Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a30fe822-3ce4-4e70-b17c-8bec66c1ba27/0e2b55c24cd02322c3e5087892495055a20c6a7d.roa
File: 0e2b55c24cd02322c3e5087892495055a20c6a7d.roa (raw, json)
Hash identifier: sDyDmaPA49tFhPgfJq5vmuwMOUZ6Oy/3YClwRgldKEY=
Subject key identifier: 21:AE:E2:A6:DF:D1:9F:8A:7D:F9:6D:75:7F:6B:E1:08:10:D8:EC:F7
Certificate issuer: /CN=42b02bf99b87736ae95e822677591902bbb82724
Certificate serial: 20B49B
Authority key identifier: AC:67:68:30:B3:A6:85:85:44:6D:88:27:41:E3:04:B8:71:48:66:28
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/42b02bf99b87736ae95e822677591902bbb82724.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/a30fe822-3ce4-4e70-b17c-8bec66c1ba27/0e2b55c24cd02322c3e5087892495055a20c6a7d.roa
Signing time: Mon 15 May 2023 20:32:14 +0000
ROA not before: Sun 14 May 2023 20:32:14 +0000
ROA not after: Thu 15 May 2025 20:32:14 +0000
asID: 266844
IP address blocks: 45.238.152.0/23 maxlen: 23
45.238.154.0/23 maxlen: 23
45.238.152.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2143387 (0x20b49b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42b02bf99b87736ae95e822677591902bbb82724
Validity
Not Before: May 14 20:32:14 2023 GMT
Not After : May 15 20:32:14 2025 GMT
Subject: CN=0e2b55c24cd02322c3e5087892495055a20c6a7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:6f:cb:48:04:8b:49:3d:33:c6:72:d7:26:55:
3a:84:3a:ef:9b:24:98:63:fb:1e:db:89:6f:32:95:
cd:1c:9f:94:87:cf:9e:f0:65:80:dd:60:16:dd:a1:
ba:a5:5a:25:78:5e:09:ec:a5:1c:34:65:c0:02:07:
ef:51:81:fc:43:a8:0f:07:32:15:04:95:13:7f:61:
c3:6a:a2:7b:8d:b8:de:98:c4:c8:61:0a:bd:08:82:
7b:09:61:f6:e7:43:a5:19:d6:c3:3d:10:33:65:45:
11:bf:51:aa:cf:d7:fe:36:ad:ef:e8:52:43:6e:ff:
f1:3d:75:ed:62:c1:53:36:8b:52:49:d0:13:a3:fb:
bd:37:43:fc:f0:9b:c7:b1:fd:64:63:c4:74:c9:e1:
bf:56:76:e5:29:a5:6f:e2:cc:fd:ba:f8:37:52:90:
35:b1:1a:cc:2c:ef:e7:19:96:11:a7:0f:28:28:2f:
c9:92:42:40:a6:69:83:8b:9a:ca:25:b4:56:79:04:
a2:6a:3e:a6:76:28:f1:d2:37:9b:04:0c:15:ba:1c:
c7:e5:5e:f0:51:af:fd:1d:36:f7:cf:67:37:25:f2:
c9:0d:10:f9:03:9c:05:9e:5f:ae:27:7a:21:e7:e3:
71:dc:18:16:4f:92:45:df:f0:40:b0:79:8c:9e:5d:
09:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:AE:E2:A6:DF:D1:9F:8A:7D:F9:6D:75:7F:6B:E1:08:10:D8:EC:F7
X509v3 Authority Key Identifier:
keyid:AC:67:68:30:B3:A6:85:85:44:6D:88:27:41:E3:04:B8:71:48:66:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/42b02bf99b87736ae95e822677591902bbb82724.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a30fe822-3ce4-4e70-b17c-8bec66c1ba27/0e2b55c24cd02322c3e5087892495055a20c6a7d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/a30fe822-3ce4-4e70-b17c-8bec66c1ba27/42b02bf99b87736ae95e822677591902bbb82724.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.238.152.0/22
Signature Algorithm: sha256WithRSAEncryption
8f:da:83:d0:94:53:81:32:46:40:45:64:46:06:9f:df:7c:30:
50:ab:cc:c5:18:c0:8d:15:61:27:ab:ea:84:4d:97:45:ed:7b:
0c:de:b3:82:60:29:75:ec:0f:80:50:d5:96:50:30:85:5b:23:
7e:d6:19:17:23:fe:f6:4d:2e:a8:b3:53:1b:17:37:ab:b3:52:
24:da:19:37:53:77:ae:08:19:10:3b:19:75:ad:b5:d3:b9:ca:
d4:0e:5b:8b:28:44:fa:36:41:90:52:f3:c9:00:aa:54:af:1a:
30:c6:75:b5:0a:01:c9:be:0d:35:78:c5:31:37:cd:0d:32:8c:
cf:a0:36:8a:3c:ac:95:88:20:3d:41:be:b4:e7:36:a5:be:f2:
e2:22:02:26:71:d2:2d:d1:fe:35:77:1e:58:a4:0e:0e:9b:8d:
56:86:24:dd:c4:3d:ac:33:bf:97:d1:9d:43:b9:11:92:90:ec:
1e:09:6b:8e:8b:39:fa:f7:f1:51:a6:04:55:38:97:ff:7d:c8:
03:ff:7a:0a:fa:26:b5:9e:04:b9:dc:7d:4e:dc:a3:71:90:e4:
fe:71:ea:be:3d:05:cd:16:e3:c5:e2:39:ec:cf:91:69:90:81:
81:84:de:06:c7:6e:a4:70:06:bd:61:5b:7b:3e:30:b9:7b:24:
2a:28:0c:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:28 2024 by rpki-client on console-fra.rpki-client.org