Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9c169f1b-d65a-4498-8422-b4592b6caccd/f51624d1c3500df43c60b0b5c7bb77c4099e2f5f.roa
File: f51624d1c3500df43c60b0b5c7bb77c4099e2f5f.roa (raw, json)
Hash identifier: tmenWncM5GL1JZc/AwBdn3VzXTMhE3zK6VnPRL9h03A=
Subject key identifier: FF:36:36:E7:1C:B3:34:78:12:8A:38:4C:72:C9:AA:69:21:A0:F6:80
Certificate issuer: /CN=ae02fdac5e4e467f2c3e10ce098ac749c3bbd143
Certificate serial: 0CD4CE
Authority key identifier: 61:10:D4:98:6F:CB:47:FA:45:8B:D1:87:98:87:8C:3C:AA:B7:28:21
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ae02fdac5e4e467f2c3e10ce098ac749c3bbd143.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9c169f1b-d65a-4498-8422-b4592b6caccd/f51624d1c3500df43c60b0b5c7bb77c4099e2f5f.roa
Signing time: Wed 24 Mar 2021 14:33:14 +0000
ROA not before: Wed 24 Mar 2021 14:33:14 +0000
ROA not after: Tue 24 Mar 2026 14:33:14 +0000
asID: 266902
IP address blocks: 45.161.44.0/24 maxlen: 24
45.161.45.0/24 maxlen: 24
45.161.46.0/24 maxlen: 24
45.161.47.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 840910 (0xcd4ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae02fdac5e4e467f2c3e10ce098ac749c3bbd143
Validity
Not Before: Mar 24 14:33:14 2021 GMT
Not After : Mar 24 14:33:14 2026 GMT
Subject: CN=f51624d1c3500df43c60b0b5c7bb77c4099e2f5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e8:8a:05:bf:31:97:10:e1:c9:57:43:51:04:
14:57:fc:d7:9a:c0:f3:d2:ff:12:56:31:a7:c5:4a:
ee:e0:9c:79:d8:19:3a:b6:da:b9:fb:eb:15:b3:15:
ba:a5:91:1d:c2:15:f2:5f:66:34:08:8f:3a:42:ca:
a2:43:36:79:08:ae:f2:62:da:d2:ba:67:c4:e1:ba:
a0:d5:58:ff:ff:3a:56:64:82:58:45:28:61:ee:64:
e2:bd:53:1c:6b:14:d4:10:57:c1:e6:2d:a3:3e:ba:
e5:a6:ac:da:47:3d:22:91:c2:d4:8e:7a:c9:8e:de:
1c:0b:15:6c:2c:69:a1:e9:3e:86:60:c5:61:89:54:
fa:e5:e2:6b:7d:88:1e:5a:03:5d:0a:77:76:8c:bd:
0a:cf:b8:8f:a8:ed:9c:48:c4:3a:86:c2:54:1f:b0:
be:ab:3f:99:8e:69:77:54:ab:94:93:13:bd:7b:38:
a0:84:ca:58:77:61:f7:d0:30:54:0d:b1:8b:60:18:
c2:f2:16:0b:7f:df:fe:d6:3a:12:80:0e:7e:4f:c2:
96:e3:27:a9:68:2b:a2:b9:9e:9b:9e:f0:64:ce:1d:
4a:8c:07:c0:a2:c7:90:e7:50:e8:4f:47:28:cf:3a:
e1:8d:16:b4:58:d5:be:d6:2c:8f:b9:ef:ab:2e:74:
b7:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:36:36:E7:1C:B3:34:78:12:8A:38:4C:72:C9:AA:69:21:A0:F6:80
X509v3 Authority Key Identifier:
keyid:61:10:D4:98:6F:CB:47:FA:45:8B:D1:87:98:87:8C:3C:AA:B7:28:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ae02fdac5e4e467f2c3e10ce098ac749c3bbd143.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9c169f1b-d65a-4498-8422-b4592b6caccd/f51624d1c3500df43c60b0b5c7bb77c4099e2f5f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9c169f1b-d65a-4498-8422-b4592b6caccd/ae02fdac5e4e467f2c3e10ce098ac749c3bbd143.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.161.44.0/22
Signature Algorithm: sha256WithRSAEncryption
56:de:42:28:84:59:e4:87:bd:45:b9:45:6e:cc:cf:77:61:3c:
4c:a1:4d:6d:85:55:54:9e:79:5d:ed:50:a6:15:f7:ec:f5:f6:
53:b3:c5:70:e6:93:f5:3e:45:95:0a:e4:21:f4:00:a2:fa:95:
e6:16:7b:8e:d0:51:5a:da:76:a3:af:63:e4:77:b6:26:4a:64:
3c:fc:a9:cb:7a:c7:28:33:a0:26:b5:a2:95:6f:37:ac:5b:0d:
b5:87:e8:06:b8:59:5b:ab:a1:a3:b6:89:49:c7:e6:06:dd:d9:
65:95:a2:0b:55:78:45:49:8c:21:ae:4d:4b:fa:e9:91:6b:3a:
de:6b:b5:43:83:bf:e7:07:bc:2a:73:f0:3c:f9:d4:40:e6:0c:
98:59:95:7c:92:ef:86:dd:40:47:57:d6:28:fa:55:d2:1f:02:
62:50:76:ef:33:b8:86:42:03:b1:bb:45:d8:4f:f3:b7:ac:e1:
49:c3:ba:87:9f:a0:c8:41:9a:13:94:da:ce:81:09:95:a7:f3:
45:86:7e:62:f2:54:31:26:2d:2b:fb:71:cc:45:3f:a5:bb:52:
e3:ad:1a:4a:43:f3:5b:49:0d:8f:e1:15:5b:d5:d3:59:d6:29:
ab:8a:22:6d:72:35:5c:12:90:51:d7:1d:cd:a7:6f:4b:54:4c:
b2:5e:a9:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:17 2024 by rpki-client on console-ams.rpki-client.org