Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/960164cb-eb5f-4722-a8d2-93173b785d24/4190cb2c5ed34614c9bacb8d4b364f4eef635fd2.roa
File: 4190cb2c5ed34614c9bacb8d4b364f4eef635fd2.roa (raw, json)
Hash identifier: AabuI3mC0qhb35bRpjxDJKWtQ/RQL6DVK9MhkVBM/eQ=
Subject key identifier: BB:37:D4:08:84:31:E0:32:4D:75:FD:F2:33:9C:5C:FA:61:5D:BC:0D
Certificate issuer: /CN=4d7ccceacdc123bdc2570502f568e65109ac06d3
Certificate serial: 259A18
Authority key identifier: 4E:34:EE:2E:93:90:D7:4A:7F:44:C4:02:BA:E9:6E:AC:7B:67:50:36
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4d7ccceacdc123bdc2570502f568e65109ac06d3.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/960164cb-eb5f-4722-a8d2-93173b785d24/4190cb2c5ed34614c9bacb8d4b364f4eef635fd2.roa
Signing time: Fri 02 Feb 2024 16:41:15 +0000
ROA not before: Fri 02 Feb 2024 16:41:13 +0000
ROA not after: Mon 02 Feb 2026 16:41:13 +0000
asID: 264668
IP address blocks: 45.238.56.0/22 maxlen: 24
2803:4ca0::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2464280 (0x259a18)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d7ccceacdc123bdc2570502f568e65109ac06d3
Validity
Not Before: Feb 2 16:41:13 2024 GMT
Not After : Feb 2 16:41:13 2026 GMT
Subject: CN=4190cb2c5ed34614c9bacb8d4b364f4eef635fd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:40:88:19:14:ef:6d:1a:da:4d:3a:f7:6a:3d:
01:d4:11:35:86:fa:f5:30:35:74:84:9e:7f:fd:d1:
b4:ad:0c:24:39:d1:2c:ad:4c:c5:3d:ff:b4:c4:14:
bf:dc:cb:16:d9:7f:93:75:57:e6:ff:3a:1a:81:18:
01:bd:d5:56:d7:a5:1b:5d:c3:e1:6f:16:69:0f:82:
bc:79:78:af:b4:b2:d7:29:24:2e:41:14:06:cc:7f:
4a:30:33:67:fc:79:a1:9d:f2:8e:9e:af:37:9b:f9:
ed:e2:bf:4a:e4:22:ba:ce:a6:20:12:67:cb:17:ee:
e7:4c:08:ba:45:68:45:8e:f9:9b:9f:b0:b5:b3:63:
82:d0:d3:ba:98:84:31:0c:02:2f:95:02:26:f9:ab:
84:a7:18:6f:00:72:4a:95:0d:de:53:0c:d8:5a:1f:
bb:00:f4:cd:45:42:51:4d:7c:af:57:9e:81:2e:cf:
d9:2a:47:bf:95:9b:4d:be:8f:d9:bf:f1:44:f8:49:
b0:0a:d6:4b:cf:4c:1d:9a:0a:9e:f5:ec:4b:e6:ec:
b4:38:49:64:38:7c:0b:d7:5a:a2:8a:d2:93:45:c5:
8b:52:20:44:3b:23:32:50:b6:19:08:d5:49:2c:1d:
c1:94:d4:b1:6b:36:9d:0c:60:73:fb:cf:19:98:e0:
82:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:37:D4:08:84:31:E0:32:4D:75:FD:F2:33:9C:5C:FA:61:5D:BC:0D
X509v3 Authority Key Identifier:
keyid:4E:34:EE:2E:93:90:D7:4A:7F:44:C4:02:BA:E9:6E:AC:7B:67:50:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4d7ccceacdc123bdc2570502f568e65109ac06d3.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/960164cb-eb5f-4722-a8d2-93173b785d24/4190cb2c5ed34614c9bacb8d4b364f4eef635fd2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/960164cb-eb5f-4722-a8d2-93173b785d24/4d7ccceacdc123bdc2570502f568e65109ac06d3.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.238.56.0/22
IPv6:
2803:4ca0::/32
Signature Algorithm: sha256WithRSAEncryption
4f:62:b2:c4:26:f5:c6:97:20:76:e4:06:1e:87:cd:0f:f1:13:
bb:e1:75:58:17:13:99:75:fd:5f:62:70:e1:35:63:aa:88:c0:
85:9c:80:4f:22:2f:4b:e1:1c:ba:75:fa:09:ce:45:dd:53:1c:
13:b5:b2:c6:55:66:d2:25:88:05:cd:29:8f:2a:ab:a6:9a:28:
7e:b1:b9:09:01:2b:45:64:fc:be:10:7a:be:32:d6:14:9f:54:
54:18:45:dd:2a:12:9d:e3:a1:14:92:aa:3e:7c:c8:a5:a5:78:
4e:02:ca:5d:aa:4f:80:5f:0b:6a:bf:6d:d7:60:07:3e:68:db:
36:7a:c5:af:00:d3:f2:ec:df:48:e2:02:d7:4c:05:d3:ac:fc:
35:38:d7:ec:51:1b:a0:a9:c3:b2:e1:06:3a:7a:dc:08:11:ff:
19:72:d7:a6:06:aa:b9:53:42:21:04:d5:b5:f6:40:52:51:b7:
2e:88:34:d1:cb:d2:30:85:8c:58:88:fa:2c:d9:ab:76:25:bc:
a5:79:6d:d5:d7:1f:d3:4d:3a:ac:c2:57:27:af:37:5b:9a:47:
53:46:34:ab:cd:26:09:5a:96:4f:6d:e6:a3:fc:a7:41:d1:c5:
48:9d:5d:2d:4b:c9:cf:af:cc:57:56:90:44:3a:00:b7:18:d0:
64:dc:3c:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:55 2024 by rpki-client on console-fra.rpki-client.org