Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ba4a14f9-9180-4ca1-8f7d-9cd801ad64ef/d4f92a37726120dfb6a4bfffaeb280b59e45befc.roa
File: d4f92a37726120dfb6a4bfffaeb280b59e45befc.roa (raw, json)
Hash identifier: w26Rk3hEairOE1X6vJWjcx/7nAUlFJS0lqeHrx+64MQ=
Subject key identifier: 47:A7:C7:E7:91:5F:9B:57:07:47:A9:A5:AB:DF:44:AD:5B:2F:B9:70
Certificate issuer: /CN=33d77efc1ab1b4b849aa3ac57cd00366ea75b677
Certificate serial: 216445
Authority key identifier: E5:32:D8:5E:46:59:00:DA:65:B0:67:57:94:D1:50:D3:E9:F4:4D:E5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/33d77efc1ab1b4b849aa3ac57cd00366ea75b677.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/ba4a14f9-9180-4ca1-8f7d-9cd801ad64ef/d4f92a37726120dfb6a4bfffaeb280b59e45befc.roa
Signing time: Tue 20 Jun 2023 12:44:13 +0000
ROA not before: Mon 19 Jun 2023 12:44:12 +0000
ROA not after: Fri 20 Jun 2025 12:44:12 +0000
asID: 27951
IP address blocks: 45.225.225.0/24 maxlen: 24
2803:da20::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2188357 (0x216445)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33d77efc1ab1b4b849aa3ac57cd00366ea75b677
Validity
Not Before: Jun 19 12:44:12 2023 GMT
Not After : Jun 20 12:44:12 2025 GMT
Subject: CN=d4f92a37726120dfb6a4bfffaeb280b59e45befc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:2b:ce:10:ff:b9:e8:f3:aa:0d:60:1c:7b:63:
76:96:3c:a4:3e:88:5b:eb:63:86:6e:03:58:6c:27:
28:54:7e:e0:94:09:a7:2b:a7:01:39:15:b7:03:27:
29:69:fa:bb:7c:d3:21:b9:49:a9:e8:c8:6f:e7:a1:
73:cf:fa:d3:3b:42:6d:50:9c:df:d9:7e:33:9c:a7:
9a:77:a6:85:05:36:8d:39:31:23:72:a1:9e:a5:73:
8f:ad:ff:d5:77:fd:98:be:42:5e:02:63:c4:f0:d1:
9e:bf:41:3f:fb:1a:07:35:f6:58:c3:5f:46:6c:b9:
04:ed:19:65:9b:1b:74:58:de:91:94:9b:43:ac:ea:
7e:bf:68:1f:f2:53:ce:0e:43:9a:c4:59:04:e6:f2:
11:88:fe:5c:e3:94:43:1e:3a:84:59:1e:2f:c9:77:
ba:37:79:4e:c1:1a:d9:53:5a:8a:84:8a:e6:36:2d:
93:03:37:ae:3f:fc:6a:83:ea:ab:ee:f4:41:e9:22:
1d:0e:ce:4c:f4:77:9e:e4:cd:93:28:ce:8d:d6:2a:
5b:79:72:88:19:aa:bd:d0:34:f4:ba:cb:ee:d9:c5:
a2:ca:f6:54:7e:41:ff:4d:c6:af:99:1c:81:f1:69:
4d:a5:8d:03:38:48:44:d4:78:20:d2:46:fb:ed:b2:
96:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:A7:C7:E7:91:5F:9B:57:07:47:A9:A5:AB:DF:44:AD:5B:2F:B9:70
X509v3 Authority Key Identifier:
keyid:E5:32:D8:5E:46:59:00:DA:65:B0:67:57:94:D1:50:D3:E9:F4:4D:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/33d77efc1ab1b4b849aa3ac57cd00366ea75b677.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ba4a14f9-9180-4ca1-8f7d-9cd801ad64ef/d4f92a37726120dfb6a4bfffaeb280b59e45befc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/ba4a14f9-9180-4ca1-8f7d-9cd801ad64ef/33d77efc1ab1b4b849aa3ac57cd00366ea75b677.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.225.225.0/24
IPv6:
2803:da20::/40
Signature Algorithm: sha256WithRSAEncryption
47:47:6e:f1:0a:02:f1:b9:c3:04:f0:64:ee:58:86:36:0c:03:
ed:5c:e4:15:66:d4:a9:17:da:71:a6:e6:6f:32:6b:9a:8e:cc:
55:0e:29:41:3a:49:ec:c7:13:02:00:74:9b:71:be:e8:90:06:
58:f8:3b:bb:6d:b1:22:86:8d:62:f8:9b:f6:75:a7:d5:e4:c8:
26:70:1d:d0:6f:29:76:0c:b7:cd:3d:b5:e3:df:56:50:3b:4e:
8e:22:b2:96:be:f3:fb:41:05:41:88:9c:49:0b:cb:99:69:82:
92:f3:5a:9c:97:1a:8e:22:6d:6f:25:cd:44:a4:5c:e3:af:66:
e7:46:aa:7c:24:23:35:51:9b:e0:65:f7:37:94:b1:5d:a5:a9:
0a:a7:af:ed:de:71:ba:64:27:0f:a3:e0:12:98:f6:34:0e:c5:
f3:af:d1:7c:e3:b9:ff:6c:b7:6f:95:a9:1a:b6:c8:2d:83:e2:
20:fa:e1:3d:3b:35:92:0f:e7:5e:46:1c:e8:24:e3:73:45:27:
e5:65:1d:16:96:26:94:4a:ad:a3:90:73:c4:3a:90:b1:dc:cb:
9e:c7:d6:9e:7d:aa:75:cd:42:43:55:33:38:83:f9:50:25:47:
62:1b:ad:0d:ba:c0:dd:47:36:04:ec:e0:5e:01:24:41:69:d7:
34:fd:41:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:25 2024 by rpki-client on console-ams.rpki-client.org