Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/95ba07cf-b046-4915-838e-136e207ba897/9d11715eab508777211218cedf0afc37864e8456.roa
File: 9d11715eab508777211218cedf0afc37864e8456.roa (raw, json)
Hash identifier: KRaRn6FnHUURr3mL0CemX+oswRoz8X0o/P7K0hGN19U=
Subject key identifier: 31:DC:4E:A2:5A:F6:F6:C9:90:86:AA:50:BF:0B:85:61:5E:11:1F:55
Certificate issuer: /CN=52cabd7c82ad25b1d422313740868842924c1649
Certificate serial: 0CF180
Authority key identifier: 8C:1A:92:BF:B3:DB:DD:04:44:92:92:44:4F:58:5F:51:D7:5E:2E:4B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/52cabd7c82ad25b1d422313740868842924c1649.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/95ba07cf-b046-4915-838e-136e207ba897/9d11715eab508777211218cedf0afc37864e8456.roa
Signing time: Wed 24 Mar 2021 14:34:21 +0000
ROA not before: Wed 24 Mar 2021 14:34:21 +0000
ROA not after: Tue 24 Mar 2026 14:34:21 +0000
asID: 269733
IP address blocks: 45.239.208.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 848256 (0xcf180)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52cabd7c82ad25b1d422313740868842924c1649
Validity
Not Before: Mar 24 14:34:21 2021 GMT
Not After : Mar 24 14:34:21 2026 GMT
Subject: CN=9d11715eab508777211218cedf0afc37864e8456
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:0f:c6:c6:1f:05:b4:35:fa:65:72:4d:16:df:
e3:15:f7:78:77:b6:ef:72:45:9e:d5:2a:09:35:a7:
92:e2:a3:bc:85:51:95:cd:5d:9d:ec:24:1c:4b:06:
1a:9d:4c:a6:3b:7b:a6:d1:2a:d0:ef:bb:b1:69:bc:
96:83:85:2d:67:5c:8d:f1:df:e8:f1:3b:a0:26:bb:
51:35:3b:da:d7:ad:1f:6e:bf:7b:d5:46:67:27:6c:
7e:88:50:dc:d6:50:d9:90:fe:f7:74:88:1e:a5:5e:
a9:e0:65:6f:a2:dd:cc:38:bc:54:b4:92:13:3e:da:
7c:ab:54:27:63:e9:1b:cd:06:c2:d8:5c:2d:9c:96:
4d:b1:94:0d:e3:d8:5c:a0:23:71:03:e7:61:0e:e1:
74:87:14:01:5b:70:7b:ec:38:57:ec:ad:a1:3f:46:
01:c6:86:bd:08:38:23:16:7c:52:5a:68:30:d1:10:
a3:b8:d3:eb:66:68:76:17:f0:63:ec:bb:68:62:23:
6f:6c:56:ab:0f:37:eb:a1:26:f5:86:56:31:32:4e:
bb:24:f6:35:cb:a9:2e:71:c7:fc:0d:99:19:37:aa:
60:62:39:2d:23:00:1b:54:4e:e0:14:80:a7:3d:f8:
97:f1:fb:94:f7:2d:11:90:31:3e:38:74:30:dd:ef:
e0:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:DC:4E:A2:5A:F6:F6:C9:90:86:AA:50:BF:0B:85:61:5E:11:1F:55
X509v3 Authority Key Identifier:
keyid:8C:1A:92:BF:B3:DB:DD:04:44:92:92:44:4F:58:5F:51:D7:5E:2E:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/52cabd7c82ad25b1d422313740868842924c1649.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/95ba07cf-b046-4915-838e-136e207ba897/9d11715eab508777211218cedf0afc37864e8456.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/95ba07cf-b046-4915-838e-136e207ba897/52cabd7c82ad25b1d422313740868842924c1649.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.239.208.0/22
Signature Algorithm: sha256WithRSAEncryption
18:a5:d1:81:ae:0d:9e:53:1b:06:8c:69:d6:eb:51:e3:c5:58:
73:2e:31:03:e6:ed:02:19:df:c0:41:15:42:d2:7d:43:18:4c:
fe:8c:c5:3e:52:a9:02:cc:1d:e1:f9:e3:c9:ad:64:ec:97:c1:
e9:71:15:fb:ce:48:af:ff:73:78:93:28:2d:aa:29:3d:05:d3:
30:39:8e:ed:58:0d:0f:6f:db:2c:d2:5e:f7:84:30:4f:58:71:
7c:b8:8c:f3:10:44:00:ca:a6:55:e3:b7:1a:f5:ec:7a:8e:09:
a0:6e:84:c7:d7:1a:74:9b:57:35:f1:bb:6d:01:01:59:47:66:
4a:3e:9a:f9:f0:4c:e5:48:e2:56:45:fd:47:f2:b0:bd:14:42:
ca:0b:e4:7c:f2:2d:a7:4a:c1:71:20:60:47:8e:9c:dd:61:ba:
eb:40:0f:b5:44:a3:be:70:21:bd:af:fc:4d:17:97:83:98:7e:
10:db:d3:9d:3e:fa:af:a5:e8:a4:d0:81:70:0e:56:fb:0d:34:
ea:b4:c0:e3:3c:16:ca:8b:f5:a5:41:e4:91:4e:00:70:8e:55:
0a:af:65:28:92:da:6f:88:0a:fc:67:c0:8e:9f:2e:69:37:8c:
39:f7:c3:5a:a7:27:ea:7a:50:5d:e5:77:a1:3d:40:22:73:8b:
02:9c:fb:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:41 2024 by rpki-client on console-ams.rpki-client.org