Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a9b04952-770d-48fa-8aab-aad1e6cb3d82/69bf0b48accb81168a228120468e9f0804501d16.roa
File: 69bf0b48accb81168a228120468e9f0804501d16.roa (raw, json)
Hash identifier: OER2oLOMSmh2TJbJ/1MJHB68c4GRJapngoIlsbQLOyU=
Subject key identifier: E1:82:19:34:44:AE:7D:E4:64:F3:2C:87:F9:E1:38:A9:EF:3F:66:A3
Certificate issuer: /CN=9cd1fa487cf3249dd054f9956489b848d101a711
Certificate serial: 1BD056
Authority key identifier: AA:D9:84:A4:8B:BE:15:EA:B4:98:36:44:AE:C8:0E:47:60:77:07:A6
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9cd1fa487cf3249dd054f9956489b848d101a711.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/a9b04952-770d-48fa-8aab-aad1e6cb3d82/69bf0b48accb81168a228120468e9f0804501d16.roa
Signing time: Fri 23 Jun 2023 16:15:06 +0000
ROA not before: Thu 22 Jun 2023 16:15:06 +0000
ROA not after: Mon 23 Jun 2025 16:15:06 +0000
asID: 272995
IP address blocks: 45.173.9.0/24 maxlen: 24
45.173.10.0/23 maxlen: 24
2803:f860::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1822806 (0x1bd056)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cd1fa487cf3249dd054f9956489b848d101a711
Validity
Not Before: Jun 22 16:15:06 2023 GMT
Not After : Jun 23 16:15:06 2025 GMT
Subject: CN=69bf0b48accb81168a228120468e9f0804501d16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:3f:99:02:7b:95:3c:de:5a:7e:d5:e8:44:84:
00:cb:d6:4d:7a:d7:c0:b5:39:5e:a7:2e:01:23:30:
27:c7:1e:e4:64:14:d2:2d:af:03:0c:6c:95:4c:67:
49:57:26:a0:b0:92:d1:0b:e9:9f:b9:3f:b8:b7:a4:
99:0e:91:27:5b:68:7c:15:ac:77:e5:6e:40:56:d9:
26:22:df:af:78:12:92:c0:a0:91:67:a0:b4:26:2d:
38:51:87:48:91:4f:8c:37:e7:8b:15:05:aa:f7:1c:
b0:e0:42:0f:2c:6d:b5:45:46:33:2f:40:66:06:58:
35:1f:62:76:25:ed:c2:11:07:31:23:2c:df:f2:68:
a8:07:1d:c0:6f:f2:4b:9a:db:0b:82:ae:c9:5a:bf:
60:de:e2:dd:d5:42:de:16:c0:8c:9d:5a:fe:3c:fa:
2a:a2:5c:fb:11:f9:6d:cf:cb:b5:c8:b3:04:c9:1e:
25:77:f9:99:2e:31:2e:91:ec:b5:e7:6d:f9:fb:05:
cd:45:0a:b7:3b:41:81:2a:22:2f:b4:57:ff:98:87:
46:94:e7:9f:4d:92:47:f1:dc:c7:02:02:8d:04:cf:
a7:80:27:3b:16:d4:14:1f:9e:31:98:05:8a:3b:4f:
e8:fc:cd:2f:12:09:5c:b1:92:d3:60:54:84:72:3d:
0c:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:82:19:34:44:AE:7D:E4:64:F3:2C:87:F9:E1:38:A9:EF:3F:66:A3
X509v3 Authority Key Identifier:
keyid:AA:D9:84:A4:8B:BE:15:EA:B4:98:36:44:AE:C8:0E:47:60:77:07:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9cd1fa487cf3249dd054f9956489b848d101a711.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a9b04952-770d-48fa-8aab-aad1e6cb3d82/69bf0b48accb81168a228120468e9f0804501d16.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/a9b04952-770d-48fa-8aab-aad1e6cb3d82/9cd1fa487cf3249dd054f9956489b848d101a711.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.173.9.0-45.173.11.255
IPv6:
2803:f860::/32
Signature Algorithm: sha256WithRSAEncryption
14:e3:cd:95:b6:d5:51:43:82:45:07:e1:06:a4:5b:5b:65:c2:
43:d7:95:fc:7a:16:c0:d7:c5:66:25:f5:ad:5d:98:01:45:f8:
ea:ca:43:8a:1c:1f:e9:a6:81:12:b4:e1:c9:cc:ef:ff:13:4f:
17:fe:f9:63:b2:3b:03:a8:2c:84:59:68:76:c3:a2:22:4a:a8:
03:aa:bb:66:3d:b1:e4:3d:06:24:d0:fd:ed:4f:8f:3a:b2:40:
1e:51:b6:2b:77:50:5f:d3:97:8c:55:b0:f0:be:f8:f5:b0:95:
f1:94:a7:1d:f3:71:16:fc:d4:72:c2:20:ed:1f:4a:61:40:de:
35:e7:ba:bf:51:58:9e:fa:9a:d1:5c:43:7a:f8:28:b5:ae:d0:
1d:a6:fa:26:9e:33:55:77:15:c4:26:4f:8c:da:62:4f:c4:9c:
a8:9f:4b:30:46:c3:4c:53:60:93:e3:d2:b1:71:96:5d:07:97:
83:c2:05:cb:fb:78:61:28:17:2c:18:86:5a:30:4e:96:2b:87:
7e:0a:a3:6f:eb:9d:4f:75:81:53:67:b4:a4:20:77:46:d3:99:
b8:3a:a0:d5:cf:65:b5:3b:35:76:cf:e3:81:a9:42:83:30:70:
37:38:9d:54:13:08:03:d9:3a:21:96:f7:23:bc:26:22:9f:2a:
b2:2b:5d:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:00 2024 by rpki-client on console-fra.rpki-client.org