Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/88773bf7-bdc1-469a-9cb8-89a8cb9f1fc8/ae2fddb6294eaf7377c6914a7f72ad1dd8e34b4f.roa
File: ae2fddb6294eaf7377c6914a7f72ad1dd8e34b4f.roa (raw, json)
Hash identifier: 0CZmK7St2oiOFS+QTzY8gSzLCdnuzg7D0CJuymCnBNM=
Subject key identifier: FA:A0:2B:B1:6E:E1:C0:83:98:40:84:BE:66:C9:B5:C7:14:AF:02:F8
Certificate issuer: /CN=7220a4031b7bb84d489fc674e48acd93362e2d78
Certificate serial: 03A718
Authority key identifier: 5E:70:E4:C4:39:BB:F1:5B:79:35:A8:85:FA:8B:8E:8A:64:D0:15:E0
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7220a4031b7bb84d489fc674e48acd93362e2d78.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/88773bf7-bdc1-469a-9cb8-89a8cb9f1fc8/ae2fddb6294eaf7377c6914a7f72ad1dd8e34b4f.roa
Signing time: Wed 24 Mar 2021 14:29:49 +0000
ROA not before: Wed 24 Mar 2021 14:29:49 +0000
ROA not after: Tue 24 Mar 2026 14:29:49 +0000
asID: 269915
IP address blocks: 45.187.89.0/24 maxlen: 24
45.189.232.0/23 maxlen: 23
2803:3ce0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 239384 (0x3a718)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7220a4031b7bb84d489fc674e48acd93362e2d78
Validity
Not Before: Mar 24 14:29:49 2021 GMT
Not After : Mar 24 14:29:49 2026 GMT
Subject: CN=ae2fddb6294eaf7377c6914a7f72ad1dd8e34b4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f4:57:c8:6c:49:f9:18:c0:2d:dd:5e:c4:9e:
4c:01:ee:5b:1a:04:0c:43:20:c3:69:60:75:f9:3c:
1a:37:b4:1e:e4:05:ed:e1:53:a6:bb:b4:ce:90:07:
3e:5c:84:0a:24:3a:fb:83:92:c2:e9:1a:00:71:69:
45:51:99:7d:25:70:7b:20:fc:23:65:cd:7d:16:dc:
1c:49:22:03:84:61:57:b7:30:35:04:0c:be:cb:21:
85:e3:76:2f:23:49:17:26:eb:eb:a4:50:69:5b:ce:
6f:c7:c8:38:94:46:f1:32:07:a2:ba:11:03:73:3f:
4e:bb:3a:35:6a:da:cf:29:05:c8:56:a0:eb:cd:4c:
25:5b:a2:a9:74:08:72:8f:49:9b:04:b0:a3:e7:1d:
3d:39:cd:ac:f7:e6:50:5a:ee:99:76:3f:9b:3b:42:
2a:32:49:f9:0f:7f:0b:81:8d:ea:7a:c0:24:a8:32:
64:f7:99:95:17:b6:15:ef:3d:35:6c:a4:f9:ef:33:
6d:85:bf:1c:d3:de:95:c9:cb:9f:d2:36:da:2d:c2:
03:d4:a9:25:28:07:c8:f1:59:db:87:fa:bd:27:f9:
c1:04:ba:44:e7:ca:99:50:2d:45:bd:c2:f2:77:f3:
f4:bb:93:ff:7d:e5:46:e7:c0:37:a5:43:88:e6:40:
a4:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:A0:2B:B1:6E:E1:C0:83:98:40:84:BE:66:C9:B5:C7:14:AF:02:F8
X509v3 Authority Key Identifier:
keyid:5E:70:E4:C4:39:BB:F1:5B:79:35:A8:85:FA:8B:8E:8A:64:D0:15:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7220a4031b7bb84d489fc674e48acd93362e2d78.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/88773bf7-bdc1-469a-9cb8-89a8cb9f1fc8/ae2fddb6294eaf7377c6914a7f72ad1dd8e34b4f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/88773bf7-bdc1-469a-9cb8-89a8cb9f1fc8/7220a4031b7bb84d489fc674e48acd93362e2d78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.187.89.0/24
45.189.232.0/23
IPv6:
2803:3ce0::/32
Signature Algorithm: sha256WithRSAEncryption
c6:31:ad:1e:ae:3b:a8:ff:9e:88:95:96:53:fe:32:f8:0c:77:
5b:2f:59:df:53:fc:1b:67:83:0f:e7:9f:26:1e:74:bc:34:ca:
42:47:22:0a:e3:4e:bd:b2:78:cc:bf:80:af:f3:3a:ac:15:25:
63:4c:bc:0c:1a:5c:b8:07:c7:f7:86:b7:f2:83:29:23:96:86:
a4:30:0f:20:24:4c:c0:25:f2:32:1c:96:87:5f:d5:d3:1e:9e:
53:13:08:d4:7e:ec:f8:62:ea:13:60:d0:f3:f5:52:6d:7d:ca:
61:a4:e8:29:97:ce:be:75:92:28:99:d5:96:9c:b5:fb:6c:6b:
af:23:9b:6d:5f:d9:5f:1a:46:7b:e8:c6:34:7b:a8:b5:b4:da:
0a:63:fd:70:a9:57:bb:70:94:32:07:b0:ff:71:c8:c9:45:26:
ea:8c:07:b4:ca:3e:9c:2b:15:93:c2:77:4a:cf:f8:b5:f5:39:
3e:4d:d0:d3:6a:b4:a9:a4:cb:3f:7f:ef:c0:ab:7a:58:9d:9a:
1e:de:c5:ef:02:25:fe:1d:bc:c2:10:38:54:fa:fa:83:6a:e9:
27:a3:ad:ee:86:30:94:ae:92:1f:ce:31:02:6e:e9:79:42:29:
3c:1e:ad:f0:07:49:5d:4f:4c:d9:fc:4e:cb:7a:e7:15:ff:35:
63:e4:d4:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:23 2024 by rpki-client on console-fra.rpki-client.org