Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/95597c66-f0cb-4bec-9675-f3435dc55d57/957e1c839ab3e529942a199743c73a953d7eff84.roa
File: 957e1c839ab3e529942a199743c73a953d7eff84.roa (raw, json)
Hash identifier: jK68fwmyccg7BgYph4Q5z5KS3sAmqqltBV/Ezfe3OS4=
Subject key identifier: 12:01:18:E4:64:46:0F:68:DD:0A:92:77:8E:15:0B:34:0B:5E:EC:E5
Certificate issuer: /CN=78c33cb79f65c2e1ac85aa524fd84d74e8cca2a7
Certificate serial: 0D9628
Authority key identifier: 07:C2:BF:82:B8:B2:AC:98:C0:79:8B:B0:30:1F:56:49:15:D3:30:35
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/78c33cb79f65c2e1ac85aa524fd84d74e8cca2a7.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/95597c66-f0cb-4bec-9675-f3435dc55d57/957e1c839ab3e529942a199743c73a953d7eff84.roa
Signing time: Wed 24 Mar 2021 14:41:28 +0000
ROA not before: Wed 24 Mar 2021 14:41:28 +0000
ROA not after: Tue 24 Mar 2026 14:41:28 +0000
asID: 264668
IP address blocks: 45.71.252.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 890408 (0xd9628)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78c33cb79f65c2e1ac85aa524fd84d74e8cca2a7
Validity
Not Before: Mar 24 14:41:28 2021 GMT
Not After : Mar 24 14:41:28 2026 GMT
Subject: CN=957e1c839ab3e529942a199743c73a953d7eff84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f1:c0:84:57:52:a1:2a:26:2c:e4:7b:2f:4f:
7d:3f:d9:2c:79:fd:39:3d:cf:9f:e5:95:31:17:a1:
7d:f8:96:28:d9:bf:a4:ae:95:b9:81:64:54:c3:43:
93:d3:ca:98:26:f8:9c:7f:1c:c3:29:b6:8b:fc:7c:
5a:ab:ac:14:33:fc:c6:4f:24:91:43:3d:5c:9c:91:
b3:41:9f:04:33:d4:71:08:72:88:14:68:7e:36:85:
08:27:94:22:9f:71:89:74:5f:d9:28:32:f7:c3:5e:
38:1a:b6:0c:60:0b:eb:2a:91:32:ed:b6:b2:60:30:
90:d3:08:ed:65:76:7a:3a:14:a3:2b:00:a8:80:4c:
f9:51:52:07:48:3f:08:0d:93:ab:5d:9a:77:6f:f2:
a5:27:4f:99:a5:5e:9d:19:1e:b8:23:12:fd:69:45:
a7:7d:52:e2:22:c5:92:14:6d:ba:9d:de:c2:96:ed:
07:ca:4a:af:34:9c:21:1a:f9:4b:1c:7f:b4:c5:83:
1a:b7:dd:bd:5a:a7:17:d0:7e:4d:3e:3d:15:71:53:
35:72:03:2d:7f:f1:fb:5d:12:51:ce:31:00:2f:48:
44:72:ad:90:64:82:75:b4:e4:6b:1a:ce:aa:1b:67:
2e:5c:5e:51:27:8b:04:62:4c:e0:e6:e6:8f:4d:2b:
07:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:01:18:E4:64:46:0F:68:DD:0A:92:77:8E:15:0B:34:0B:5E:EC:E5
X509v3 Authority Key Identifier:
keyid:07:C2:BF:82:B8:B2:AC:98:C0:79:8B:B0:30:1F:56:49:15:D3:30:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/78c33cb79f65c2e1ac85aa524fd84d74e8cca2a7.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/95597c66-f0cb-4bec-9675-f3435dc55d57/957e1c839ab3e529942a199743c73a953d7eff84.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/95597c66-f0cb-4bec-9675-f3435dc55d57/78c33cb79f65c2e1ac85aa524fd84d74e8cca2a7.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.71.252.0/22
Signature Algorithm: sha256WithRSAEncryption
1b:33:6b:ea:01:90:68:bb:5c:90:94:5f:ee:61:a5:81:50:82:
8a:67:c2:c6:18:2c:c0:84:fb:d6:ec:08:84:3d:ef:64:1a:5e:
26:07:90:7e:04:91:a2:dd:1e:e9:e3:c1:8e:3b:81:3e:a3:27:
08:c2:f8:63:4c:bb:c6:a2:f1:b7:83:7c:c3:e0:9a:e7:86:78:
d9:79:7a:5a:03:75:a9:ab:3c:95:7d:3a:89:ca:1d:88:85:b2:
ab:e5:17:93:14:7a:84:73:89:92:26:2c:40:22:a9:53:26:54:
0d:1e:cf:67:3e:03:1e:1c:ff:49:33:29:e0:8e:2b:b9:1d:f4:
bb:01:f1:95:5b:67:0b:38:23:19:ec:53:ff:f2:f4:08:c4:92:
44:61:cc:1d:92:c7:b2:e2:03:78:f9:27:f9:ba:00:9e:d5:be:
dc:ed:0f:7b:aa:4c:ef:5e:ea:f6:a3:c1:8f:b0:39:71:50:95:
cb:9d:1f:46:86:84:b2:33:c6:20:f8:bc:fb:43:3f:7e:5b:50:
e1:f6:35:90:45:a6:b5:94:b6:f9:3d:5f:09:e1:f8:98:c9:ad:
ec:36:78:76:bd:c6:70:5d:81:79:d7:32:30:ca:9f:75:c2:e2:
1a:9f:f3:72:00:82:39:7d:24:7e:3d:de:52:7c:1a:00:f3:ce:
45:9c:ff:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:09 2024 by rpki-client on console-ams.rpki-client.org