Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/960164cb-eb5f-4722-a8d2-93173b785d24/6eba7edc1442a944b52ecc7728ab30dced7187b1.roa
File: 6eba7edc1442a944b52ecc7728ab30dced7187b1.roa (raw, json)
Hash identifier: tcNr52V2ZlZVX5qJvjLIE2q0jnOvoLVZP6TesUYQbLI=
Subject key identifier: 4E:AF:7D:DF:5B:5B:D5:DB:6E:38:59:E7:67:4F:30:04:96:9D:12:62
Certificate issuer: /CN=4d7ccceacdc123bdc2570502f568e65109ac06d3
Certificate serial: 259755
Authority key identifier: 4E:34:EE:2E:93:90:D7:4A:7F:44:C4:02:BA:E9:6E:AC:7B:67:50:36
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4d7ccceacdc123bdc2570502f568e65109ac06d3.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/960164cb-eb5f-4722-a8d2-93173b785d24/6eba7edc1442a944b52ecc7728ab30dced7187b1.roa
Signing time: Fri 02 Feb 2024 16:41:14 +0000
ROA not before: Fri 02 Feb 2024 16:41:13 +0000
ROA not after: Mon 02 Feb 2026 16:41:13 +0000
asID: 266834
IP address blocks: 45.238.56.0/22 maxlen: 24
2803:4ca0::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2463573 (0x259755)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d7ccceacdc123bdc2570502f568e65109ac06d3
Validity
Not Before: Feb 2 16:41:13 2024 GMT
Not After : Feb 2 16:41:13 2026 GMT
Subject: CN=6eba7edc1442a944b52ecc7728ab30dced7187b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:ba:90:39:39:22:51:fb:e8:b3:c0:39:23:c6:
ce:59:a2:c1:ac:a3:22:e0:08:6a:e3:6b:b6:79:78:
42:29:da:e3:3c:3e:63:5d:dd:b3:b5:5c:9b:43:43:
de:f8:17:10:73:29:82:a8:2e:4b:2d:1e:2b:86:19:
d0:a1:27:8c:81:c7:f6:2d:c7:a0:ba:09:3a:a4:3d:
3b:74:d6:df:7a:19:e4:c7:0f:33:b4:5b:b6:02:71:
cb:bf:a0:51:73:a9:a8:96:b6:c9:69:44:09:35:74:
79:5a:ed:03:13:95:93:d1:38:f7:70:3c:71:b0:68:
27:48:6d:17:7c:b7:9d:fc:c3:b0:49:e4:d2:d2:37:
0e:73:7c:3d:2f:16:9e:a9:bc:5e:db:51:74:73:0a:
7d:91:de:33:93:72:35:cf:67:ec:fb:76:eb:3e:29:
70:05:f5:62:ca:ce:ef:57:15:b5:e4:c7:91:06:a1:
ba:13:d6:27:f1:5f:d9:b7:b0:c9:b3:1e:d8:41:18:
a2:58:11:3d:68:54:60:5c:50:83:f6:25:32:9c:90:
91:69:a2:a3:b8:6c:bc:81:2c:ac:1f:1d:17:b8:ff:
01:83:53:ad:5c:fc:f3:b8:e3:ea:50:45:d2:09:04:
74:51:a4:58:c0:1d:28:51:2e:fe:61:81:6d:3e:09:
3c:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:AF:7D:DF:5B:5B:D5:DB:6E:38:59:E7:67:4F:30:04:96:9D:12:62
X509v3 Authority Key Identifier:
keyid:4E:34:EE:2E:93:90:D7:4A:7F:44:C4:02:BA:E9:6E:AC:7B:67:50:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4d7ccceacdc123bdc2570502f568e65109ac06d3.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/960164cb-eb5f-4722-a8d2-93173b785d24/6eba7edc1442a944b52ecc7728ab30dced7187b1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/960164cb-eb5f-4722-a8d2-93173b785d24/4d7ccceacdc123bdc2570502f568e65109ac06d3.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.238.56.0/22
IPv6:
2803:4ca0::/32
Signature Algorithm: sha256WithRSAEncryption
7a:06:dc:be:ce:ff:bf:7c:2c:bb:48:f4:ce:37:43:48:9b:ec:
72:f1:9c:e4:f6:38:e9:cd:f8:80:34:85:93:59:56:b0:d7:fe:
8e:38:fd:7c:1b:d4:41:cf:95:0d:d7:c6:0d:46:5f:a1:67:c4:
7b:c7:6e:7a:57:a0:75:e6:79:09:71:3f:c3:f7:f8:b8:ec:68:
c5:13:8d:fb:55:42:c2:51:89:9c:db:dd:43:54:96:e1:80:7c:
cd:1d:4d:05:28:87:e2:60:b2:72:b0:56:c4:0a:ae:cd:54:96:
22:84:ce:78:6e:d4:f4:9e:96:4f:84:c2:12:59:c9:e6:62:14:
c9:ce:81:cd:04:e7:55:f7:ef:c5:78:be:de:e2:65:80:19:38:
8b:b4:24:51:0e:e6:d4:dd:3d:23:03:68:c3:09:ad:2d:ba:1b:
21:be:0c:f7:a4:e5:4e:6b:cd:dd:22:e9:c3:bd:47:2c:d1:f7:
c9:10:1b:32:7e:06:30:a6:9b:af:0b:12:a9:2b:df:b4:90:f8:
9f:c6:e0:8d:71:63:76:0e:61:da:d0:a1:0d:7f:20:ee:d9:70:
d7:3a:4c:88:7e:16:d3:1b:89:a9:1b:f5:d2:f0:63:c0:35:95:
d5:80:07:2d:4a:f1:d7:4e:0c:81:48:18:05:5c:59:b8:81:59:
88:68:2c:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:55 2024 by rpki-client on console-fra.rpki-client.org