Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/acd94e59-d252-4fd6-81ab-d2db3213888a/77f2a638b54e68c8544712cd5d1902173cfdc933.roa
File: 77f2a638b54e68c8544712cd5d1902173cfdc933.roa (raw, json)
Hash identifier: 4tqoFKwE2tU5m2IyvO/vs2sWi4aDolxC1Ad+TJumXaU=
Subject key identifier: CD:88:0C:ED:33:2A:09:AD:C6:CC:A6:72:CA:3B:D5:A8:B3:84:74:E8
Certificate issuer: /CN=f74a648ac87e2ce7fafa327bd89fc95e35a06596
Certificate serial: 1036
Authority key identifier: B5:89:EC:A7:82:B8:5D:44:9A:D2:3B:22:DE:74:D7:EA:76:33:23:74
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f74a648ac87e2ce7fafa327bd89fc95e35a06596.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/acd94e59-d252-4fd6-81ab-d2db3213888a/77f2a638b54e68c8544712cd5d1902173cfdc933.roa
Signing time: Wed 31 Jan 2024 14:34:47 +0000
ROA not before: Wed 31 Jan 2024 14:34:47 +0000
ROA not after: Sat 31 Jan 2026 14:34:47 +0000
asID: 265551
IP address blocks: 45.238.188.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4150 (0x1036)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f74a648ac87e2ce7fafa327bd89fc95e35a06596
Validity
Not Before: Jan 31 14:34:47 2024 GMT
Not After : Jan 31 14:34:47 2026 GMT
Subject: CN=77f2a638b54e68c8544712cd5d1902173cfdc933
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:6e:19:61:fd:88:53:12:de:fa:95:51:14:9b:
82:5c:b5:f4:9b:22:1c:e9:e5:66:14:05:9b:32:d7:
ab:f2:37:e7:2d:69:7a:6d:8e:a5:a8:2e:9b:9d:a1:
fd:1b:3b:d1:75:a4:fe:c0:2c:e9:86:c0:9b:b7:97:
65:c6:51:e0:1d:6d:68:c2:07:c9:f3:32:c4:56:e3:
bd:ff:12:a6:c4:f0:65:74:cf:96:40:53:2c:0a:57:
ea:03:9b:f5:6d:9f:59:b8:98:cf:f8:ad:3f:69:5e:
0f:4d:bd:d1:7d:98:78:fe:74:fc:df:5a:4c:a1:8d:
23:22:79:20:a0:f1:cd:24:ed:96:a5:ca:84:32:ae:
7b:9c:f1:45:73:cb:16:fc:db:30:1a:44:18:b4:87:
67:c5:03:6a:aa:12:74:3f:6b:85:6b:26:33:b2:d7:
c9:24:1b:ab:e1:88:a4:5a:b8:2c:c3:c9:c7:cd:ec:
61:88:fa:71:ca:88:09:9c:3b:4c:1a:3b:63:0c:09:
7c:f9:e8:d8:d6:b1:fd:6b:f7:cc:4a:9f:19:95:07:
8c:e5:34:00:b3:27:3b:85:dd:37:8b:62:fc:0a:a2:
af:09:28:b6:87:79:9c:c7:59:89:3c:c8:8a:29:37:
67:e2:8b:76:e6:a1:53:5c:05:77:fd:7b:b8:aa:36:
bd:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:88:0C:ED:33:2A:09:AD:C6:CC:A6:72:CA:3B:D5:A8:B3:84:74:E8
X509v3 Authority Key Identifier:
keyid:B5:89:EC:A7:82:B8:5D:44:9A:D2:3B:22:DE:74:D7:EA:76:33:23:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f74a648ac87e2ce7fafa327bd89fc95e35a06596.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/acd94e59-d252-4fd6-81ab-d2db3213888a/77f2a638b54e68c8544712cd5d1902173cfdc933.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/acd94e59-d252-4fd6-81ab-d2db3213888a/f74a648ac87e2ce7fafa327bd89fc95e35a06596.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.238.188.0/24
Signature Algorithm: sha256WithRSAEncryption
11:11:6a:fd:cf:92:1b:e4:69:da:be:09:ba:b5:be:83:ff:99:
d2:05:7a:6b:24:a6:04:0c:25:23:58:5b:07:e6:47:73:11:6c:
fc:80:81:8d:63:5e:2f:31:18:52:dd:0b:78:29:47:4e:89:47:
bb:37:5f:95:9b:11:9d:39:3e:dd:95:e5:a5:50:e7:a7:48:0b:
8d:9d:14:b5:66:a8:db:af:30:b1:8f:59:49:f3:6d:61:ab:b7:
12:ad:e1:30:8d:21:1d:09:31:25:db:55:22:fd:5f:57:c8:87:
77:03:20:c0:03:26:cd:39:7c:59:ab:5e:25:f9:5f:8c:50:29:
56:09:8f:38:a6:1b:55:17:41:b4:c0:d9:98:50:3d:64:40:3a:
21:15:84:7f:b7:98:3f:d8:94:7d:1e:06:e4:48:4a:ac:8e:e9:
98:97:cd:18:99:63:fd:34:8d:be:a3:39:7d:98:b4:a2:b7:58:
db:7a:ec:d2:72:1a:90:bd:0e:57:b0:4c:b1:25:b2:3b:76:43:
0a:7a:b9:52:91:ca:10:8d:e7:b0:50:da:a6:79:67:3f:cc:63:
d4:f5:c8:18:48:e6:58:a6:b4:88:10:45:61:9a:81:84:67:61:
3e:cd:55:0b:16:cd:4d:b0:c8:fd:75:ea:20:7c:a3:bf:c5:05:
49:b9:90:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:01 2024 by rpki-client on console-fra.rpki-client.org