Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8accc968-07f2-40c3-b8a8-147e520150b2/5b91162016372b42260086d68bbb311eb0e9ebcf.roa
File: 5b91162016372b42260086d68bbb311eb0e9ebcf.roa (raw, json)
Hash identifier: DtgiboNHJVt8Covd28XYUQjOOmOpg308KW1ZEb84/T8=
Subject key identifier: 18:16:58:2E:1D:73:B4:CC:58:50:55:AF:16:FE:D4:73:94:9A:24:69
Certificate issuer: /CN=4af662c498c0cbd2bb68b3ef74b602a2d494d901
Certificate serial: 23EA21
Authority key identifier: BB:D1:20:25:B0:48:F6:B5:AE:15:FC:50:B1:54:60:6F:52:7C:AA:E0
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4af662c498c0cbd2bb68b3ef74b602a2d494d901.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8accc968-07f2-40c3-b8a8-147e520150b2/5b91162016372b42260086d68bbb311eb0e9ebcf.roa
Signing time: Fri 29 Dec 2023 00:28:40 +0000
ROA not before: Fri 29 Dec 2023 00:28:40 +0000
ROA not after: Mon 29 Dec 2025 00:28:40 +0000
asID: 267871
IP address blocks: 45.177.20.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2353697 (0x23ea21)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4af662c498c0cbd2bb68b3ef74b602a2d494d901
Validity
Not Before: Dec 29 00:28:40 2023 GMT
Not After : Dec 29 00:28:40 2025 GMT
Subject: CN=5b91162016372b42260086d68bbb311eb0e9ebcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d9:be:f5:74:39:b2:f1:b2:d3:3d:6c:8a:bc:
72:c2:8b:b8:17:67:56:e9:37:d4:bb:d3:48:9d:79:
2d:b4:33:25:70:ca:4f:e6:c4:cb:cd:50:4c:c9:70:
9e:cd:e6:37:36:a7:4b:d2:50:9d:64:cc:46:bd:2d:
54:79:ba:39:b6:f7:97:38:d6:e2:41:a3:2a:d3:75:
3d:59:a4:70:7c:ce:76:27:c5:3b:1a:16:3f:a9:b7:
50:db:7e:31:85:d4:45:ce:12:97:12:60:e8:dd:50:
9a:03:99:d5:71:4d:f1:a9:42:03:85:79:f6:d5:4c:
47:42:10:67:db:75:e8:f6:11:ee:fc:0c:45:51:95:
64:61:89:a2:ca:10:85:c1:25:a0:d8:0e:86:98:68:
f6:fe:0b:ab:be:ec:9f:dd:39:38:42:a8:d7:0c:e9:
1c:0c:d4:38:dc:59:62:ab:e8:73:d0:c4:37:ad:3f:
ee:06:75:f4:fd:49:36:c0:2f:71:73:9b:ba:b4:2e:
c8:b4:ac:eb:ad:39:04:f7:5a:9c:53:33:1f:8e:0e:
1a:3d:bd:ed:61:d1:92:4c:cc:a0:b4:5c:71:97:6d:
9e:e7:59:4c:df:e6:1f:38:a0:df:08:7a:2c:4e:52:
94:59:d1:7e:bd:f3:50:eb:8c:db:61:ae:6d:80:0e:
d5:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:16:58:2E:1D:73:B4:CC:58:50:55:AF:16:FE:D4:73:94:9A:24:69
X509v3 Authority Key Identifier:
keyid:BB:D1:20:25:B0:48:F6:B5:AE:15:FC:50:B1:54:60:6F:52:7C:AA:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4af662c498c0cbd2bb68b3ef74b602a2d494d901.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8accc968-07f2-40c3-b8a8-147e520150b2/5b91162016372b42260086d68bbb311eb0e9ebcf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/8accc968-07f2-40c3-b8a8-147e520150b2/4af662c498c0cbd2bb68b3ef74b602a2d494d901.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.177.20.0/22
Signature Algorithm: sha256WithRSAEncryption
b2:b2:9e:a4:f5:be:2d:ef:5f:57:64:21:92:0f:d9:38:20:ed:
21:31:43:59:25:a9:73:b7:e8:93:da:9b:45:5b:7f:78:5f:0e:
65:b4:df:aa:d9:32:64:2e:6d:7c:33:fb:b6:73:e6:99:d1:d5:
b1:e8:83:1f:98:ec:7d:c8:59:d0:7c:46:9c:31:4d:6e:01:48:
d4:2f:d6:be:40:05:c8:68:70:b8:a5:18:2a:30:dd:da:57:a6:
91:01:b0:71:58:43:b5:e6:3c:4e:98:ad:3d:63:e8:3a:a3:89:
8b:bd:0e:ce:38:f8:4e:f0:12:2f:76:e0:7b:5c:d7:e3:85:8d:
85:2e:55:63:30:db:10:81:05:3d:7a:38:8c:ea:3a:c0:58:72:
90:d8:a3:29:6b:d0:a7:03:bb:88:09:70:f3:55:b5:64:67:d9:
f7:8d:e3:4b:ec:7e:45:aa:2e:3c:da:84:d7:54:12:26:a7:3f:
3c:34:4e:8e:a8:67:3e:53:11:11:94:ab:ad:21:91:75:e9:c0:
1b:12:28:1c:2c:76:c2:c8:26:63:4d:83:a7:60:01:ae:36:df:
8b:ad:2c:b3:07:93:9d:b8:36:94:7e:bf:4e:88:85:2e:69:8b:
5a:c6:05:1a:46:36:82:62:1d:e4:cb:71:5b:21:96:e3:e0:2c:
ac:0f:dc:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:23 2024 by rpki-client on console-fra.rpki-client.org