Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a042872e-fe6a-4ada-b82a-2740e85ce301/e3419f67e6dcde57a25ee18dbd81a09bc71b5985.roa
File: e3419f67e6dcde57a25ee18dbd81a09bc71b5985.roa (raw, json)
Hash identifier: 4JF7vdS4Qc4vMyxpbYHifKEug7GM6MJmbz6lfEQi7gI=
Subject key identifier: 79:ED:4F:E0:5C:B2:21:CE:59:83:3B:B2:C7:93:5E:AB:5F:44:B5:D0
Certificate issuer: /CN=153ee74d778c25cd3ef7f8e08706e57eb48d7c04
Certificate serial: 04B5
Authority key identifier: 0C:D5:82:4D:BB:3B:4B:19:73:65:A5:81:18:1E:64:40:BE:0E:AF:CD
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/153ee74d778c25cd3ef7f8e08706e57eb48d7c04.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/a042872e-fe6a-4ada-b82a-2740e85ce301/e3419f67e6dcde57a25ee18dbd81a09bc71b5985.roa
Signing time: Sat 03 Jun 2023 11:39:52 +0000
ROA not before: Fri 02 Jun 2023 11:39:52 +0000
ROA not after: Tue 03 Jun 2025 11:39:52 +0000
asID: 265816
IP address blocks: 45.70.220.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1205 (0x4b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=153ee74d778c25cd3ef7f8e08706e57eb48d7c04
Validity
Not Before: Jun 2 11:39:52 2023 GMT
Not After : Jun 3 11:39:52 2025 GMT
Subject: CN=e3419f67e6dcde57a25ee18dbd81a09bc71b5985
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b1:0a:93:20:4c:ad:81:e0:c3:90:1c:91:61:
ed:f2:f9:c2:f1:f4:3c:db:9d:c1:3b:c2:c7:93:61:
86:73:f5:0e:7a:30:71:b6:83:90:4e:9c:e2:c8:ae:
39:11:7e:08:1e:23:db:b4:3d:5f:01:82:c6:1c:92:
c2:d2:87:80:1c:6e:c0:57:84:fc:a1:0e:dc:23:4f:
d6:8f:94:35:91:16:60:49:ae:a6:c4:8b:05:a4:7e:
c1:c6:5d:08:dc:d7:48:cb:e0:0d:b2:73:35:e4:2c:
91:2d:d4:ca:a0:a1:74:33:a1:5c:02:93:99:00:6d:
bf:77:f5:c3:8c:40:52:66:b3:02:fc:21:66:f1:cd:
0f:ee:9f:e3:f5:8a:68:67:ef:2f:99:b7:3b:74:aa:
ca:7b:20:56:db:e3:36:2b:a7:63:51:b2:04:21:c5:
5c:86:2a:73:b4:3e:d9:7c:04:80:d0:c8:fd:15:a5:
0e:f9:48:98:3b:b7:c1:cb:ae:84:b5:f5:cb:b0:17:
c5:cb:51:e2:d9:da:73:be:10:d3:70:6a:d1:d7:d1:
08:d2:f6:40:00:68:49:48:5d:a4:d8:45:66:a5:aa:
db:4d:07:07:9b:3b:d1:de:cd:b9:41:33:54:ea:d4:
1b:9e:6b:8b:c7:9b:71:0d:91:1e:63:a6:39:0d:86:
f5:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:ED:4F:E0:5C:B2:21:CE:59:83:3B:B2:C7:93:5E:AB:5F:44:B5:D0
X509v3 Authority Key Identifier:
keyid:0C:D5:82:4D:BB:3B:4B:19:73:65:A5:81:18:1E:64:40:BE:0E:AF:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/153ee74d778c25cd3ef7f8e08706e57eb48d7c04.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a042872e-fe6a-4ada-b82a-2740e85ce301/e3419f67e6dcde57a25ee18dbd81a09bc71b5985.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/a042872e-fe6a-4ada-b82a-2740e85ce301/153ee74d778c25cd3ef7f8e08706e57eb48d7c04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.70.220.0/22
Signature Algorithm: sha256WithRSAEncryption
b4:49:6c:bd:4e:42:95:ea:ca:57:25:14:97:b1:88:56:bc:f1:
16:f9:a0:99:cf:6c:46:9b:db:d7:0c:c9:89:00:d9:27:b5:f9:
79:12:b7:2e:53:00:5e:8a:3e:0d:cf:f0:25:b1:da:97:1a:66:
66:25:0a:7f:9b:f3:bc:eb:71:af:4c:a9:bc:a5:f8:25:ee:69:
4b:ba:0c:6a:0e:06:11:f1:ec:7e:f8:18:6d:01:28:d4:d2:9f:
64:4f:da:83:5c:58:bc:59:53:fe:7c:13:62:d4:c8:9b:d8:7f:
59:86:9d:cf:d8:bd:9d:9b:e4:e5:9d:0e:75:a5:82:38:af:d1:
cc:82:89:5a:0a:94:e5:17:e9:23:d6:36:cf:f9:5c:55:95:3a:
11:bf:e4:b7:95:f5:fa:5e:5e:5d:e2:d3:90:37:08:78:04:52:
96:bb:61:4f:cf:59:d4:c1:05:a3:97:49:db:ec:57:cc:84:5d:
fa:cd:9a:4a:9b:12:a3:06:ff:df:d8:47:23:71:5e:80:8d:db:
0b:93:f4:9f:01:c0:f2:f7:cd:f3:9b:6c:e5:fb:66:db:ab:e4:
c1:63:ac:55:be:a3:11:14:dc:17:5d:99:18:e3:9d:20:16:22:
14:f4:32:95:e0:00:53:23:53:27:e9:7c:8c:e5:75:0f:97:6b:
ff:8a:64:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:44 2024 by rpki-client on console-ams.rpki-client.org