Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/951e0558-b47f-4892-9e0a-55879e997db0/ba9a582ff43316dc4165c877a0ed2a1a7fa95dfc.roa
File: ba9a582ff43316dc4165c877a0ed2a1a7fa95dfc.roa (raw, json)
Hash identifier: coUE/yQktq7Ku4Cmr61RLX5Bx8NrVCN7HbXa42OH9NA=
Subject key identifier: E3:18:E3:20:5F:82:F9:BB:28:69:E2:74:3D:3C:C6:FD:D8:D0:8C:16
Certificate issuer: /CN=1b40db97500b321646b19cb813c19d04f35ecdd4
Certificate serial: 11D07A
Authority key identifier: C1:64:33:D4:CE:7E:C9:8C:AC:40:14:12:D6:B3:DF:86:D4:E4:F8:AA
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1b40db97500b321646b19cb813c19d04f35ecdd4.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/951e0558-b47f-4892-9e0a-55879e997db0/ba9a582ff43316dc4165c877a0ed2a1a7fa95dfc.roa
Signing time: Tue 01 Aug 2023 08:30:01 +0000
ROA not before: Mon 31 Jul 2023 08:30:01 +0000
ROA not after: Wed 30 Jul 2025 08:30:01 +0000
asID: 266765
IP address blocks: 45.234.224.0/24 maxlen: 24
45.234.225.0/24 maxlen: 24
45.234.226.0/24 maxlen: 24
45.234.227.0/24 maxlen: 24
45.234.224.0/22 maxlen: 22
45.234.224.0/23 maxlen: 23
45.234.226.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1167482 (0x11d07a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b40db97500b321646b19cb813c19d04f35ecdd4
Validity
Not Before: Jul 31 08:30:01 2023 GMT
Not After : Jul 30 08:30:01 2025 GMT
Subject: CN=ba9a582ff43316dc4165c877a0ed2a1a7fa95dfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ef:b6:4c:14:46:d7:f1:c5:d0:ca:70:bd:e8:
98:aa:23:8a:42:a6:53:89:81:89:55:6d:8d:bc:5e:
51:28:98:d6:f2:24:61:ab:03:e5:72:f6:10:ea:9d:
de:4e:34:8b:c0:8b:54:d8:83:2f:eb:be:72:7b:fd:
e6:2a:d1:3f:1d:f4:4e:52:25:64:b6:be:49:69:71:
c9:91:21:32:e9:c5:28:94:33:53:76:d3:73:69:50:
44:39:b6:52:88:54:74:6d:26:4c:9c:49:b9:f6:a8:
26:ae:f0:65:1a:b9:8d:c2:fb:80:4c:f7:74:38:f8:
95:46:44:5e:64:19:99:31:d9:23:53:4e:88:fb:6f:
5e:6b:a4:88:46:a5:f1:b4:17:2b:5c:be:e6:97:87:
18:82:66:05:78:99:ac:39:9f:d5:23:49:f4:89:f6:
cb:38:19:51:39:45:05:2b:4e:f8:10:10:53:73:e8:
b4:f6:dd:a1:d7:6c:b3:40:6d:06:c5:3c:57:f2:9d:
4b:e8:39:ac:5d:c6:7d:fb:54:d9:45:b9:94:27:57:
ff:54:45:7a:6c:c9:f6:f7:81:a2:bb:85:a5:43:97:
5f:bf:d6:28:77:c5:4d:8a:1b:11:32:70:89:44:01:
96:e5:2e:fb:7f:a2:8b:ee:16:4f:a5:a2:0e:ad:04:
a9:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:18:E3:20:5F:82:F9:BB:28:69:E2:74:3D:3C:C6:FD:D8:D0:8C:16
X509v3 Authority Key Identifier:
keyid:C1:64:33:D4:CE:7E:C9:8C:AC:40:14:12:D6:B3:DF:86:D4:E4:F8:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1b40db97500b321646b19cb813c19d04f35ecdd4.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/951e0558-b47f-4892-9e0a-55879e997db0/ba9a582ff43316dc4165c877a0ed2a1a7fa95dfc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/951e0558-b47f-4892-9e0a-55879e997db0/1b40db97500b321646b19cb813c19d04f35ecdd4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.234.224.0/22
Signature Algorithm: sha256WithRSAEncryption
bb:2d:6f:c2:c4:97:ed:43:96:ad:7b:db:53:18:63:95:1a:bc:
b2:d8:44:6c:d6:95:80:48:48:5c:64:22:98:4a:13:34:f7:f5:
67:01:12:e0:d9:a9:a5:15:55:4a:57:42:49:39:7c:3b:c8:72:
14:d0:c7:68:17:74:49:85:2a:9b:4c:c6:db:d2:e2:f2:07:18:
fc:8c:be:86:a1:a4:c1:c5:7a:c7:32:fc:d7:17:ff:3d:50:08:
22:be:19:41:dd:b4:f2:18:e1:cb:c2:c6:8c:00:75:e1:ee:aa:
ea:76:ec:7a:46:dd:94:34:88:18:a4:a1:11:e9:ac:47:5e:8a:
d2:75:28:1b:33:03:76:16:e7:49:9a:eb:62:ae:82:df:cc:33:
95:31:fb:16:54:cb:5e:d3:57:cc:d7:c2:af:ee:d3:3c:fd:56:
36:1a:94:6b:49:58:bc:7a:28:a1:8b:e8:78:43:4a:2d:58:37:
62:65:90:2b:f0:45:b3:d6:c7:c9:95:56:8c:29:82:d7:d9:53:
c7:e6:c7:fa:e9:6c:25:86:58:76:f7:fd:92:1d:b3:ca:a6:ee:
2b:bc:4a:42:fa:4f:7d:e0:65:b4:04:c0:58:55:12:2a:12:92:
db:cd:8e:8e:8c:f7:f5:c9:ae:df:ae:df:c7:2e:e0:8f:a5:32:
b4:89:b9:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:09 2024 by rpki-client on console-ams.rpki-client.org