Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ba4a14f9-9180-4ca1-8f7d-9cd801ad64ef/07f44c0fe61effb54d4ed54bfaad996bf99ce23b.roa
File: 07f44c0fe61effb54d4ed54bfaad996bf99ce23b.roa (raw, json)
Hash identifier: aJkG5UUa4zBnqwnt4s3HpIq+f+kHt236JSriUPKSFM8=
Subject key identifier: 69:46:9C:3F:BF:C1:6B:17:C6:D0:8C:F1:8F:97:FA:23:4D:32:8B:BF
Certificate issuer: /CN=33d77efc1ab1b4b849aa3ac57cd00366ea75b677
Certificate serial: 0DA5E7
Authority key identifier: E5:32:D8:5E:46:59:00:DA:65:B0:67:57:94:D1:50:D3:E9:F4:4D:E5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/33d77efc1ab1b4b849aa3ac57cd00366ea75b677.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/ba4a14f9-9180-4ca1-8f7d-9cd801ad64ef/07f44c0fe61effb54d4ed54bfaad996bf99ce23b.roa
Signing time: Wed 24 Mar 2021 14:36:00 +0000
ROA not before: Wed 24 Mar 2021 14:35:55 +0000
ROA not after: Tue 24 Mar 2026 14:35:55 +0000
asID: 27951
IP address blocks: 45.225.226.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 894439 (0xda5e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33d77efc1ab1b4b849aa3ac57cd00366ea75b677
Validity
Not Before: Mar 24 14:35:55 2021 GMT
Not After : Mar 24 14:35:55 2026 GMT
Subject: CN=07f44c0fe61effb54d4ed54bfaad996bf99ce23b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:6f:0f:5f:e8:92:79:43:8c:8b:2d:62:b6:35:
f3:d1:1a:67:b0:ad:58:e3:b0:79:27:c2:39:85:14:
10:0f:c3:d0:4f:7b:a0:97:65:f9:ad:74:fd:c8:56:
a8:84:4d:18:91:64:19:c3:ac:91:52:e0:0e:20:11:
69:cd:1c:33:b8:4c:65:65:24:f6:2f:ac:61:36:38:
51:9a:e7:d6:9c:d7:38:6b:30:99:fb:10:21:8d:84:
28:54:03:eb:d9:6e:77:cb:1a:fe:96:15:33:71:a7:
26:c3:8c:c1:2a:e4:ac:ab:91:21:19:13:cc:bc:b5:
d7:42:55:40:a9:84:df:7c:40:59:4d:95:6d:37:80:
ba:82:f2:fd:ee:06:ca:35:6f:c0:f3:3c:af:71:45:
55:04:31:c8:e6:ee:d6:55:45:42:84:a4:99:8d:5b:
de:97:42:81:90:d0:d5:da:c5:59:14:36:72:9d:66:
4d:70:19:f2:b1:31:c2:81:0f:79:dc:27:3d:f4:18:
a7:6d:24:30:93:a3:74:f4:f1:30:26:1f:57:1a:b8:
88:f0:9a:3c:23:7b:2e:7f:19:d8:4d:37:32:d2:ed:
9b:ad:04:f7:27:8c:93:5e:27:e5:10:5c:23:72:2b:
23:1b:f9:59:46:8c:fa:27:b4:f8:c0:1f:ae:50:49:
b0:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:46:9C:3F:BF:C1:6B:17:C6:D0:8C:F1:8F:97:FA:23:4D:32:8B:BF
X509v3 Authority Key Identifier:
keyid:E5:32:D8:5E:46:59:00:DA:65:B0:67:57:94:D1:50:D3:E9:F4:4D:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/33d77efc1ab1b4b849aa3ac57cd00366ea75b677.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ba4a14f9-9180-4ca1-8f7d-9cd801ad64ef/07f44c0fe61effb54d4ed54bfaad996bf99ce23b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/ba4a14f9-9180-4ca1-8f7d-9cd801ad64ef/33d77efc1ab1b4b849aa3ac57cd00366ea75b677.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.225.226.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:cf:38:4a:2d:a5:da:ef:56:25:81:a3:99:0f:e9:e2:db:74:
81:e4:60:cc:db:e1:08:73:be:3c:b4:e6:f5:34:d8:7a:98:9a:
57:4e:6d:9b:b2:a4:19:26:6c:4b:ab:3b:aa:b5:c8:cf:6e:f6:
34:cd:a1:43:df:e5:95:9c:ba:ce:3b:dc:8e:b0:82:2c:c9:99:
57:16:0e:ed:1f:38:e9:c0:59:a6:ee:91:c0:a4:d6:b6:37:b3:
d9:ba:88:2e:73:e4:35:ca:f3:d2:bf:b1:14:6c:4b:07:eb:6c:
53:8e:90:e2:99:69:55:a9:1b:bd:a5:16:dc:e9:8d:cb:3e:73:
49:95:32:89:ed:84:18:29:ad:a4:a5:c7:4c:f9:21:b0:b4:20:
44:82:05:1b:ce:54:f0:82:1d:71:66:f3:69:da:e8:62:5d:f9:
e9:24:84:65:9f:59:c9:1e:ba:b4:5b:7c:90:42:7e:94:f3:e4:
03:08:7a:e1:e3:d9:a6:29:47:cd:ea:b3:04:78:11:aa:c1:37:
d2:82:f2:d2:0b:89:a1:1f:0c:a2:8d:bc:a3:a9:5d:2b:7b:cd:
79:c7:96:c4:ae:e7:88:2f:63:79:ce:50:22:da:d3:cc:a6:9d:
d7:31:58:89:48:9d:6b:3d:20:93:1f:53:84:37:39:ac:49:37:
37:7f:71:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:03 2024 by rpki-client on console-fra.rpki-client.org