Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/884fba2e-2589-4669-bf49-d3145db6442f/238e7605ce9b6c9b2b6dce543b4de1218880f85f.roa
File: 238e7605ce9b6c9b2b6dce543b4de1218880f85f.roa (raw, json)
Hash identifier: cNIQMr1T9tDdHV6u+YH+IRJgV+vC8R/5cx0VZgc66UE=
Subject key identifier: BF:31:CE:C9:9F:F2:24:85:01:24:7F:7E:D3:5D:7E:9A:8F:01:65:67
Certificate issuer: /CN=1ffa70be0f2939adf371127478487e627e9dcfa1
Certificate serial: 0D5C3E
Authority key identifier: 22:F8:9D:17:C5:6F:25:00:F9:75:07:61:46:9D:A3:E5:47:51:1A:DB
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1ffa70be0f2939adf371127478487e627e9dcfa1.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/884fba2e-2589-4669-bf49-d3145db6442f/238e7605ce9b6c9b2b6dce543b4de1218880f85f.roa
Signing time: Wed 24 Mar 2021 14:31:23 +0000
ROA not before: Wed 24 Mar 2021 14:31:23 +0000
ROA not after: Tue 24 Mar 2026 14:31:23 +0000
asID: 265658
IP address blocks: 45.4.97.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 875582 (0xd5c3e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ffa70be0f2939adf371127478487e627e9dcfa1
Validity
Not Before: Mar 24 14:31:23 2021 GMT
Not After : Mar 24 14:31:23 2026 GMT
Subject: CN=238e7605ce9b6c9b2b6dce543b4de1218880f85f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ae:86:6e:28:b7:eb:17:b6:10:1f:3d:34:b9:
73:85:e2:80:13:7a:51:4b:b3:d4:d8:7f:ce:b5:82:
69:13:ea:2a:36:da:29:cd:ee:8f:7f:76:da:98:93:
67:09:83:c4:f5:02:5c:48:0e:a1:f1:6b:5f:0d:50:
5b:ee:ef:6a:92:09:51:69:b3:32:68:a1:e0:5e:f7:
07:62:ec:1c:8a:84:48:78:cc:db:b1:ce:4a:f3:ce:
bb:2a:3f:6c:36:b8:e8:37:0a:8b:cd:10:6b:ba:28:
a3:e5:b9:3d:1b:32:6f:a1:fc:ba:87:7e:53:90:82:
99:5e:7d:7d:a3:93:2d:29:e3:d6:3c:8a:22:9e:4f:
af:e6:ac:c2:35:5a:a1:46:49:b4:e7:81:61:cf:08:
f6:68:5c:6d:9d:a3:a2:3b:fa:03:c0:94:d4:c2:9a:
bd:2b:00:32:7a:b6:bb:74:5f:52:00:d6:50:ba:79:
44:5b:90:c4:64:ac:e7:be:34:03:67:a9:74:6c:b8:
3e:a7:de:71:b9:11:33:a2:60:c1:7d:f2:e1:47:28:
1e:23:73:a0:51:ea:a1:ea:c0:16:8e:61:da:3a:5c:
76:f8:1b:32:76:be:eb:75:a3:d2:16:1a:c6:bb:a7:
05:fb:ca:1b:b9:3b:36:7f:43:16:a9:27:8c:ed:6b:
bd:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:31:CE:C9:9F:F2:24:85:01:24:7F:7E:D3:5D:7E:9A:8F:01:65:67
X509v3 Authority Key Identifier:
keyid:22:F8:9D:17:C5:6F:25:00:F9:75:07:61:46:9D:A3:E5:47:51:1A:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1ffa70be0f2939adf371127478487e627e9dcfa1.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/884fba2e-2589-4669-bf49-d3145db6442f/238e7605ce9b6c9b2b6dce543b4de1218880f85f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/884fba2e-2589-4669-bf49-d3145db6442f/1ffa70be0f2939adf371127478487e627e9dcfa1.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.4.97.0/24
Signature Algorithm: sha256WithRSAEncryption
75:51:37:e7:d4:2d:fc:b2:ea:01:24:46:1b:74:1f:59:ab:6b:
1c:27:31:5e:30:af:4c:1e:2f:45:fc:81:16:27:12:04:9c:2a:
e2:69:39:c1:e4:fb:6f:ce:ac:5e:8e:96:27:c4:f2:f8:65:43:
46:6f:cb:ca:eb:4b:3e:56:28:29:20:63:6f:0a:96:ad:45:10:
0e:7d:7f:fd:37:e7:4b:55:53:04:4f:be:ae:62:c2:a7:90:e8:
8d:77:03:5f:7e:d8:97:32:cd:16:98:57:8e:c5:78:ae:b3:29:
5a:97:a6:42:3a:2d:d6:49:9b:02:59:d9:23:16:c4:49:0d:88:
b9:fa:88:96:f2:7d:ed:6e:bf:65:aa:3e:bf:c9:a6:83:13:7a:
a2:a8:c4:e8:e2:8e:bf:b5:fe:49:66:4a:e0:7f:be:17:b3:90:
87:8e:f6:ab:8c:14:e7:af:bb:b5:dc:b4:80:41:c4:3f:bd:a3:
e1:d7:4b:e9:be:62:41:3f:af:3b:ba:49:f1:e2:a7:30:c0:c3:
33:40:07:48:a7:7b:da:14:db:46:3e:a2:50:7f:41:6c:b2:86:
93:5a:07:2a:84:2c:eb:4d:32:4f:15:a9:5f:67:8a:80:6c:12:
83:7f:0f:7e:a6:ce:42:9b:13:6e:ce:52:c6:08:52:13:a5:0a:
0e:4a:5d:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:23 2024 by rpki-client on console-fra.rpki-client.org