Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b966cb2d-708c-409e-bb8e-813e9725edc3/028d04714c8bc24116f821b2367f3067a9ca9248.roa
File: 028d04714c8bc24116f821b2367f3067a9ca9248.roa (raw, json)
Hash identifier: kpXF+/sBQzO5pLULqAcdmHPxBbGh5EZbUOe+idUQDvs=
Subject key identifier: F6:80:AB:4B:9A:4E:24:A0:F9:6B:10:75:03:57:8F:CE:7F:BC:BD:79
Certificate issuer: /CN=3098f1be5c71093ee297851f7b711b67ca6390cc
Certificate serial: 042C
Authority key identifier: 80:0E:E1:D6:B4:1F:28:41:0A:23:C8:72:9B:28:3D:65:2D:EC:72:6A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3098f1be5c71093ee297851f7b711b67ca6390cc.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/b966cb2d-708c-409e-bb8e-813e9725edc3/028d04714c8bc24116f821b2367f3067a9ca9248.roa
Signing time: Thu 01 Feb 2024 04:34:41 +0000
ROA not before: Thu 01 Feb 2024 04:34:41 +0000
ROA not after: Sun 01 Feb 2026 04:34:41 +0000
asID: 265582
IP address blocks: 45.174.250.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1068 (0x42c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3098f1be5c71093ee297851f7b711b67ca6390cc
Validity
Not Before: Feb 1 04:34:41 2024 GMT
Not After : Feb 1 04:34:41 2026 GMT
Subject: CN=028d04714c8bc24116f821b2367f3067a9ca9248
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:67:d1:50:5e:da:12:4e:ea:40:15:3c:63:06:
69:a2:a1:13:73:62:6a:55:fe:a2:a9:9e:ea:32:a4:
ad:08:88:20:d8:0f:b1:54:d8:49:42:47:a3:97:98:
6b:d0:01:72:80:51:3d:51:96:ba:fb:6b:80:79:02:
b5:a9:c3:47:a8:00:91:fd:93:51:73:58:a5:af:a2:
5f:44:a1:96:36:d5:fb:2b:ca:34:09:27:39:27:05:
47:2f:a0:20:16:76:30:c8:9c:33:db:91:69:81:7c:
f3:54:d9:1c:fc:18:bb:f3:3a:7a:57:bb:62:09:a4:
70:61:10:9b:8e:75:1b:57:6f:8d:8e:d5:cd:12:f1:
10:0b:df:49:23:27:69:bc:2c:f4:f0:0d:22:b2:76:
86:50:f0:87:a1:ac:8d:4d:9a:7f:34:26:d7:cc:a5:
82:7d:87:08:a8:85:d3:f6:01:d9:2e:f9:86:53:90:
8a:34:b2:98:2d:17:a5:aa:0a:ce:cf:25:97:a8:5a:
fa:02:2b:56:fc:92:71:91:9c:71:06:68:f0:c1:98:
a2:9c:92:21:ce:be:66:a8:86:bf:18:48:d8:bd:1a:
30:93:35:61:c2:dd:e5:5a:6f:48:3f:52:15:eb:e6:
8f:78:9f:03:ac:55:0d:38:6e:36:7c:1c:65:39:2a:
1a:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:80:AB:4B:9A:4E:24:A0:F9:6B:10:75:03:57:8F:CE:7F:BC:BD:79
X509v3 Authority Key Identifier:
keyid:80:0E:E1:D6:B4:1F:28:41:0A:23:C8:72:9B:28:3D:65:2D:EC:72:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3098f1be5c71093ee297851f7b711b67ca6390cc.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b966cb2d-708c-409e-bb8e-813e9725edc3/028d04714c8bc24116f821b2367f3067a9ca9248.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/b966cb2d-708c-409e-bb8e-813e9725edc3/3098f1be5c71093ee297851f7b711b67ca6390cc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.174.250.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:0c:96:06:fc:81:34:77:b7:49:17:83:ae:4d:21:e9:e2:7b:
91:32:e1:94:e8:cd:45:8b:09:c9:8c:a8:f7:33:3e:cf:de:d9:
60:d1:37:2c:8f:d2:b4:45:ea:30:9b:94:47:76:ff:7b:9c:08:
9b:d6:5a:c9:07:e7:e1:a0:58:59:59:1e:d8:6c:c3:3c:e2:f1:
6a:63:5e:02:72:c8:6c:74:d6:88:4d:83:f9:4f:7e:f3:5e:47:
1e:70:c3:c0:2e:22:57:6a:5a:38:10:a6:4e:3b:65:c4:3e:56:
23:57:99:88:47:d5:b1:6d:e0:22:62:fb:bf:91:e0:ff:e1:00:
a8:7c:5e:e8:43:53:50:92:b3:9f:84:19:6d:82:c5:e9:32:81:
07:c0:a0:d3:e1:e1:71:fa:48:4b:53:6b:4a:45:52:f3:a9:cd:
d6:c6:14:34:83:04:10:84:2e:8f:df:23:90:57:81:e0:7a:0d:
4b:2f:c2:44:92:a4:60:64:99:a7:54:f1:4a:a9:b9:e7:65:7c:
6d:89:37:04:57:f0:b4:b0:8f:c3:13:03:1d:1b:a2:43:a1:0b:
23:c2:98:51:26:16:bc:64:23:33:c2:f1:f0:c8:1a:e8:ed:b4:
cf:0f:82:8b:2f:17:dd:ae:df:45:47:68:c9:02:61:51:be:2d:
76:da:51:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:25 2024 by rpki-client on console-ams.rpki-client.org