Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c53d6f63-91e1-44ed-afcd-1622060c784c/4a71bdfa1e7236b446abc6c7bef689ef31abe62a.roa
File: 4a71bdfa1e7236b446abc6c7bef689ef31abe62a.roa (raw, json)
Hash identifier: MsTXVw/LpVcxAlSKBARqemtMkBJW0jcJ6eq+Rs0W82Q=
Subject key identifier: 83:FB:F3:8B:4A:8F:0E:67:72:47:22:51:CF:7C:DE:72:FC:00:C1:53
Certificate issuer: /CN=d91fe0c4e650a338e80b4066e31e49e8122cdeb1
Certificate serial: 21E13A
Authority key identifier: EC:FB:32:23:27:26:26:BF:FC:62:56:D6:D8:D5:85:9F:FE:AB:E8:0B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d91fe0c4e650a338e80b4066e31e49e8122cdeb1.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/c53d6f63-91e1-44ed-afcd-1622060c784c/4a71bdfa1e7236b446abc6c7bef689ef31abe62a.roa
Signing time: Wed 05 Jul 2023 01:49:27 +0000
ROA not before: Tue 04 Jul 2023 01:49:27 +0000
ROA not after: Sat 05 Jul 2025 01:49:27 +0000
asID: 52468
IP address blocks: 45.225.104.0/24 maxlen: 24
45.225.105.0/24 maxlen: 24
45.225.106.0/24 maxlen: 24
45.225.107.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2220346 (0x21e13a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d91fe0c4e650a338e80b4066e31e49e8122cdeb1
Validity
Not Before: Jul 4 01:49:27 2023 GMT
Not After : Jul 5 01:49:27 2025 GMT
Subject: CN=4a71bdfa1e7236b446abc6c7bef689ef31abe62a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:fc:dc:93:9b:a7:f7:ee:5f:61:3d:0d:55:5e:
9b:af:f0:2c:11:28:f0:9e:92:da:c8:6e:f5:e8:f6:
dc:60:46:cd:30:1c:ac:5a:fe:96:ee:a4:fd:64:69:
81:3f:79:9b:e7:d0:2c:e6:a9:96:47:e6:6d:da:a9:
cd:18:1e:d0:0e:fb:97:56:7d:f9:a3:bf:20:38:cc:
8f:53:fe:2d:5c:b6:86:f6:a7:53:7b:19:35:81:c2:
19:18:71:ea:21:a0:ec:c5:e5:a9:9e:b5:e6:b7:2f:
c8:4e:a3:b3:db:16:a5:02:6b:67:e1:42:aa:8b:f7:
26:44:92:36:cf:fa:29:2a:d4:0a:8a:d1:9a:4f:d0:
e9:84:88:01:4e:59:ca:ba:0c:18:84:b9:ec:ae:38:
19:c5:bf:ca:af:9c:95:2f:4a:cd:a5:62:0f:16:be:
f9:04:85:18:1e:5c:5d:cd:bd:5d:36:f1:35:bc:e0:
9c:c2:2a:41:c9:8b:7d:b6:2d:80:03:20:d0:3f:3d:
96:ce:5d:28:7d:f6:80:b1:b6:dc:77:08:5c:06:bd:
a7:b2:4d:1e:7e:3e:35:01:44:44:d6:90:23:e9:92:
dd:5d:3a:4d:2d:94:b7:f6:2e:81:48:5e:62:02:db:
8f:d2:d7:28:b4:4b:a6:c5:0a:4b:ea:d9:b6:c5:a1:
81:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:FB:F3:8B:4A:8F:0E:67:72:47:22:51:CF:7C:DE:72:FC:00:C1:53
X509v3 Authority Key Identifier:
keyid:EC:FB:32:23:27:26:26:BF:FC:62:56:D6:D8:D5:85:9F:FE:AB:E8:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d91fe0c4e650a338e80b4066e31e49e8122cdeb1.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c53d6f63-91e1-44ed-afcd-1622060c784c/4a71bdfa1e7236b446abc6c7bef689ef31abe62a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/c53d6f63-91e1-44ed-afcd-1622060c784c/d91fe0c4e650a338e80b4066e31e49e8122cdeb1.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.225.104.0/22
Signature Algorithm: sha256WithRSAEncryption
89:ca:98:d1:b7:dc:fb:21:e7:62:6c:60:01:a3:89:de:c9:f7:
de:bc:cc:b0:28:42:21:ba:c5:50:3f:2e:fc:2f:fa:56:4a:8c:
54:0f:a4:1b:1f:29:ed:c1:c1:01:d4:60:c6:e7:d2:6b:e4:bc:
55:d0:a9:de:01:2c:ba:59:97:2c:4a:5b:83:d3:97:50:2d:61:
34:cd:55:e6:47:27:af:b9:5f:79:99:a8:11:1f:d2:39:09:e1:
a4:59:34:17:bf:ca:a4:e3:35:47:11:74:16:a4:bb:66:09:98:
cd:bd:2d:97:8f:b1:74:9a:2e:a2:61:74:30:5e:a8:1c:71:ed:
26:5a:0b:2e:33:2b:24:f7:88:2f:8b:fa:c6:18:ab:96:93:4f:
37:ef:f5:98:10:32:7e:c7:71:06:57:9b:0d:e0:dd:3e:c9:e2:
24:a1:5a:9b:86:7d:05:59:fe:d2:9f:e4:7d:3b:c1:07:9a:f1:
a4:fe:5e:62:cf:2c:0f:b7:2d:7a:d2:80:cb:0e:33:cb:e8:30:
eb:7e:b9:4a:60:45:71:a1:52:ad:57:34:19:be:3e:93:5a:71:
a6:c8:88:0c:72:c9:42:94:47:f0:ee:d5:d2:b7:af:82:88:4a:
a3:a1:2d:f5:a4:7c:d3:1e:0e:97:61:00:ee:db:b6:84:91:77:
3d:59:72:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:32 2024 by rpki-client on console-ams.rpki-client.org