Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/85fc2657-9dd5-4e18-a043-c1ed96730bf8/09c1a24aa14e93619bdd6fee43330dbe80ab862d.roa
File: 09c1a24aa14e93619bdd6fee43330dbe80ab862d.roa (raw, json)
Hash identifier: wEgH6SxPaw7Ze0QNZS4xvmwHsNOGFMVb4w0ohEcXAtk=
Subject key identifier: 70:C6:EB:90:53:22:78:C8:CE:48:13:5E:5A:AD:8D:5E:89:31:9A:EC
Certificate issuer: /CN=f58e9ace5695e188fe50f2a761d818e79976c086
Certificate serial: 199246
Authority key identifier: 3B:44:B4:FF:F3:2A:0D:D1:04:80:2C:2B:B3:16:B8:95:8B:E1:4E:CF
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f58e9ace5695e188fe50f2a761d818e79976c086.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/85fc2657-9dd5-4e18-a043-c1ed96730bf8/09c1a24aa14e93619bdd6fee43330dbe80ab862d.roa
Signing time: Wed 31 May 2023 20:10:30 +0000
ROA not before: Tue 30 May 2023 20:10:30 +0000
ROA not after: Sat 31 May 2025 20:10:30 +0000
asID: 266684
IP address blocks: 45.228.220.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1675846 (0x199246)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f58e9ace5695e188fe50f2a761d818e79976c086
Validity
Not Before: May 30 20:10:30 2023 GMT
Not After : May 31 20:10:30 2025 GMT
Subject: CN=09c1a24aa14e93619bdd6fee43330dbe80ab862d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a2:50:02:50:51:a0:f5:50:3c:fb:db:61:bc:
68:c7:de:0a:96:4c:7a:30:9a:16:84:72:1c:bf:44:
08:18:50:da:57:e0:c1:84:89:ad:79:ce:40:05:24:
46:38:47:36:e6:df:38:26:c1:a2:3e:d3:35:25:fa:
a6:55:c6:f9:10:4c:04:84:3a:bf:6d:d2:de:02:0e:
f4:f8:ca:d9:90:c2:b5:fa:69:44:56:70:18:26:22:
e8:2d:af:17:2b:42:2b:40:b5:61:8f:41:10:74:e6:
5c:32:01:a0:4d:7d:8f:5f:80:7b:09:80:7d:9f:ea:
f2:59:20:e8:e0:3d:0e:51:e9:7a:fe:7c:7f:5c:1d:
12:79:b7:34:6b:e6:9b:23:78:0f:f9:af:37:e1:9a:
ed:4f:cc:c5:03:a4:7a:8a:91:98:d5:ff:bb:1e:6b:
49:92:cb:a4:ce:46:0b:ff:c1:6f:70:f0:1b:7e:14:
1f:a2:2e:1c:e3:7f:54:41:b9:ca:3a:de:d9:04:e3:
f6:36:ef:cb:4e:fe:c3:07:4f:09:99:54:49:91:e0:
4b:e7:f2:e1:e3:3c:20:2d:58:5c:eb:d5:fd:e4:70:
f8:4d:e9:5a:69:12:93:c9:34:b7:02:e9:b8:f0:93:
5e:b9:6c:93:64:38:a9:95:87:0f:cb:7f:20:f7:c7:
a9:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:C6:EB:90:53:22:78:C8:CE:48:13:5E:5A:AD:8D:5E:89:31:9A:EC
X509v3 Authority Key Identifier:
keyid:3B:44:B4:FF:F3:2A:0D:D1:04:80:2C:2B:B3:16:B8:95:8B:E1:4E:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f58e9ace5695e188fe50f2a761d818e79976c086.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/85fc2657-9dd5-4e18-a043-c1ed96730bf8/09c1a24aa14e93619bdd6fee43330dbe80ab862d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/85fc2657-9dd5-4e18-a043-c1ed96730bf8/f58e9ace5695e188fe50f2a761d818e79976c086.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.228.220.0/24
Signature Algorithm: sha256WithRSAEncryption
50:dd:3e:2f:b1:22:a5:55:53:d8:78:f1:48:b7:ec:83:e7:b0:
6e:81:4b:8e:75:a1:9f:dd:96:9b:2c:0d:5b:67:a3:47:af:75:
d4:3d:3e:c1:23:0f:b3:59:07:a6:8d:75:4c:3b:75:46:7b:1d:
7f:e6:f8:27:ae:04:c2:67:57:8e:2e:7f:e3:9c:55:99:56:ca:
13:85:65:7b:47:88:dd:38:3a:81:f9:33:34:39:51:97:d1:be:
cc:97:22:4b:88:b5:50:1b:23:27:9b:1b:1a:a7:c8:af:81:f1:
60:ff:64:f4:f4:a4:1e:28:c7:1f:49:0d:fe:e7:5d:18:2d:ea:
b3:72:a3:98:5b:81:ee:13:6f:25:40:d1:32:d5:60:66:a2:2b:
20:d4:7b:43:41:e6:88:a3:77:ae:76:2d:58:17:d8:34:45:0e:
27:35:21:9f:cf:12:eb:a8:3a:1d:79:68:db:5e:8d:38:10:e3:
a0:c7:b1:2c:ca:ae:1c:85:4f:0c:a0:9e:71:4c:34:98:5a:92:
53:65:e0:00:4e:30:21:3d:c2:79:11:7c:01:2b:f8:f0:e8:9b:
9c:3a:93:5b:bf:3e:d2:0b:ec:79:36:27:3c:ca:e4:23:98:ec:
ba:3e:fc:b0:92:5f:b4:10:41:3c:0c:3c:49:ca:b9:97:f9:2c:
7b:7e:db:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:39 2024 by rpki-client on console-ams.rpki-client.org