYEFKZEoOqDsZwE+zzpyM6nEgcri83lMB8GA1UdIwQYMBaAFDJNhjr/r6wdfrCs
Cl2NQ2XuO8AXMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMTBjMzhi
OTE4MTE2MWNlZDliM2FjYTcxNWYxMGViNmYwOTk2ODI5Ni5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvODU3NDU0NzctY2YyZi00YzliLWJiYzEtMzY2MDE5
ZDY5NTBjLzI1OGNjYmU1OWQ5NWUwM2IzN2EwYWQxMGE2MTE3MDlhYzVlMzMwMGUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy84NTc0NTQ3Ny1jZjJmLTRjOWItYmJjMS0zNjYw
MTlkNjk1MGMvMTBjMzhiOTE4MTE2MWNlZDliM2FjYTcxNWYxMGViNmYwOTk2ODI5
Ni5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAwBggrBgEFBQcBBwEB/wQh
MB8wDAQCAAEwBgMEAC24ZjAPBAIAAjAJAwcAKAEAFkgAMA0GCSqGSIb3DQEBCwUA
A4IBAQBMuo/jP5qZ3WWDTcs+GxLK2y2/2kd5B2eNx8ArO3rZfpEsKqwOtD1Eoh1V
Bneujm8KyWd4Mv0JNXe/YD3+fvpMIJTKnfXJm86vXD/DVBGea8XsgoqfmNX5lrOH
K6+buGl7E96kt3Et/ErSnZYJDzY5osyDnuKWVSyHABOMrV7ioZPFcP/wXhIuehQA
naYbJbKdYTFd8hJUTfHtlgXQIAiMea7FJq4MMDuz7j+s0YV257Zhy6gS9qrAZgSB
3unlWIRm8Ff2Wr61ay5KZyRMPuURKS3u/Plm26BmQVKHj6Qe/pmbASkoiCnyeWU+
My/pY3+ewj2q3+jnOFyRft198NTz
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:39 2024 by rpki-client on console-ams.rpki-client.org