Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a5e35e14-d8ca-4dd0-86fa-1dff22b989b0/65ecf4f4b28a7d4c7f19d1288d5fbbc44313755c.roa
File: 65ecf4f4b28a7d4c7f19d1288d5fbbc44313755c.roa (raw, json)
Hash identifier: bFCpps2xvmI80N0hUXJ6WV0Kuue7iy8kSIIblXlo1sA=
Subject key identifier: 40:DE:E7:8A:EB:2C:BF:4E:7B:D7:89:7F:00:85:F5:76:A7:67:AF:FF
Certificate issuer: /CN=00c18b7e771d28c4143ac2e64846e9f82bfa8a93
Certificate serial: 224C34
Authority key identifier: CC:22:94:7A:06:AB:24:B5:D8:FE:86:71:F5:BE:C8:4A:B6:3D:A9:F8
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/00c18b7e771d28c4143ac2e64846e9f82bfa8a93.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/a5e35e14-d8ca-4dd0-86fa-1dff22b989b0/65ecf4f4b28a7d4c7f19d1288d5fbbc44313755c.roa
Signing time: Mon 07 Aug 2023 15:45:14 +0000
ROA not before: Sun 06 Aug 2023 15:45:14 +0000
ROA not after: Thu 07 Aug 2025 15:45:14 +0000
asID: 27884
IP address blocks: 45.234.232.0/22 maxlen: 24
2803:8f20::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2247732 (0x224c34)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00c18b7e771d28c4143ac2e64846e9f82bfa8a93
Validity
Not Before: Aug 6 15:45:14 2023 GMT
Not After : Aug 7 15:45:14 2025 GMT
Subject: CN=65ecf4f4b28a7d4c7f19d1288d5fbbc44313755c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:d4:51:de:f8:bf:cd:a7:d1:70:e4:05:55:8f:
b0:79:c2:70:8f:aa:4d:5e:09:fe:27:c3:6e:72:85:
84:0a:ae:75:33:44:1e:f8:1a:77:99:93:95:6b:20:
f3:80:5f:c4:09:81:25:cc:73:5d:e3:b5:2d:a1:f4:
e2:a4:13:b0:63:6e:86:48:0c:a6:b8:44:b3:54:9e:
82:12:22:63:d5:91:96:ea:32:28:e5:6d:0c:17:c1:
ea:c3:6b:4d:6c:10:db:72:82:dc:fa:7d:6d:63:c0:
06:62:f5:00:11:20:f1:fd:3e:0d:a4:93:a4:d4:f6:
d0:e4:30:5b:55:8e:be:38:11:d9:7f:c4:7c:95:90:
75:2f:1c:c7:79:40:ce:a6:92:1b:8e:50:25:cd:53:
96:0e:f8:e4:5f:3d:c8:25:c3:ce:34:2e:c8:6d:3b:
dc:01:3b:53:dd:39:8a:ee:5f:b0:05:2a:d9:f1:89:
7d:53:96:82:12:f4:98:52:ee:43:77:f6:14:aa:25:
c4:76:a9:f4:a3:ca:4b:10:b3:a6:2d:10:f5:00:7e:
b0:28:51:4a:25:d1:82:b5:35:6a:d0:03:5f:a2:fd:
df:b6:51:e4:3d:b8:39:4a:36:24:4a:b5:91:ce:f3:
f4:c1:b7:35:f8:ef:dc:25:cd:bf:56:e5:58:39:83:
75:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:DE:E7:8A:EB:2C:BF:4E:7B:D7:89:7F:00:85:F5:76:A7:67:AF:FF
X509v3 Authority Key Identifier:
keyid:CC:22:94:7A:06:AB:24:B5:D8:FE:86:71:F5:BE:C8:4A:B6:3D:A9:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/00c18b7e771d28c4143ac2e64846e9f82bfa8a93.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a5e35e14-d8ca-4dd0-86fa-1dff22b989b0/65ecf4f4b28a7d4c7f19d1288d5fbbc44313755c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/a5e35e14-d8ca-4dd0-86fa-1dff22b989b0/00c18b7e771d28c4143ac2e64846e9f82bfa8a93.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.234.232.0/22
IPv6:
2803:8f20::/32
Signature Algorithm: sha256WithRSAEncryption
4d:73:73:ea:e5:e1:d3:17:84:7f:ea:d5:f1:cc:ee:de:0c:0b:
d2:6f:fc:b0:8c:6e:02:f0:45:62:12:43:47:0d:bc:eb:b9:2b:
10:00:6f:5b:22:60:80:66:d1:6d:b5:6a:88:f0:f6:b8:25:8e:
a2:15:c0:28:53:7d:b8:53:5a:3c:83:57:01:f8:35:06:0e:64:
3c:76:b6:10:9c:5c:d9:a1:e7:02:cf:34:65:be:bf:a6:96:c5:
dc:85:12:63:b2:70:e5:71:47:d4:c7:bf:d9:d8:3b:95:8d:d5:
78:9a:e9:d3:8f:79:83:41:68:e8:44:b6:59:6c:0c:a8:be:0e:
11:56:19:bd:fc:e1:7c:44:f3:bd:0b:70:6f:44:de:6e:bf:92:
d1:ca:63:e6:cf:e3:93:62:dc:3b:3e:62:b8:5b:df:14:29:e6:
cc:2f:1f:d4:c4:0d:58:ba:9f:19:9d:8c:18:40:11:41:cd:35:
5f:4a:a1:94:67:99:8d:e4:62:4b:91:49:62:98:28:3f:c2:08:
2b:00:a7:4c:68:2d:27:1a:cf:2a:fc:4c:6e:62:39:eb:ce:31:
d2:ad:d1:ef:a4:28:53:d9:eb:c7:c2:0e:97:7e:a4:44:95:25:
94:de:87:28:6d:09:41:24:f3:d3:e8:77:e8:3d:be:66:06:b9:
69:cd:3d:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:44 2024 by rpki-client on console-ams.rpki-client.org