Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/85fc2657-9dd5-4e18-a043-c1ed96730bf8/a53e4b2a441b6c996e21a4d2ad46a09ba5056da3.roa
File: a53e4b2a441b6c996e21a4d2ad46a09ba5056da3.roa (raw, json)
Hash identifier: Ty9oenpSBlQKen41b4Z1rN7jBLGxRPRMk0iDIDflH50=
Subject key identifier: 64:F7:A4:87:81:51:85:31:F4:E8:73:5B:85:D0:EA:10:89:68:46:40
Certificate issuer: /CN=f58e9ace5695e188fe50f2a761d818e79976c086
Certificate serial: 207F70
Authority key identifier: 3B:44:B4:FF:F3:2A:0D:D1:04:80:2C:2B:B3:16:B8:95:8B:E1:4E:CF
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f58e9ace5695e188fe50f2a761d818e79976c086.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/85fc2657-9dd5-4e18-a043-c1ed96730bf8/a53e4b2a441b6c996e21a4d2ad46a09ba5056da3.roa
Signing time: Mon 19 Feb 2024 13:38:02 +0000
ROA not before: Mon 19 Feb 2024 13:38:01 +0000
ROA not after: Thu 19 Feb 2026 13:38:01 +0000
asID: 266684
IP address blocks: 45.228.220.0/22 maxlen: 22
45.228.220.0/23 maxlen: 23
45.228.222.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2129776 (0x207f70)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f58e9ace5695e188fe50f2a761d818e79976c086
Validity
Not Before: Feb 19 13:38:01 2024 GMT
Not After : Feb 19 13:38:01 2026 GMT
Subject: CN=a53e4b2a441b6c996e21a4d2ad46a09ba5056da3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:8f:d5:b5:9e:2b:e8:8a:b6:57:a8:6c:6e:84:
18:3d:94:07:11:9b:dc:f1:e6:23:6d:08:89:fd:a4:
cf:38:d1:50:55:f1:20:9a:af:a1:ce:66:60:c0:12:
ec:aa:b1:66:b5:38:d9:db:0c:34:1c:e4:28:2d:42:
8c:6f:d4:5e:7e:fe:ae:67:aa:86:73:ed:d7:b4:f3:
6c:08:79:4e:ed:63:7f:30:b3:cd:3b:c8:60:9b:dc:
a4:2e:bd:b6:1b:f5:da:0b:15:06:62:83:9a:7f:58:
5e:7a:d8:9a:b8:b5:45:42:52:6c:0e:7b:f0:19:40:
7c:54:01:a3:8a:e0:55:59:2b:7e:c4:3d:f0:71:94:
d3:5a:fe:ec:1c:3d:eb:7c:62:ae:35:e9:d0:54:15:
ad:61:4d:96:8d:19:49:54:ab:ae:b4:24:d6:6c:a3:
13:cc:52:46:12:fe:7b:25:5e:ce:3d:02:42:0c:3a:
11:8a:68:52:7d:97:f9:0d:b8:e4:c7:53:5e:b2:f3:
dc:4c:6d:08:37:94:e6:46:78:a5:c9:fb:a2:77:ac:
f5:ec:74:20:a6:1c:4a:81:3c:bb:bd:79:9e:6c:e2:
4b:da:87:09:34:bc:2e:f3:75:78:57:e0:2c:e4:e7:
35:08:4a:e0:90:68:fa:7e:d4:fc:33:77:14:86:24:
52:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:F7:A4:87:81:51:85:31:F4:E8:73:5B:85:D0:EA:10:89:68:46:40
X509v3 Authority Key Identifier:
keyid:3B:44:B4:FF:F3:2A:0D:D1:04:80:2C:2B:B3:16:B8:95:8B:E1:4E:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f58e9ace5695e188fe50f2a761d818e79976c086.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/85fc2657-9dd5-4e18-a043-c1ed96730bf8/a53e4b2a441b6c996e21a4d2ad46a09ba5056da3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/85fc2657-9dd5-4e18-a043-c1ed96730bf8/f58e9ace5695e188fe50f2a761d818e79976c086.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.228.220.0/22
Signature Algorithm: sha256WithRSAEncryption
8a:fe:63:f9:4c:00:4d:24:f2:df:76:27:9f:0f:22:10:77:d1:
a6:22:2f:73:d3:2f:22:dc:1d:b1:8a:3e:b6:b2:43:df:c6:06:
81:aa:ea:24:f8:e3:d6:e0:39:fd:59:c4:3c:21:a5:76:df:8b:
2b:4c:14:13:ca:f1:c9:49:93:c3:d7:7e:2a:71:f1:65:00:94:
e4:db:11:03:60:6b:59:b0:46:8b:fe:10:88:e8:a0:b7:b7:ee:
c7:70:ac:4d:09:25:82:c4:b5:da:8b:27:ac:c5:e2:6c:61:34:
be:7c:69:05:b9:73:07:65:ce:c6:bd:da:c8:62:a3:71:94:32:
5a:99:6d:2e:8d:17:75:dd:82:da:b9:95:ca:84:6d:36:5e:56:
61:af:19:00:26:80:2c:ba:ea:2d:fe:f3:82:8b:0e:b7:ba:7f:
ae:1d:05:bf:00:fd:d0:6c:d3:c5:f1:f4:9a:de:71:d8:d1:a2:
12:f1:a5:3c:25:8c:bf:c2:a8:b9:72:2c:16:69:7a:e5:65:ce:
74:68:5e:47:be:42:21:3a:af:33:47:f9:81:b6:85:c2:98:74:
10:a4:a5:e5:80:20:fd:dc:89:6b:99:b3:88:8d:f4:2f:c9:d8:
84:da:4c:4c:c0:fd:9b:9e:17:6f:29:8d:74:3e:0a:8b:98:15:
09:1b:24:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:39 2024 by rpki-client on console-ams.rpki-client.org