Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a92b3012-ad59-4aae-8777-4e6aff1a2166/d4a9800565011ce90980baad0f148dfed2d3e80a.roa
File: d4a9800565011ce90980baad0f148dfed2d3e80a.roa (raw, json)
Hash identifier: vKFONZWJdlQhsVNkFdL1WI4m6kCHOSFpbUNqmZNgIN8=
Subject key identifier: 1C:31:A1:D2:76:DD:27:8B:6B:75:1A:A2:4D:BA:FF:63:6A:C6:66:B5
Certificate issuer: /CN=4703d633e7a2b67d615adbb1d951e9d1eaa29daa
Certificate serial: 21E3F1
Authority key identifier: 04:41:4F:86:F1:25:24:A2:1F:C1:D2:05:B7:A7:F8:E4:50:EB:90:DC
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4703d633e7a2b67d615adbb1d951e9d1eaa29daa.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/a92b3012-ad59-4aae-8777-4e6aff1a2166/d4a9800565011ce90980baad0f148dfed2d3e80a.roa
Signing time: Wed 05 Jul 2023 13:48:20 +0000
ROA not before: Tue 04 Jul 2023 13:48:20 +0000
ROA not after: Sat 05 Jul 2025 13:48:20 +0000
asID: 52468
IP address blocks: 45.224.96.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2221041 (0x21e3f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4703d633e7a2b67d615adbb1d951e9d1eaa29daa
Validity
Not Before: Jul 4 13:48:20 2023 GMT
Not After : Jul 5 13:48:20 2025 GMT
Subject: CN=d4a9800565011ce90980baad0f148dfed2d3e80a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:81:e5:46:cf:54:2c:a4:15:ec:e9:b2:aa:e0:
6b:4f:88:6e:cb:d8:00:0f:38:ea:e9:a7:b1:d0:88:
1a:89:32:59:59:22:0e:9d:90:98:b7:65:98:68:cf:
1c:fa:76:a5:b2:06:73:de:d4:53:cc:a6:5a:dc:39:
50:ae:53:c9:13:a7:a4:84:4e:94:b1:21:b2:72:f6:
3f:59:86:9b:e5:db:f5:5a:3c:6a:8b:58:52:05:b1:
8e:76:c0:4a:6b:1d:ca:d1:ac:5f:d5:83:c9:66:25:
f8:d7:bc:04:5c:9e:e2:02:da:40:07:76:23:15:7e:
78:6d:29:b6:14:0e:c0:9b:58:9f:3f:92:ad:2e:56:
5c:25:c4:81:79:6b:b3:2f:75:11:4b:f8:19:83:10:
25:5e:0a:2d:ad:c0:69:f4:a3:52:f9:2f:8c:44:ab:
de:f9:bf:cb:79:9e:94:9f:12:12:c0:ec:44:d4:a6:
1c:36:bb:df:85:35:98:24:e2:01:d3:dd:08:83:c5:
59:47:a9:4a:97:0d:9a:2f:56:82:8e:7a:26:53:6f:
8a:ae:75:06:80:dc:cc:02:9f:56:ac:79:c8:82:5e:
a7:93:b5:40:0f:69:5d:8b:b9:24:a7:67:34:3e:e0:
74:34:29:65:ab:44:a5:c3:14:64:49:d3:4e:17:0c:
9c:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:31:A1:D2:76:DD:27:8B:6B:75:1A:A2:4D:BA:FF:63:6A:C6:66:B5
X509v3 Authority Key Identifier:
keyid:04:41:4F:86:F1:25:24:A2:1F:C1:D2:05:B7:A7:F8:E4:50:EB:90:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4703d633e7a2b67d615adbb1d951e9d1eaa29daa.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a92b3012-ad59-4aae-8777-4e6aff1a2166/d4a9800565011ce90980baad0f148dfed2d3e80a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/a92b3012-ad59-4aae-8777-4e6aff1a2166/4703d633e7a2b67d615adbb1d951e9d1eaa29daa.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.224.96.0/22
Signature Algorithm: sha256WithRSAEncryption
14:f4:91:9a:7f:46:0d:e1:bb:93:48:2b:ad:88:b9:0e:c4:c9:
6e:d1:b0:bd:97:d1:62:84:4d:79:89:02:4c:d4:52:71:fc:18:
8b:b1:65:09:78:4c:cf:a1:e6:a3:3e:32:ee:16:ed:7d:8a:c9:
8c:e5:40:ad:ec:4c:18:59:24:e0:af:91:75:52:11:5f:dd:de:
a1:39:f5:fc:fa:8d:51:05:80:93:c9:8a:4d:02:2b:fd:bf:7f:
1e:84:23:46:e5:49:33:d9:3f:1f:54:7d:20:b9:4e:e9:f6:4b:
b5:30:64:73:b0:e6:7d:42:1e:4d:45:48:a0:e3:97:95:4d:ee:
d1:4c:f9:db:77:cb:0c:9c:32:73:c0:a3:bd:e3:17:0f:05:0f:
19:88:1a:92:e6:a2:a1:bf:5c:64:6a:a8:4b:53:1a:be:18:a6:
9f:47:5e:7b:e4:ba:cd:9c:cf:b0:42:b2:92:81:c4:87:7a:60:
f5:20:51:d0:8e:11:93:72:53:b0:95:db:14:16:8e:5d:61:b9:
5a:93:c6:fb:1b:44:e2:e0:f8:08:37:d2:a7:ee:d5:e5:cc:c5:
23:9f:a2:46:f9:50:af:f7:0b:52:ca:2d:f8:32:41:2f:9f:51:
78:cf:c5:e3:a4:bc:a8:9d:0b:df:82:94:67:b4:8f:bc:da:76:
81:37:3e:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:21 2024 by rpki-client on console-ams.rpki-client.org