Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b4810948-d2be-4ff7-a49d-9518f1732a5a/ca7d706aaf9fb59d4beb4bcb85e992650118725b.roa
File: ca7d706aaf9fb59d4beb4bcb85e992650118725b.roa (raw, json)
Hash identifier: jRRc2cDbVVbD8p5fRSnpsT7/MHX3/sBHE6YEhPrRRo8=
Subject key identifier: 65:54:C0:44:57:CE:46:89:F1:FE:EB:79:D1:53:E2:25:22:50:AF:CB
Certificate issuer: /CN=74ceb21261d995f6744c5614710320d1ad4b79f6
Certificate serial: 26F09E
Authority key identifier: FA:E5:7E:91:CE:52:47:08:AB:10:B2:16:82:17:A8:91:B8:38:C0:C5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/74ceb21261d995f6744c5614710320d1ad4b79f6.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/b4810948-d2be-4ff7-a49d-9518f1732a5a/ca7d706aaf9fb59d4beb4bcb85e992650118725b.roa
Signing time: Thu 08 Feb 2024 15:08:36 +0000
ROA not before: Thu 08 Feb 2024 15:08:36 +0000
ROA not after: Sun 08 Feb 2026 15:08:36 +0000
asID: 266706
IP address blocks: 45.229.188.0/22 maxlen: 22
45.229.188.0/24 maxlen: 24
45.229.189.0/24 maxlen: 24
45.229.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2551966 (0x26f09e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74ceb21261d995f6744c5614710320d1ad4b79f6
Validity
Not Before: Feb 8 15:08:36 2024 GMT
Not After : Feb 8 15:08:36 2026 GMT
Subject: CN=ca7d706aaf9fb59d4beb4bcb85e992650118725b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:ec:a8:e8:a9:77:b1:cd:bf:9a:a6:63:c3:6b:
22:fb:19:df:ce:61:bd:60:7d:74:37:55:d8:8f:36:
71:4b:6a:56:ca:b4:be:18:e3:29:56:e3:f9:33:01:
9a:37:4b:39:e8:6e:90:ff:80:87:6f:5a:b7:53:35:
bf:8e:a0:ef:ee:33:e2:73:85:e1:ff:18:39:7f:e5:
32:b8:90:35:54:ee:06:d4:ce:f5:75:3a:62:51:f1:
22:0a:7b:7a:30:58:a0:40:92:05:b3:bb:7d:19:cd:
1e:e4:4b:a5:f0:72:a7:df:1b:f3:93:eb:1f:e9:7a:
d6:0e:84:3f:57:b5:73:e6:6e:9e:94:c0:45:ab:5c:
84:21:76:45:ca:01:e1:42:87:4f:e5:2a:3a:91:19:
b9:8d:07:7e:c1:61:dc:c8:21:15:e5:5f:85:a8:f2:
12:41:03:18:6d:35:36:22:fb:82:f5:28:55:00:72:
4a:d0:94:98:d0:dd:4b:2a:51:73:77:a6:b7:0d:ba:
ad:26:f7:b2:ae:d5:d5:23:02:64:75:02:4a:04:8a:
31:d3:81:09:4e:8e:24:d5:cb:14:5b:57:aa:48:13:
64:35:1e:44:a7:34:22:63:6f:ca:8f:f5:2d:c2:50:
a4:b9:bf:59:89:75:7a:99:0a:b0:ab:76:fd:e9:25:
7a:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:54:C0:44:57:CE:46:89:F1:FE:EB:79:D1:53:E2:25:22:50:AF:CB
X509v3 Authority Key Identifier:
keyid:FA:E5:7E:91:CE:52:47:08:AB:10:B2:16:82:17:A8:91:B8:38:C0:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/74ceb21261d995f6744c5614710320d1ad4b79f6.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b4810948-d2be-4ff7-a49d-9518f1732a5a/ca7d706aaf9fb59d4beb4bcb85e992650118725b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/b4810948-d2be-4ff7-a49d-9518f1732a5a/74ceb21261d995f6744c5614710320d1ad4b79f6.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.229.188.0/22
Signature Algorithm: sha256WithRSAEncryption
40:24:c7:64:c1:d9:ba:ee:40:04:7c:e1:84:02:46:04:2e:aa:
cf:a1:74:bd:7e:bb:10:29:3a:08:28:5f:29:03:d1:18:3c:72:
a7:8f:d5:fa:ce:d4:df:15:b1:f4:6d:c0:db:97:05:95:5d:14:
9c:c4:d1:fe:ce:88:ae:fa:13:7d:fd:6f:43:fc:1b:ab:79:d0:
0b:11:77:4c:5b:b5:ff:1d:ca:35:d8:bd:03:e6:fb:32:b9:8b:
6a:ee:49:f0:fa:78:0b:e7:1f:39:90:39:d9:6d:e5:06:ba:63:
28:41:f7:ec:e4:00:fe:41:84:8a:7c:73:25:c3:d2:0d:c1:d7:
4f:c0:30:d6:b9:b4:f6:86:fe:83:8a:39:74:30:bc:19:a2:5d:
66:00:f7:75:cc:be:99:22:61:f6:f2:be:4a:b9:cd:f6:b1:48:
70:97:0f:8a:fe:0a:84:6a:1d:03:04:d8:92:b4:ba:1d:17:42:
a1:3d:00:75:b5:67:8f:75:cc:6d:66:db:01:94:42:51:32:4c:
25:50:bf:48:94:c6:32:aa:e6:43:b3:8e:5b:49:3b:24:7b:05:
8e:31:3b:26:ea:6e:58:00:10:0c:b5:65:ed:57:fd:e5:96:41:
ea:81:f8:53:4f:05:99:91:44:53:a0:ae:81:41:ff:e8:5e:0c:
09:ae:bc:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:29 2024 by rpki-client on console-fra.rpki-client.org