Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8f25130c-f8ab-420e-b4f4-5572317f8b4f/4c2fd0deae4629d4f990162b647651a87c9944c5.roa
File: 4c2fd0deae4629d4f990162b647651a87c9944c5.roa (raw, json)
Hash identifier: wqeQ5l3J9/5PlFk4CqEjlSV8PmAHREG9cDqxf60GE+c=
Subject key identifier: 4E:A7:B2:60:FB:9C:C5:AC:CD:A3:36:6C:66:69:80:DB:B5:48:1D:57
Certificate issuer: /CN=fd09ab3ff908b2be526716abb2521fca7891bc8b
Certificate serial: 123284
Authority key identifier: D2:94:A9:E7:83:86:FB:61:0A:1A:51:FE:1D:14:72:AD:FD:07:36:6A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd09ab3ff908b2be526716abb2521fca7891bc8b.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8f25130c-f8ab-420e-b4f4-5572317f8b4f/4c2fd0deae4629d4f990162b647651a87c9944c5.roa
Signing time: Fri 08 Sep 2023 08:30:02 +0000
ROA not before: Thu 07 Sep 2023 08:30:02 +0000
ROA not after: Sat 06 Sep 2025 08:30:02 +0000
asID: 266743
IP address blocks: 45.230.204.0/22 maxlen: 22
45.230.204.0/24 maxlen: 24
45.230.205.0/24 maxlen: 24
45.230.206.0/24 maxlen: 24
45.230.207.0/24 maxlen: 24
2803:6b20::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1192580 (0x123284)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd09ab3ff908b2be526716abb2521fca7891bc8b
Validity
Not Before: Sep 7 08:30:02 2023 GMT
Not After : Sep 6 08:30:02 2025 GMT
Subject: CN=4c2fd0deae4629d4f990162b647651a87c9944c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:51:c0:76:98:4f:3c:b7:4b:c5:72:76:03:46:
a5:ce:92:3b:e8:d9:13:29:9b:9e:81:c7:d3:f1:5b:
0a:dd:71:ac:33:93:6b:4d:6a:d5:6a:bf:00:05:57:
c1:3f:e4:40:b0:f3:23:ea:b6:a5:d8:e3:50:26:33:
3f:10:42:56:40:4a:c0:3d:c3:a6:d4:cb:fc:0e:94:
b1:42:65:67:8d:42:91:85:53:28:e2:ce:b6:2a:5b:
08:79:1c:42:61:3c:22:4d:f1:87:56:f0:5e:98:78:
d2:d5:f3:51:36:b4:e6:0c:f9:53:97:a5:d3:73:3e:
93:d2:99:32:dd:01:f6:9d:ad:85:55:99:f3:a0:91:
4d:37:19:af:04:b0:b0:7e:28:b9:76:92:b8:34:01:
1b:58:d0:e0:f6:4b:00:0e:b7:30:b2:bd:2e:87:3e:
00:9f:2c:53:7e:28:99:24:a6:4c:90:da:74:73:53:
f5:62:38:f0:9f:2d:b7:d5:a2:ae:2c:cf:d1:0a:ce:
62:2b:13:f8:87:28:e8:a5:94:64:7c:85:42:7b:6a:
af:5b:4c:9e:b0:4d:37:cc:86:0a:81:0c:d4:27:3d:
36:fc:02:c3:05:32:48:46:4e:94:0d:22:23:e4:2c:
66:99:0e:96:ac:5c:94:61:80:9f:7c:9b:28:ea:3c:
71:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:A7:B2:60:FB:9C:C5:AC:CD:A3:36:6C:66:69:80:DB:B5:48:1D:57
X509v3 Authority Key Identifier:
keyid:D2:94:A9:E7:83:86:FB:61:0A:1A:51:FE:1D:14:72:AD:FD:07:36:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd09ab3ff908b2be526716abb2521fca7891bc8b.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8f25130c-f8ab-420e-b4f4-5572317f8b4f/4c2fd0deae4629d4f990162b647651a87c9944c5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/8f25130c-f8ab-420e-b4f4-5572317f8b4f/fd09ab3ff908b2be526716abb2521fca7891bc8b.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.230.204.0/22
IPv6:
2803:6b20::/32
Signature Algorithm: sha256WithRSAEncryption
44:26:48:18:cc:31:9d:f8:f5:de:8d:53:9c:02:45:3c:70:17:
f2:b4:a7:b9:1f:c1:2d:ff:0e:76:5e:41:56:ac:6a:3d:b1:e9:
5a:8e:1a:a0:4a:a7:2d:51:26:0c:57:72:a1:64:68:39:f0:3c:
02:b3:2a:e9:f4:9b:7d:6e:55:bd:34:7e:96:f6:ae:72:64:f1:
78:7b:c5:02:d4:3b:44:4d:78:17:c1:cb:07:a8:04:5c:a1:8c:
56:71:2d:ca:e7:1f:e1:2f:aa:58:58:db:4f:e2:88:bb:9f:90:
42:9a:36:49:ce:f2:4d:c8:b8:1f:d2:12:c6:41:52:53:33:bb:
52:38:62:19:ae:c3:9f:da:e3:9a:30:6c:18:c7:e2:eb:98:11:
c6:77:71:79:1d:0e:46:03:f4:12:b9:bb:3b:16:f5:6c:57:45:
8a:4e:7b:40:23:0b:fc:e5:e5:35:2c:86:3b:c7:0c:c6:d7:bf:
17:ca:9b:c3:5a:62:be:67:45:19:8f:65:63:c2:0e:94:2c:13:
80:11:59:47:8f:a8:5d:9c:e1:21:f5:89:20:7f:39:06:1f:a2:
b2:17:33:c3:5e:9e:d7:9c:5d:52:81:07:11:6b:6e:89:5d:1a:
2c:a0:fd:8f:a0:c8:7f:46:29:f3:7c:da:43:22:dd:d5:ab:68:
14:6d:14:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:24 2024 by rpki-client on console-fra.rpki-client.org