Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/861ddb87-6391-43b0-a917-a4915b7be15e/c9f282567594cd465658922d97a184b22a3e0854.roa
File: c9f282567594cd465658922d97a184b22a3e0854.roa (raw, json)
Hash identifier: SZ/13UIBM+FCyku9BHX/X6shQsOhY0EmXhAevqDRsGw=
Subject key identifier: B8:9F:21:9B:F6:EE:9A:2C:B6:19:78:37:46:76:BD:E7:5D:DE:38:93
Certificate issuer: /CN=a48360de513a5e0e321240da777f72d0ee049213
Certificate serial: 11DCCE
Authority key identifier: 9B:7E:83:E1:BE:D4:E1:31:65:E2:FE:5C:18:C8:A4:44:A8:8A:13:FB
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a48360de513a5e0e321240da777f72d0ee049213.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/861ddb87-6391-43b0-a917-a4915b7be15e/c9f282567594cd465658922d97a184b22a3e0854.roa
Signing time: Wed 01 Nov 2023 07:30:01 +0000
ROA not before: Wed 01 Nov 2023 07:30:01 +0000
ROA not after: Fri 31 Oct 2025 07:30:01 +0000
asID: 267715
IP address blocks: 45.165.152.0/24 maxlen: 24
2803:99a0::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1170638 (0x11dcce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a48360de513a5e0e321240da777f72d0ee049213
Validity
Not Before: Nov 1 07:30:01 2023 GMT
Not After : Oct 31 07:30:01 2025 GMT
Subject: CN=c9f282567594cd465658922d97a184b22a3e0854
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:8c:91:bf:c7:63:4e:e2:d3:f1:9e:b8:11:44:
d2:40:11:d9:5d:68:6f:6f:e8:6d:7e:28:80:fa:90:
78:6c:61:1c:7c:a6:cc:ea:76:24:1c:7e:a2:a1:f9:
39:02:88:a2:87:2a:6e:a8:99:f9:cf:00:ba:af:d4:
31:b2:d8:07:ab:59:62:bc:06:c2:78:7f:83:36:d2:
87:71:4c:12:ae:dc:25:31:49:0b:c5:9a:9e:c5:9f:
99:7a:2b:89:69:57:a5:76:58:bc:69:75:92:2c:92:
6b:da:cc:c4:25:e3:27:64:b0:06:34:3f:e3:b6:18:
7d:bc:45:18:fe:f9:40:da:78:72:02:02:ac:b2:8b:
f0:f2:76:e6:19:e6:18:4d:c1:d7:02:76:97:22:8d:
34:0b:11:0e:1f:1a:42:3d:3f:ad:72:7f:21:10:85:
52:bf:3d:45:7f:c1:d3:1b:5c:99:68:dd:60:ad:68:
69:67:a9:04:7d:3e:2c:49:f4:61:19:e8:0e:1a:47:
60:c2:d5:0a:98:c1:b3:47:fe:06:2a:d6:37:19:bc:
d5:ce:eb:95:e9:97:57:0b:11:77:1e:98:b1:17:87:
10:ca:5e:59:5c:54:d4:05:d7:73:52:95:64:b3:47:
69:d6:5b:99:11:a9:28:63:5a:67:fe:34:c5:46:11:
8b:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:9F:21:9B:F6:EE:9A:2C:B6:19:78:37:46:76:BD:E7:5D:DE:38:93
X509v3 Authority Key Identifier:
keyid:9B:7E:83:E1:BE:D4:E1:31:65:E2:FE:5C:18:C8:A4:44:A8:8A:13:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a48360de513a5e0e321240da777f72d0ee049213.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/861ddb87-6391-43b0-a917-a4915b7be15e/c9f282567594cd465658922d97a184b22a3e0854.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/861ddb87-6391-43b0-a917-a4915b7be15e/a48360de513a5e0e321240da777f72d0ee049213.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.165.152.0/24
IPv6:
2803:99a0::/32
Signature Algorithm: sha256WithRSAEncryption
1a:83:8e:47:c8:31:90:01:fc:3f:af:42:87:cf:74:79:da:ab:
ae:26:a0:c0:28:ad:1d:d2:06:86:68:0b:81:48:3e:5c:d0:56:
fa:26:9f:78:b5:ea:a4:9a:55:a2:bc:1f:f8:60:d4:5a:d2:32:
12:02:71:32:7e:06:79:9b:68:3b:6f:9d:29:e4:d3:7f:9a:3a:
5b:51:ea:89:5d:e4:1e:36:68:6a:05:3a:df:1f:b1:39:40:ff:
ac:42:57:ca:7d:d4:b4:e2:54:92:a8:39:49:7a:31:78:a5:a4:
c3:0a:64:a2:81:e0:f6:41:d3:2a:68:fe:dd:80:cf:51:48:30:
52:07:e0:a5:b5:80:73:3f:30:ce:a6:ec:58:1c:ac:c6:59:e9:
1c:87:f7:f8:b4:de:30:23:81:f4:c9:7d:d1:b2:18:8a:bd:f4:
bd:02:11:70:26:7d:0a:14:b3:e1:ed:c0:8d:33:01:81:9e:88:
76:e9:ac:4d:ea:37:c5:02:5a:62:26:5a:f6:3e:7a:11:3b:92:
06:fb:8e:1e:40:28:b4:43:37:63:3d:dc:d8:a4:63:b8:16:83:
bc:60:94:3f:f9:3b:22:b2:db:db:b5:8d:50:cb:d4:90:f0:0b:
33:6f:c6:1b:0c:cf:d5:fd:a0:02:77:22:75:26:57:32:05:15:
3e:3a:a5:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:23 2024 by rpki-client on console-fra.rpki-client.org