Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/85fc2657-9dd5-4e18-a043-c1ed96730bf8/d272f82ebfb1d2d721230f8d833dbf3d648992a4.roa
File: d272f82ebfb1d2d721230f8d833dbf3d648992a4.roa (raw, json)
Hash identifier: WTgH/AZtUV5MfYfducmFUtxjkuBGjAtSVOlbNBabTJw=
Subject key identifier: 0F:B8:90:7E:EA:38:99:37:EA:13:F3:5C:11:E9:C7:7E:EA:1E:6F:37
Certificate issuer: /CN=f58e9ace5695e188fe50f2a761d818e79976c086
Certificate serial: 199480
Authority key identifier: 3B:44:B4:FF:F3:2A:0D:D1:04:80:2C:2B:B3:16:B8:95:8B:E1:4E:CF
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f58e9ace5695e188fe50f2a761d818e79976c086.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/85fc2657-9dd5-4e18-a043-c1ed96730bf8/d272f82ebfb1d2d721230f8d833dbf3d648992a4.roa
Signing time: Wed 31 May 2023 20:12:23 +0000
ROA not before: Tue 30 May 2023 20:12:23 +0000
ROA not after: Sat 31 May 2025 20:12:23 +0000
asID: 266684
IP address blocks: 45.228.221.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1676416 (0x199480)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f58e9ace5695e188fe50f2a761d818e79976c086
Validity
Not Before: May 30 20:12:23 2023 GMT
Not After : May 31 20:12:23 2025 GMT
Subject: CN=d272f82ebfb1d2d721230f8d833dbf3d648992a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:fb:7d:d3:1d:18:4f:07:8e:2a:25:e4:4d:7d:
2d:19:b3:55:db:84:0b:31:dd:1f:1e:0d:6e:03:26:
d2:ea:8f:d0:a9:37:5e:af:ba:8b:d8:d7:55:14:79:
ae:e8:72:26:91:54:53:de:39:5a:bd:84:e5:15:6e:
54:19:58:45:17:df:ac:39:18:7d:eb:10:f3:1a:7c:
23:0e:94:06:d4:50:35:86:83:bb:bd:19:db:4b:57:
77:1b:94:78:13:bf:c9:d5:9d:d4:17:82:d4:55:4d:
2d:42:71:0f:b9:b2:e6:17:4c:44:6d:7c:98:cf:2e:
08:25:20:47:d9:45:dc:03:c7:dc:e5:2b:62:2c:44:
60:fa:8e:cd:9a:53:a0:2a:46:a9:a1:ad:08:87:1a:
d3:0c:b8:34:75:ad:43:31:90:30:a0:74:a4:c4:47:
a7:a3:f5:ca:d1:c0:6a:de:73:60:7f:c8:e2:c0:a9:
b4:64:23:b0:a2:87:e1:94:d7:de:7a:2c:e2:8f:d6:
d6:0e:e4:68:f6:6b:f5:bf:d7:a8:10:cc:fb:7a:a6:
8d:4f:8e:97:1b:96:b0:70:62:5f:c4:03:fd:ac:b3:
a1:91:ba:f3:02:31:85:31:87:34:ef:59:e9:b5:21:
38:2e:dc:e9:94:06:ae:ff:3b:35:c0:bd:1c:99:6c:
d4:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:B8:90:7E:EA:38:99:37:EA:13:F3:5C:11:E9:C7:7E:EA:1E:6F:37
X509v3 Authority Key Identifier:
keyid:3B:44:B4:FF:F3:2A:0D:D1:04:80:2C:2B:B3:16:B8:95:8B:E1:4E:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f58e9ace5695e188fe50f2a761d818e79976c086.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/85fc2657-9dd5-4e18-a043-c1ed96730bf8/d272f82ebfb1d2d721230f8d833dbf3d648992a4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/85fc2657-9dd5-4e18-a043-c1ed96730bf8/f58e9ace5695e188fe50f2a761d818e79976c086.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.228.221.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:de:4b:2a:f0:af:93:d5:0e:8d:cc:d3:f0:8d:d0:7c:3d:7d:
03:f2:92:4f:4a:5f:2d:1e:99:d9:06:94:b3:0f:aa:fb:66:ef:
b2:b5:a3:7e:3f:37:64:8f:3f:5a:8d:3c:bf:9f:de:a6:de:ec:
a9:9b:e7:10:71:5f:4e:f9:f7:4a:94:5a:c5:c0:fb:0a:29:6c:
aa:d3:e9:1f:49:f7:53:82:4d:f4:2c:45:6a:36:39:83:70:0f:
59:c7:2d:f0:40:9e:2f:35:3b:39:19:55:76:06:e8:25:db:6e:
c9:26:e6:ec:b3:c2:b3:8f:fc:b5:d8:26:ee:6e:88:dc:99:81:
2d:68:98:10:96:16:3c:93:30:1f:6a:d3:3a:be:54:94:66:f0:
97:22:9d:dc:5a:f5:da:fb:d8:e6:29:b9:1e:e6:04:63:fe:02:
d6:e4:d2:f1:3d:21:9b:95:8d:dc:b3:7b:e8:7c:ef:e6:63:3c:
ce:09:3e:82:fb:24:74:a1:01:b8:e8:6e:ea:91:7c:83:0b:c5:
f0:fc:80:4e:11:0f:71:9e:36:44:13:f0:c3:34:85:94:f0:37:
4b:b6:34:d4:8f:94:db:8d:0e:3b:b0:60:9a:55:79:74:cd:07:
0c:4a:f7:30:54:d1:fb:a2:61:29:53:6a:54:ed:c7:26:d1:0a:
0f:86:2f:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:23 2024 by rpki-client on console-fra.rpki-client.org