Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/acd94e59-d252-4fd6-81ab-d2db3213888a/9b5dc737a1ea583c2c6feadcb70e9fb78800835c.roa
File: 9b5dc737a1ea583c2c6feadcb70e9fb78800835c.roa (raw, json)
Hash identifier: HJSiRRD0EKqBFp9O34h7svN2HRMrbY4Hqy1NbyKuLio=
Subject key identifier: A2:CB:FF:0A:33:8D:DE:1C:BC:79:70:AF:E3:CD:D8:FE:88:23:64:3F
Certificate issuer: /CN=f74a648ac87e2ce7fafa327bd89fc95e35a06596
Certificate serial: 0CF5
Authority key identifier: B5:89:EC:A7:82:B8:5D:44:9A:D2:3B:22:DE:74:D7:EA:76:33:23:74
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f74a648ac87e2ce7fafa327bd89fc95e35a06596.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/acd94e59-d252-4fd6-81ab-d2db3213888a/9b5dc737a1ea583c2c6feadcb70e9fb78800835c.roa
Signing time: Wed 31 Jan 2024 14:23:01 +0000
ROA not before: Wed 31 Jan 2024 14:23:01 +0000
ROA not after: Sat 31 Jan 2026 14:23:01 +0000
asID: 265551
IP address blocks: 45.238.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3317 (0xcf5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f74a648ac87e2ce7fafa327bd89fc95e35a06596
Validity
Not Before: Jan 31 14:23:01 2024 GMT
Not After : Jan 31 14:23:01 2026 GMT
Subject: CN=9b5dc737a1ea583c2c6feadcb70e9fb78800835c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:3f:51:34:7d:53:05:c3:e5:c6:54:82:61:c0:
be:8b:b3:91:0c:a6:db:1f:dc:36:2d:86:3f:ef:df:
e7:63:64:d6:e8:2a:e2:c5:8a:34:64:5f:b2:2f:20:
19:8c:11:00:17:c1:42:ce:a9:32:bf:12:6e:de:f3:
9c:37:9d:b8:37:08:ed:57:12:cb:7c:18:c7:a5:31:
26:c5:25:9f:1f:56:24:ae:a0:42:40:f7:68:fa:89:
b3:48:52:a5:f2:bc:4a:77:1c:5b:45:4b:60:d9:1e:
64:f6:8c:26:32:0d:1b:bc:fe:8c:97:ba:28:12:3a:
a4:3b:3d:f1:f8:07:4b:fa:32:1c:c4:16:ad:be:9e:
94:ff:44:16:cd:7d:86:a3:c4:27:3d:78:ab:fb:bc:
2e:28:1f:90:21:59:38:1d:4b:fb:7f:2a:32:6f:f8:
24:de:d6:18:8b:02:32:c6:90:96:f6:2d:c2:ff:c9:
05:7c:55:b0:c1:99:d5:c0:94:8c:be:2f:73:da:fd:
a8:be:3f:fb:9e:7f:fe:b4:7e:36:f2:e9:22:f2:60:
df:1e:35:5d:ae:84:7f:29:f1:0d:57:19:6c:cb:8d:
12:d3:41:cc:2f:7b:c2:c5:40:ab:b7:aa:b6:7b:39:
6d:09:a6:98:40:58:c2:9c:82:71:52:75:10:44:a2:
c7:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:CB:FF:0A:33:8D:DE:1C:BC:79:70:AF:E3:CD:D8:FE:88:23:64:3F
X509v3 Authority Key Identifier:
keyid:B5:89:EC:A7:82:B8:5D:44:9A:D2:3B:22:DE:74:D7:EA:76:33:23:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f74a648ac87e2ce7fafa327bd89fc95e35a06596.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/acd94e59-d252-4fd6-81ab-d2db3213888a/9b5dc737a1ea583c2c6feadcb70e9fb78800835c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/acd94e59-d252-4fd6-81ab-d2db3213888a/f74a648ac87e2ce7fafa327bd89fc95e35a06596.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.238.189.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:b5:7f:f6:3d:11:04:cb:6a:e0:74:13:d4:d6:84:af:35:39:
fb:30:5a:58:6c:d6:6a:0f:cb:57:98:87:bf:06:ed:18:c1:08:
2c:18:8f:ef:88:a7:c9:5a:a4:e2:b2:f3:b8:2a:6e:d9:b9:89:
03:96:af:fb:55:f7:7e:65:bc:8e:40:67:52:18:e9:1a:1b:b9:
be:76:92:d5:a7:0a:6b:45:ef:82:55:f4:77:d8:6f:ed:51:cb:
94:4c:13:d9:3c:56:b2:12:19:88:89:e8:e9:0c:fc:d4:e1:09:
6c:e6:44:1b:c8:ca:d5:76:5a:9d:61:b3:bc:c4:1f:ae:e9:07:
1e:fe:bb:2d:a8:3a:58:98:a0:54:0e:c7:f8:60:71:82:e6:8a:
56:49:be:4c:b7:a4:27:68:c1:6f:89:90:53:e9:6e:32:75:1e:
07:9e:14:36:51:b9:c5:6b:22:54:e8:fa:c0:07:8e:c7:19:f7:
61:50:b6:86:7a:62:cb:84:3a:0e:91:25:81:d7:e6:3b:12:c2:
fb:8c:b8:0c:1c:c8:b3:18:21:53:81:ea:a5:0d:68:dd:c8:49:
42:39:74:3e:2f:9e:3b:17:01:e1:1b:3a:3e:67:f5:c5:f0:0b:
0c:30:d8:5d:a4:e2:88:64:15:59:90:b4:c4:01:44:6c:8d:1b:
2f:89:8e:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:22 2024 by rpki-client on console-ams.rpki-client.org