Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ba4a14f9-9180-4ca1-8f7d-9cd801ad64ef/affc966053c9ea02c62f585c1a8af8756d54092e.roa
File: affc966053c9ea02c62f585c1a8af8756d54092e.roa (raw, json)
Hash identifier: n+qV8LSIFyqyeT/YJ6mFnQdhYu69yNdrRBNfc1A8nT4=
Subject key identifier: 6F:69:83:2E:50:53:4E:E4:C5:99:8E:73:66:EB:BC:FC:CC:2D:B3:7D
Certificate issuer: /CN=33d77efc1ab1b4b849aa3ac57cd00366ea75b677
Certificate serial: 0D978E
Authority key identifier: E5:32:D8:5E:46:59:00:DA:65:B0:67:57:94:D1:50:D3:E9:F4:4D:E5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/33d77efc1ab1b4b849aa3ac57cd00366ea75b677.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/ba4a14f9-9180-4ca1-8f7d-9cd801ad64ef/affc966053c9ea02c62f585c1a8af8756d54092e.roa
Signing time: Wed 24 Mar 2021 14:35:57 +0000
ROA not before: Wed 24 Mar 2021 14:35:55 +0000
ROA not after: Tue 24 Mar 2026 14:35:55 +0000
asID: 265855
IP address blocks: 45.225.224.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 890766 (0xd978e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33d77efc1ab1b4b849aa3ac57cd00366ea75b677
Validity
Not Before: Mar 24 14:35:55 2021 GMT
Not After : Mar 24 14:35:55 2026 GMT
Subject: CN=affc966053c9ea02c62f585c1a8af8756d54092e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f3:31:4b:96:40:3e:65:35:09:63:43:be:43:
51:6e:be:da:22:f3:a1:3e:b4:c3:3e:2c:93:e9:57:
02:72:be:d5:0c:9b:2d:0a:2f:ee:01:e0:f4:dd:a5:
2d:73:4d:ed:c8:66:03:99:60:95:47:e4:d6:3a:26:
a8:f4:e1:a1:4a:bd:d7:c3:64:ed:dd:2a:92:e5:de:
28:54:ea:39:86:37:de:8b:87:6e:fe:ec:11:f1:23:
be:a8:66:ee:1e:ac:3f:88:9c:61:98:70:85:30:6a:
1b:c7:23:ee:4c:8a:1b:13:6b:85:a1:95:85:dc:59:
da:bf:8f:e5:4c:67:7c:fc:3f:93:3c:88:51:dd:46:
bc:12:67:a8:9a:45:35:17:ed:d3:85:c0:15:fe:bd:
cf:22:fe:5f:fb:7c:fb:53:6b:b1:ba:cf:d0:15:d1:
68:5d:f9:d8:8e:c7:4a:98:39:3d:47:bf:8b:81:b1:
31:f7:62:23:03:cb:a0:d9:83:7a:58:b4:2a:95:6b:
18:a4:eb:2a:53:1e:74:32:63:be:9d:ec:66:8a:d0:
b4:31:7e:7d:72:91:3d:41:74:6c:39:1b:31:b2:0f:
07:cb:f7:4a:a0:02:15:b7:25:17:ef:97:b4:61:d6:
25:8d:54:9d:d4:20:82:d3:62:ac:a3:75:07:b1:84:
08:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:69:83:2E:50:53:4E:E4:C5:99:8E:73:66:EB:BC:FC:CC:2D:B3:7D
X509v3 Authority Key Identifier:
keyid:E5:32:D8:5E:46:59:00:DA:65:B0:67:57:94:D1:50:D3:E9:F4:4D:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/33d77efc1ab1b4b849aa3ac57cd00366ea75b677.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ba4a14f9-9180-4ca1-8f7d-9cd801ad64ef/affc966053c9ea02c62f585c1a8af8756d54092e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/ba4a14f9-9180-4ca1-8f7d-9cd801ad64ef/33d77efc1ab1b4b849aa3ac57cd00366ea75b677.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.225.224.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:29:e7:52:e8:f8:7d:04:e1:38:56:d2:db:50:2a:d7:b0:34:
32:6c:6e:94:41:50:d2:91:d7:b3:4b:62:f5:f0:25:52:f9:2a:
b9:2c:39:d1:3c:8a:0f:03:52:db:d5:3b:e4:f8:90:90:4f:83:
c6:66:fe:07:8a:3a:63:d9:5d:d7:5e:35:e0:e5:7f:85:b2:f9:
65:38:d2:b2:9f:c1:23:ce:19:66:5d:82:9a:d3:92:74:30:9e:
f0:6b:59:3c:ea:40:42:24:0d:6b:5e:b3:27:c6:d4:79:63:b6:
f5:81:66:02:7b:dd:46:77:b9:08:ff:4e:94:8e:0d:8a:a7:64:
34:41:78:b5:7e:6e:7f:ee:05:a6:ca:86:8c:71:0f:d2:6d:ca:
e5:c5:0b:54:31:15:e2:c5:61:87:01:4c:31:db:57:f2:c5:1e:
f2:db:94:35:78:ad:1a:dd:f9:95:01:f7:7b:c9:5e:35:c8:8d:
40:bd:14:c6:eb:b7:71:95:0f:0c:6e:27:65:a5:93:69:0a:a9:
63:a4:29:3e:25:96:a6:53:ae:a2:84:4f:2e:ef:db:bf:88:89:
cd:83:fb:de:43:92:0a:1e:d1:36:7d:d9:18:ea:6d:02:9e:d1:
de:36:9e:5b:60:bf:4d:10:d6:bd:d5:e5:69:28:26:93:e5:78:
2f:b4:2f:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:03 2024 by rpki-client on console-fra.rpki-client.org