Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c72615e5-555b-4a7c-93ab-ce8a963a7c75/4f79bda9448a5d2994a4820335609611f1c30389.roa
File: 4f79bda9448a5d2994a4820335609611f1c30389.roa (raw, json)
Hash identifier: X2aODkU9lhaO5OIL/uwQpeIfaDJMmBsgo0PqsReW1ns=
Subject key identifier: 7A:71:AC:1D:CC:18:30:F9:C8:1B:D1:82:A2:CE:47:8F:8B:57:34:7E
Certificate issuer: /CN=4a1b531b01cd5446453179b34a5c11c87131d8df
Certificate serial: 21D934
Authority key identifier: E1:99:4A:3F:A4:BE:CF:9A:77:5C:77:77:63:FF:E7:6B:FA:2C:A4:BA
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4a1b531b01cd5446453179b34a5c11c87131d8df.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/c72615e5-555b-4a7c-93ab-ce8a963a7c75/4f79bda9448a5d2994a4820335609611f1c30389.roa
Signing time: Thu 06 Jul 2023 04:30:22 +0000
ROA not before: Wed 05 Jul 2023 04:30:22 +0000
ROA not after: Sun 06 Jul 2025 04:30:22 +0000
asID: 52468
IP address blocks: 45.71.112.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2218292 (0x21d934)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a1b531b01cd5446453179b34a5c11c87131d8df
Validity
Not Before: Jul 5 04:30:22 2023 GMT
Not After : Jul 6 04:30:22 2025 GMT
Subject: CN=4f79bda9448a5d2994a4820335609611f1c30389
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:7d:dc:e2:d1:a8:34:7a:df:35:61:2a:7a:46:
2e:bc:5a:f1:aa:5d:db:28:dc:4c:13:4c:1d:e0:9f:
f1:fc:b9:5d:b0:76:28:9a:73:72:2b:19:91:a4:cc:
e4:52:04:0b:2e:95:aa:d7:4b:08:6d:32:c4:6e:57:
85:a6:2e:dc:41:94:65:7a:ec:2b:13:b4:81:7a:3c:
af:66:1d:cc:a6:d9:c4:9c:ea:31:80:93:9d:df:25:
50:18:00:f3:24:4e:7f:ce:72:43:71:06:c6:54:6a:
e9:33:f3:c3:e9:8d:27:43:0a:ac:78:b6:08:36:31:
10:88:c6:15:99:5e:0d:23:5a:5f:15:ab:a2:a3:c4:
34:9d:20:fa:d8:af:81:06:6b:6e:ca:96:17:f6:03:
38:00:34:ac:e3:5f:b1:ae:04:54:b9:55:d9:13:54:
67:17:a0:69:33:b3:ef:5c:ad:4f:d2:0c:3a:61:8a:
85:c0:8f:ce:de:87:cc:5b:a1:a3:e0:fb:b5:6c:6f:
e0:63:12:b5:df:f6:1c:01:f2:01:69:01:e3:50:d3:
70:49:f2:65:bb:e2:07:a6:a1:90:ad:58:15:e7:8c:
6b:e4:53:bd:05:fe:11:ce:6b:8f:c9:be:43:ab:37:
40:09:69:40:34:89:53:fa:7e:da:2e:59:6f:b0:e1:
6d:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:71:AC:1D:CC:18:30:F9:C8:1B:D1:82:A2:CE:47:8F:8B:57:34:7E
X509v3 Authority Key Identifier:
keyid:E1:99:4A:3F:A4:BE:CF:9A:77:5C:77:77:63:FF:E7:6B:FA:2C:A4:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4a1b531b01cd5446453179b34a5c11c87131d8df.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c72615e5-555b-4a7c-93ab-ce8a963a7c75/4f79bda9448a5d2994a4820335609611f1c30389.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/c72615e5-555b-4a7c-93ab-ce8a963a7c75/4a1b531b01cd5446453179b34a5c11c87131d8df.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.71.112.0/22
Signature Algorithm: sha256WithRSAEncryption
09:b3:2e:b3:a9:19:cf:be:57:6c:78:43:cd:91:86:bb:70:d1:
4e:6e:5e:1c:cb:b6:0b:8c:13:e0:2a:38:cd:f7:7d:12:a7:98:
0e:67:72:4c:81:14:54:02:d6:05:ae:a9:d0:22:38:5b:17:77:
32:a9:ea:87:7e:9d:92:41:e4:4b:6f:bf:73:9b:ef:60:8b:ee:
cb:0c:c9:38:50:71:0a:fd:99:81:28:04:73:f6:af:e8:b2:0c:
07:b0:37:97:06:cd:d0:57:dc:c9:fa:94:11:11:b4:29:2a:8a:
43:cd:c2:91:85:63:25:94:a5:fe:db:b9:3e:0e:30:73:a1:bb:
77:1a:3d:89:6d:0a:34:f1:ca:4b:6a:4c:aa:cb:b3:4f:12:27:
e3:c3:86:ab:82:49:ce:39:d9:f3:9b:ef:a7:9d:2e:a8:5d:52:
06:b8:1a:03:87:98:6a:f6:71:1c:5d:d8:5e:15:d4:85:f6:22:
55:ad:b2:08:4f:2d:e7:fe:01:42:b7:66:63:84:2b:42:d6:da:
a8:e2:a7:0d:55:b5:05:1e:fc:d2:c6:a7:50:69:e9:13:ca:bf:
29:30:db:f3:e4:e7:5a:2f:bb:87:ba:41:44:63:69:06:41:26:
e5:16:aa:dc:99:32:b7:23:85:75:60:d4:96:a6:48:a5:16:16:
d2:0a:a9:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:31 2024 by rpki-client on console-fra.rpki-client.org