Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ae7164a8-f366-4d63-9629-f5b8596a55aa/59fec6a6c7b24af97b924589dd691c6f48786ec0.roa
File: 59fec6a6c7b24af97b924589dd691c6f48786ec0.roa (raw, json)
Hash identifier: YJcV5W2BU51qO7v4P0kyrnWsZYgxMKiCK9kpNbZ66WU=
Subject key identifier: 60:1B:BC:59:B5:63:A4:25:0C:AF:D1:02:E9:6A:0D:76:BE:47:91:D0
Certificate issuer: /CN=14dd9710595884a6cdc2418a4de21b5c2b40042b
Certificate serial: 25C404
Authority key identifier: 82:98:69:10:AA:69:1C:81:21:C9:B9:7D:04:26:26:63:24:2D:09:A9
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/14dd9710595884a6cdc2418a4de21b5c2b40042b.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/ae7164a8-f366-4d63-9629-f5b8596a55aa/59fec6a6c7b24af97b924589dd691c6f48786ec0.roa
Signing time: Sat 17 Feb 2024 01:13:12 +0000
ROA not before: Sat 17 Feb 2024 01:13:12 +0000
ROA not after: Tue 17 Feb 2026 01:13:12 +0000
asID: 23470
IP address blocks: 45.170.249.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2475012 (0x25c404)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14dd9710595884a6cdc2418a4de21b5c2b40042b
Validity
Not Before: Feb 17 01:13:12 2024 GMT
Not After : Feb 17 01:13:12 2026 GMT
Subject: CN=59fec6a6c7b24af97b924589dd691c6f48786ec0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:da:de:44:89:a4:06:ca:cf:51:6a:89:47:c3:
58:d9:1a:9e:c1:48:f4:7c:f8:70:03:22:40:7c:66:
05:46:ba:49:a8:b6:fd:31:b7:30:c6:41:8d:84:54:
d1:4c:50:de:fc:ec:4e:5b:76:7f:57:73:c6:14:fe:
96:1a:ac:f9:fd:47:aa:ec:d6:b5:68:a5:df:06:85:
f5:ea:8b:98:21:e0:4c:19:bf:df:2a:24:7b:65:5e:
f1:b2:70:f3:f4:29:b4:b5:6e:e9:6b:16:2e:e3:43:
d9:c7:56:a9:67:e4:c2:c3:1f:c0:0b:6f:c9:c8:ed:
7e:3e:7b:a9:14:25:2f:52:85:75:23:ca:a7:ac:b5:
bb:75:65:87:8e:40:0e:a7:42:68:15:a0:7d:2a:21:
cd:5b:0e:5d:47:fa:65:cd:54:ba:16:bb:62:e8:e0:
9b:83:b5:e9:9c:db:5f:18:8b:98:c8:83:a3:43:4f:
71:20:bb:51:d9:0c:e2:af:03:da:93:b5:f0:25:e2:
ba:a1:4f:38:08:ea:fb:82:0b:22:ae:a3:b7:e3:aa:
82:21:03:fc:90:ee:11:0d:f6:35:3e:30:fd:1a:d2:
76:c0:9e:03:92:09:a2:c7:95:01:03:12:db:27:4a:
ed:d3:77:e4:b0:22:dd:e5:9d:bb:0a:80:1f:48:d2:
ca:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:1B:BC:59:B5:63:A4:25:0C:AF:D1:02:E9:6A:0D:76:BE:47:91:D0
X509v3 Authority Key Identifier:
keyid:82:98:69:10:AA:69:1C:81:21:C9:B9:7D:04:26:26:63:24:2D:09:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/14dd9710595884a6cdc2418a4de21b5c2b40042b.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ae7164a8-f366-4d63-9629-f5b8596a55aa/59fec6a6c7b24af97b924589dd691c6f48786ec0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/ae7164a8-f366-4d63-9629-f5b8596a55aa/14dd9710595884a6cdc2418a4de21b5c2b40042b.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.170.249.0/24
Signature Algorithm: sha256WithRSAEncryption
80:e3:cc:6b:d5:56:93:d9:23:0f:b9:f6:04:ce:e7:92:b9:a0:
c3:76:1f:f3:e4:f7:e9:00:20:02:09:3f:26:40:79:ac:6d:09:
96:6d:c6:ca:e1:eb:a9:c8:68:58:f1:e4:2d:1a:3e:47:2b:f9:
04:73:6d:29:b6:67:8d:b0:61:e2:4a:f0:80:7a:5e:93:01:cf:
6f:75:e1:9c:be:52:7c:8a:ed:5e:8d:d1:fd:32:03:3c:b3:3b:
e4:e9:92:03:cf:5c:5e:d5:54:c2:64:73:74:19:f8:55:8b:32:
b0:08:6b:0c:f9:2f:27:82:42:67:2c:30:b3:c6:7f:79:da:62:
da:ba:cd:09:fb:38:ae:50:f2:0a:79:fa:5a:aa:53:9a:a0:f1:
cf:b1:7e:75:b2:f2:8f:59:68:39:da:1d:d3:b8:99:76:01:80:
46:d2:1b:d8:37:c1:7c:53:29:01:43:c2:84:06:4f:91:64:90:
25:0a:d8:20:7b:0e:16:c5:60:b9:72:41:7c:37:7e:b7:08:43:
a0:5a:35:b7:fd:70:f3:47:43:25:ea:96:cc:da:3a:21:81:64:
a6:fa:38:d0:8d:24:0c:5f:b0:da:9c:0d:1b:95:da:a0:cf:9c:
3e:3b:e1:63:5b:26:69:87:bc:6d:2b:52:4b:94:09:e7:6e:8b:
9a:8f:05:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:45 2024 by rpki-client on console-ams.rpki-client.org