Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/bea967e9-abe1-4265-9865-bb285b70783a/61b21c41407a1e55c1a5b7eac2a660cbfbac0daa.roa
File: 61b21c41407a1e55c1a5b7eac2a660cbfbac0daa.roa (raw, json)
Hash identifier: FIFRmGiCucGSNW3+enTWrpGRNjvrLnR6c8qbUVZoKag=
Subject key identifier: B4:30:E8:16:29:3C:FC:8E:26:DA:72:C7:C5:78:FF:8E:D9:52:AC:35
Certificate issuer: /CN=6af2767e78b04e90ea78a02d316208e719f9cac2
Certificate serial: 011175
Authority key identifier: F3:CA:2C:75:D0:AC:7E:2C:2B:14:7A:FE:D9:1F:7A:6D:3F:3B:22:D6
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6af2767e78b04e90ea78a02d316208e719f9cac2.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/bea967e9-abe1-4265-9865-bb285b70783a/61b21c41407a1e55c1a5b7eac2a660cbfbac0daa.roa
Signing time: Wed 28 Jun 2023 01:26:27 +0000
ROA not before: Tue 27 Jun 2023 01:26:27 +0000
ROA not after: Sat 28 Jun 2025 01:26:27 +0000
asID: 64150
IP address blocks: 45.68.34.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70005 (0x11175)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6af2767e78b04e90ea78a02d316208e719f9cac2
Validity
Not Before: Jun 27 01:26:27 2023 GMT
Not After : Jun 28 01:26:27 2025 GMT
Subject: CN=61b21c41407a1e55c1a5b7eac2a660cbfbac0daa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:26:4b:b1:b4:bc:58:a6:22:a7:66:5a:ba:01:
9c:79:14:17:b9:0a:8d:f8:ee:6b:35:7c:e6:f1:74:
fe:b6:5c:93:0a:b8:6d:7f:04:e1:e4:62:1a:ae:0d:
31:c1:2e:d7:12:e7:c8:38:9c:8e:40:0d:2b:9e:5f:
c7:02:57:c7:f6:aa:41:24:c8:34:b5:e8:8e:33:d5:
af:01:42:22:24:c9:61:0b:9b:00:5c:ec:62:7d:ad:
de:16:6f:73:c3:19:39:59:fb:9d:9a:44:0d:90:74:
94:bb:96:c1:12:2e:09:9d:57:7d:88:0d:31:86:08:
e5:bb:bb:68:5b:d1:a0:e5:db:47:d1:87:be:0f:8e:
19:88:25:4f:2b:63:3b:45:21:dc:60:36:69:c9:2a:
49:ac:4e:a0:ad:3f:d8:8c:8a:22:0f:23:ec:7f:7c:
28:b5:68:8d:5a:e5:4a:a9:32:1f:d6:7d:49:30:93:
46:1a:25:2d:ef:75:fa:d5:28:c2:3c:09:e2:0c:92:
01:e7:60:b2:b4:d5:f0:bc:ec:da:ce:6f:26:85:e5:
92:91:86:d8:ed:c5:47:27:ca:fc:11:43:c1:7a:84:
b2:bc:6f:21:d8:dd:e3:91:84:89:8e:f2:07:8e:70:
a2:ed:7f:96:0f:c7:ef:6a:cc:20:e1:1e:26:2b:55:
80:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:30:E8:16:29:3C:FC:8E:26:DA:72:C7:C5:78:FF:8E:D9:52:AC:35
X509v3 Authority Key Identifier:
keyid:F3:CA:2C:75:D0:AC:7E:2C:2B:14:7A:FE:D9:1F:7A:6D:3F:3B:22:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6af2767e78b04e90ea78a02d316208e719f9cac2.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/bea967e9-abe1-4265-9865-bb285b70783a/61b21c41407a1e55c1a5b7eac2a660cbfbac0daa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/bea967e9-abe1-4265-9865-bb285b70783a/6af2767e78b04e90ea78a02d316208e719f9cac2.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.68.34.0/23
Signature Algorithm: sha256WithRSAEncryption
a1:d1:59:a4:d0:68:b7:fb:a9:d3:a9:44:8e:1e:d9:83:55:59:
56:d8:0f:66:0f:1a:a3:12:2f:1d:50:2a:2b:f2:4b:41:eb:b9:
3e:b3:70:65:27:9d:93:30:07:25:36:92:8d:26:f9:68:c0:75:
95:05:cf:0d:64:02:84:b1:92:c3:f3:c9:33:46:ac:6b:1f:ee:
1c:85:e8:af:8d:c2:c4:bd:71:ee:8a:17:88:dd:c0:cd:a8:e3:
94:df:92:1c:9e:6b:f0:29:89:a0:dc:3d:d6:64:42:b8:4d:dc:
d3:0a:31:e1:6b:a0:65:fe:d1:18:22:f0:bd:fa:22:c1:55:ba:
a4:c2:3e:9e:37:ed:27:22:d9:12:dd:b3:d9:37:dc:0b:c3:e3:
93:56:2c:2a:57:72:0f:54:57:8e:5f:cf:5e:db:79:da:a2:78:
e8:20:e7:00:58:c6:0e:4e:b6:f8:c1:61:d0:fb:e5:a2:81:0f:
73:6a:2e:80:4f:fc:24:cb:3d:ad:9d:eb:ef:7b:3f:e3:90:69:
3b:4f:3d:8a:11:f0:05:6d:6c:7c:19:b2:8d:91:4a:48:d6:78:
7d:13:e8:6e:dd:2c:d5:1c:bf:a1:2a:81:e4:a5:cd:47:66:13:
72:7f:69:78:26:67:9e:6d:2c:85:12:7f:77:0a:fc:ee:98:85:
d9:62:9b:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:30 2024 by rpki-client on console-fra.rpki-client.org