Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a81b5dee-5dfe-43ea-80bf-5c3ff1ae3c55/25f428279e166a613989c439a6cf7485e89617a9.roa
File: 25f428279e166a613989c439a6cf7485e89617a9.roa (raw, json)
Hash identifier: EuIog/5/dzPuMMpxIFkGhWpf9NmokjronTWQII04MD4=
Subject key identifier: 95:44:23:09:DA:B9:AC:32:84:92:47:2D:A1:D7:D1:93:ED:D7:FB:FE
Certificate issuer: /CN=694b3d580e07f84edc87befe8b29d4e23ac87258
Certificate serial: 25A2C9
Authority key identifier: 18:B1:57:82:A8:45:F8:32:C1:B4:30:C0:84:DC:A4:AF:2C:6C:E0:5A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/694b3d580e07f84edc87befe8b29d4e23ac87258.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/a81b5dee-5dfe-43ea-80bf-5c3ff1ae3c55/25f428279e166a613989c439a6cf7485e89617a9.roa
Signing time: Sat 17 Feb 2024 01:05:36 +0000
ROA not before: Sat 17 Feb 2024 01:05:36 +0000
ROA not after: Tue 17 Feb 2026 01:05:36 +0000
asID: 23470
IP address blocks: 45.170.245.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2466505 (0x25a2c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=694b3d580e07f84edc87befe8b29d4e23ac87258
Validity
Not Before: Feb 17 01:05:36 2024 GMT
Not After : Feb 17 01:05:36 2026 GMT
Subject: CN=25f428279e166a613989c439a6cf7485e89617a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:25:ba:4e:80:64:1f:c5:ad:1b:ad:80:1f:f1:
ea:2c:b4:76:40:f9:53:70:24:a1:dc:a3:26:6e:ea:
fe:56:00:33:46:9c:b2:76:50:4e:39:9f:fd:71:f9:
ea:0a:5e:88:b0:12:21:7a:d6:f5:cc:ea:a0:03:66:
82:aa:3e:e2:a6:46:af:ed:7d:9e:8a:48:06:db:7d:
36:92:c9:f8:bb:66:f9:c7:7e:d8:62:cc:27:62:4f:
77:d5:bd:3d:3e:4f:03:53:a2:7d:b3:a3:a9:c3:f5:
d7:15:a8:0d:86:b4:79:84:44:4d:fb:a6:16:ab:9c:
a8:dd:23:53:ba:98:1f:ea:f1:e4:af:18:cb:1c:6c:
b5:ff:41:e2:9e:8c:c6:e5:18:99:cc:df:e2:7d:cf:
4e:0f:f1:18:e5:96:9b:a8:8e:50:76:93:4e:38:22:
be:4f:db:8c:31:17:23:42:a5:04:46:0b:9f:e5:87:
5a:ed:f5:2f:7d:57:c1:4f:4e:49:10:87:3f:fe:9e:
7c:d7:c4:69:8b:cd:c0:f5:74:6f:8e:40:6c:ae:64:
6b:ca:ac:de:9b:47:f1:3d:eb:7e:b8:28:70:a3:ae:
8c:26:3c:d6:90:9d:69:87:2b:3e:d2:32:fb:ca:a5:
b8:52:2a:59:03:17:10:5f:bf:44:62:ac:b4:0d:fc:
26:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:44:23:09:DA:B9:AC:32:84:92:47:2D:A1:D7:D1:93:ED:D7:FB:FE
X509v3 Authority Key Identifier:
keyid:18:B1:57:82:A8:45:F8:32:C1:B4:30:C0:84:DC:A4:AF:2C:6C:E0:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/694b3d580e07f84edc87befe8b29d4e23ac87258.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a81b5dee-5dfe-43ea-80bf-5c3ff1ae3c55/25f428279e166a613989c439a6cf7485e89617a9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/a81b5dee-5dfe-43ea-80bf-5c3ff1ae3c55/694b3d580e07f84edc87befe8b29d4e23ac87258.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.170.245.0/24
Signature Algorithm: sha256WithRSAEncryption
93:91:af:56:8c:d8:4a:65:19:1c:44:f0:66:0d:de:e2:3d:ab:
51:1f:7c:a5:2b:c7:85:97:94:d4:ef:73:a3:e4:a0:55:fb:9d:
23:28:14:67:0c:63:ec:8d:81:60:ad:ba:14:6d:cf:78:9b:13:
9e:89:36:f4:f5:c6:67:fd:0c:52:01:1a:0f:55:86:a1:68:ff:
ab:da:b4:34:0a:e3:9e:83:c1:29:33:66:f4:a1:df:91:77:b4:
8f:59:76:e9:af:81:85:21:70:ea:1d:d4:dc:93:eb:fd:59:fe:
b3:30:5b:8d:86:84:30:47:41:54:8d:ac:c3:7a:bb:79:88:e9:
88:99:04:fb:04:68:a4:93:7d:7c:e5:fb:cf:16:1a:39:84:51:
40:71:fa:ac:6f:cd:ef:ea:14:d9:52:60:a4:2f:95:ec:35:86:
18:53:d3:7b:d2:40:25:4d:5b:80:2b:d3:ad:18:a1:97:a2:29:
15:9e:23:f1:ab:d1:49:54:51:c4:73:61:7e:2f:bd:c4:0f:a9:
aa:53:75:6e:46:11:d6:06:06:be:51:ca:12:4b:c1:fd:43:e8:
29:c1:5d:a6:59:0d:81:08:59:98:0e:a6:0e:25:c9:79:96:40:
ca:6b:d0:e7:a3:2f:d7:bf:c7:97:7c:72:e6:39:54:69:84:15:
87:77:84:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:28 2024 by rpki-client on console-fra.rpki-client.org