Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9d05a14a-306f-4509-b4aa-3cc5670b735c/cb9c00c51ad8f0c3817a0f68eba73102f337bf36.roa
File: cb9c00c51ad8f0c3817a0f68eba73102f337bf36.roa (raw, json)
Hash identifier: Pm7JAT/DqatrDhZ5Kh4PdSn8aCXvvPmZHfPbZ9qAMYo=
Subject key identifier: 0E:F3:08:30:E9:C2:27:D0:5D:CF:BA:C3:AF:DA:2B:70:AA:4B:F1:33
Certificate issuer: /CN=b902843ecff864fd5a08fee4deed318c9c146f72
Certificate serial: 0C1BB5
Authority key identifier: 4D:BB:0C:09:73:C0:27:30:6D:CA:73:1A:8A:34:21:B7:89:22:76:D0
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b902843ecff864fd5a08fee4deed318c9c146f72.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9d05a14a-306f-4509-b4aa-3cc5670b735c/cb9c00c51ad8f0c3817a0f68eba73102f337bf36.roa
Signing time: Wed 24 Mar 2021 14:29:12 +0000
ROA not before: Wed 24 Mar 2021 14:29:12 +0000
ROA not after: Tue 24 Mar 2026 14:29:12 +0000
asID: 267910
IP address blocks: 45.176.20.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 793525 (0xc1bb5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b902843ecff864fd5a08fee4deed318c9c146f72
Validity
Not Before: Mar 24 14:29:12 2021 GMT
Not After : Mar 24 14:29:12 2026 GMT
Subject: CN=cb9c00c51ad8f0c3817a0f68eba73102f337bf36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:38:5d:43:53:3f:94:eb:1d:37:6b:10:ac:7e:
fa:f8:fb:9d:b4:ce:46:5d:b1:06:49:88:e1:d7:d8:
76:5a:53:f8:5b:3f:93:2a:f5:da:fb:4d:e6:6d:09:
94:13:bc:76:9c:70:09:6d:d6:08:d3:23:33:d0:05:
ce:4b:a7:16:34:c1:22:6b:eb:89:48:61:d5:3a:34:
b3:f7:bf:9b:6d:0a:7e:33:79:68:f0:85:a3:59:5a:
d5:c1:0c:38:fd:ba:55:1e:10:a2:59:b8:32:05:17:
3a:c5:30:ca:e6:68:74:e4:c5:8d:e5:8e:81:d7:27:
15:9a:b0:9b:aa:5f:12:be:1c:9e:2c:44:42:99:06:
5a:c0:25:a9:4e:6b:d8:95:f1:81:13:3f:d0:81:20:
be:1d:45:01:9f:23:fd:47:c2:94:7e:3f:00:21:45:
40:0d:0d:4b:9c:b2:3a:b9:62:a8:82:df:a9:17:16:
e8:bc:33:71:44:ba:f6:8e:20:8d:d7:78:32:2a:6d:
7d:0f:3b:47:be:bd:ee:7f:c3:da:48:46:0d:9a:46:
8f:e2:0e:51:ad:40:e1:ba:ef:dd:6a:58:f0:83:4b:
23:5d:6a:71:f5:31:81:12:dc:dc:91:ef:cd:e6:db:
11:10:27:e5:40:db:94:57:d6:9e:d2:4a:a0:af:28:
fd:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:F3:08:30:E9:C2:27:D0:5D:CF:BA:C3:AF:DA:2B:70:AA:4B:F1:33
X509v3 Authority Key Identifier:
keyid:4D:BB:0C:09:73:C0:27:30:6D:CA:73:1A:8A:34:21:B7:89:22:76:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b902843ecff864fd5a08fee4deed318c9c146f72.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9d05a14a-306f-4509-b4aa-3cc5670b735c/cb9c00c51ad8f0c3817a0f68eba73102f337bf36.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9d05a14a-306f-4509-b4aa-3cc5670b735c/b902843ecff864fd5a08fee4deed318c9c146f72.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.176.20.0/22
Signature Algorithm: sha256WithRSAEncryption
18:91:f6:2f:a6:80:31:dc:d6:55:bf:2f:62:97:cf:69:80:9a:
18:0b:a1:2b:9e:dc:57:ba:04:5b:3c:21:a9:65:5f:32:38:49:
18:13:b8:a4:ba:87:fb:9d:8d:1f:0d:9b:b4:c5:a1:af:b0:62:
99:10:61:05:9e:cb:ad:5b:df:f0:8b:25:17:09:62:8e:3b:98:
a3:7d:68:fb:f2:1e:f1:db:0b:83:e2:b6:3c:f6:2c:6a:56:de:
72:92:fe:03:63:d4:f3:af:d7:81:f0:8a:53:71:16:ca:0e:20:
c8:39:51:7d:60:55:4d:d0:54:89:55:0c:a9:9f:6d:11:75:a9:
d9:3d:0b:f0:3b:ba:3c:36:68:5e:c9:69:a5:ee:ae:14:b1:5f:
46:7f:3a:cf:1b:64:fc:b6:b1:6d:83:00:6c:d7:d8:7b:18:5d:
8e:09:4b:89:4f:e9:0c:2c:6f:47:e6:98:59:71:2b:75:4b:7c:
4a:fb:b0:01:b4:56:93:f2:f5:a4:e5:24:27:ed:f8:9b:42:66:
4c:be:39:5b:e4:bb:b3:ff:78:c1:e2:cd:e5:97:51:95:08:ab:
9c:60:6b:55:d6:3c:3e:0d:7d:e9:46:6d:89:32:05:74:24:ff:
d1:3f:70:14:d2:18:d4:e0:1a:49:93:c8:fa:73:bc:a0:3e:c8:
28:4e:26:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:42 2024 by rpki-client on console-ams.rpki-client.org