Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a30fe822-3ce4-4e70-b17c-8bec66c1ba27/b3ea1d3230d17be08a292431edb5cff4173dceef.roa
File: b3ea1d3230d17be08a292431edb5cff4173dceef.roa (raw, json)
Hash identifier: rmLfDPaVS4IHoKrrt6MbvsgTquZeUebCIiddKTppqsc=
Subject key identifier: 25:E9:39:15:AE:DC:B6:93:D8:FB:2E:D3:B6:8D:AC:46:53:89:8A:BD
Certificate issuer: /CN=42b02bf99b87736ae95e822677591902bbb82724
Certificate serial: 209F11
Authority key identifier: AC:67:68:30:B3:A6:85:85:44:6D:88:27:41:E3:04:B8:71:48:66:28
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/42b02bf99b87736ae95e822677591902bbb82724.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/a30fe822-3ce4-4e70-b17c-8bec66c1ba27/b3ea1d3230d17be08a292431edb5cff4173dceef.roa
Signing time: Mon 15 May 2023 20:27:38 +0000
ROA not before: Sun 14 May 2023 20:27:38 +0000
ROA not after: Thu 15 May 2025 20:27:38 +0000
asID: 266844
IP address blocks: 45.238.152.0/24 maxlen: 24
45.238.153.0/24 maxlen: 24
45.238.154.0/24 maxlen: 24
45.238.155.0/24 maxlen: 24
2803:dca0::/32 maxlen: 96
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2137873 (0x209f11)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42b02bf99b87736ae95e822677591902bbb82724
Validity
Not Before: May 14 20:27:38 2023 GMT
Not After : May 15 20:27:38 2025 GMT
Subject: CN=b3ea1d3230d17be08a292431edb5cff4173dceef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:49:8a:38:f7:d6:8a:b7:8e:04:86:e8:09:5f:
3b:7a:d2:aa:aa:91:8c:4f:88:9c:b6:93:ba:2f:13:
4f:fb:e8:d8:61:21:4b:d3:8a:32:84:55:71:32:e5:
00:ef:fb:1b:36:7d:27:ae:1a:8d:95:17:aa:bd:31:
16:02:58:07:ee:9a:db:fd:4a:93:29:49:52:8b:69:
5e:7d:bb:06:b5:53:19:a9:fd:36:ac:41:6b:18:72:
14:c3:de:76:99:82:61:42:5b:5a:ec:e2:4e:e3:39:
c3:03:78:3b:a8:4c:50:e9:de:51:78:53:7e:a5:98:
d7:65:4c:bf:8f:38:bf:48:3d:d0:af:df:da:e8:6f:
32:e6:38:cb:e3:a7:6e:e1:4e:bd:f8:8e:8c:7c:91:
6c:0b:05:8e:57:77:e4:b7:ae:89:e7:75:cc:bf:7a:
19:e1:e3:92:84:ed:ce:50:35:a9:02:94:f4:a7:8a:
d4:b4:ae:7e:fc:8a:b7:bd:a1:05:94:fb:68:61:82:
c9:aa:de:9e:ef:2e:06:e7:35:e1:73:b3:30:48:6e:
32:1b:52:54:a7:97:d3:50:0f:2c:5d:8f:ce:c3:b4:
8e:3f:29:4f:c5:a9:eb:f6:08:5a:2c:81:7f:4b:ba:
5e:c3:fc:35:79:d5:6d:6e:04:29:42:b0:c5:94:1e:
31:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:E9:39:15:AE:DC:B6:93:D8:FB:2E:D3:B6:8D:AC:46:53:89:8A:BD
X509v3 Authority Key Identifier:
keyid:AC:67:68:30:B3:A6:85:85:44:6D:88:27:41:E3:04:B8:71:48:66:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/42b02bf99b87736ae95e822677591902bbb82724.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a30fe822-3ce4-4e70-b17c-8bec66c1ba27/b3ea1d3230d17be08a292431edb5cff4173dceef.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/a30fe822-3ce4-4e70-b17c-8bec66c1ba27/42b02bf99b87736ae95e822677591902bbb82724.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.238.152.0/22
IPv6:
2803:dca0::/32
Signature Algorithm: sha256WithRSAEncryption
59:89:79:3d:81:cb:f5:b2:a8:b7:ab:dc:cb:6a:51:5e:c3:2f:
38:e9:70:60:9f:84:4e:5f:05:81:79:9c:dd:45:20:ac:ab:61:
3b:90:48:bb:0f:58:93:82:1d:f5:74:bf:01:61:fb:bb:79:45:
03:cd:fb:77:2f:dc:f8:18:52:0f:80:90:d8:50:63:70:2c:c9:
6c:7d:10:ab:82:c3:3a:5a:36:5d:d5:81:2b:33:6e:db:13:69:
94:fe:91:21:e0:0c:00:13:a8:2a:0c:31:b0:ba:dd:19:7a:0a:
9f:5d:2f:d5:3d:bb:d6:5e:9f:b6:68:fb:94:10:2c:51:7c:82:
b8:ae:ba:60:25:a7:d7:a2:34:d0:85:f5:e4:09:f8:ae:7a:f5:
eb:d6:3d:2b:64:16:88:fb:34:d3:bf:da:12:b1:4b:c9:10:77:
96:4f:27:37:42:78:32:c4:e3:1d:3a:43:e8:8d:f8:a0:6d:d6:
03:dd:73:02:c6:ce:92:aa:26:a2:41:17:40:7f:41:42:59:2d:
ca:d4:3c:4c:ec:4b:56:75:f8:35:2c:86:3c:c8:75:cf:fa:2c:
50:a6:31:ea:74:11:aa:36:01:02:63:73:00:98:1d:09:ad:d5:
11:fc:2b:df:cd:bb:b2:8e:05:d6:c8:d3:df:dd:0a:fe:e0:38:
2e:be:31:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:44 2024 by rpki-client on console-ams.rpki-client.org