Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ccf3b7f7-7897-457a-bf9f-1692c5e9da32/b4c90e8e95f4f2744e7037525920fa36c0987664.roa
File: b4c90e8e95f4f2744e7037525920fa36c0987664.roa (raw, json)
Hash identifier: JMzwLrw5MjqN2NHfCOwbPqKuibYYOtazDcqVZ3hgZYo=
Subject key identifier: 2D:85:D8:F3:5E:48:32:D4:FD:D8:B8:B5:EF:83:CA:7B:C4:CC:60:F6
Certificate issuer: /CN=731610640063561b294840cbdb7b67bb5e4dba3d
Certificate serial: 211339
Authority key identifier: 59:08:9A:13:79:FD:E9:7D:59:E4:B0:91:47:99:FA:D0:9D:69:98:58
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/731610640063561b294840cbdb7b67bb5e4dba3d.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/ccf3b7f7-7897-457a-bf9f-1692c5e9da32/b4c90e8e95f4f2744e7037525920fa36c0987664.roa
Signing time: Fri 09 Jun 2023 08:30:01 +0000
ROA not before: Thu 08 Jun 2023 08:30:01 +0000
ROA not after: Sat 07 Jun 2025 08:30:01 +0000
asID: 265691
IP address blocks: 45.5.68.0/24 maxlen: 24
45.5.69.0/24 maxlen: 24
45.5.70.0/24 maxlen: 24
45.5.71.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2167609 (0x211339)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=731610640063561b294840cbdb7b67bb5e4dba3d
Validity
Not Before: Jun 8 08:30:01 2023 GMT
Not After : Jun 7 08:30:01 2025 GMT
Subject: CN=b4c90e8e95f4f2744e7037525920fa36c0987664
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:e3:64:77:ec:b7:ce:11:4e:32:19:d5:32:4a:
36:8e:69:b3:75:f3:03:69:4e:6b:9b:cb:4f:f3:81:
62:76:00:c0:2c:64:7a:7c:c5:27:a6:90:2b:b8:eb:
27:e1:98:bb:a5:52:34:1b:56:a5:bc:19:6a:3b:6d:
8b:df:5f:0e:c9:14:4a:d4:ae:75:41:a1:2b:81:ae:
46:db:e5:43:88:f4:3f:fb:77:5c:17:57:d2:64:91:
62:57:1b:fb:e1:4d:0b:76:d0:d2:eb:63:66:90:fa:
42:f0:72:d9:83:bc:07:ea:b1:5a:a5:e6:87:9f:8a:
6d:71:aa:2d:d4:89:db:fb:81:68:e9:26:83:1d:37:
b0:53:22:62:6f:f3:0a:c4:b7:86:88:f2:cc:ed:f3:
f2:88:80:82:10:4b:73:a2:33:b1:3a:b0:6d:7e:6f:
9c:88:f6:f7:54:9d:48:93:30:8c:10:ea:50:f9:bb:
36:cb:c4:44:22:06:85:8a:2a:c5:5f:6c:cb:e4:b6:
ca:fe:31:a9:e5:0f:9e:0e:96:8d:b1:25:b4:cc:61:
a1:c8:89:d1:2a:b0:44:39:19:68:e2:ae:85:8f:63:
bd:0c:f8:6a:94:4f:50:6b:a1:ee:14:78:85:df:a3:
33:26:73:80:c7:89:66:4f:1d:d6:c7:31:0a:54:56:
82:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:85:D8:F3:5E:48:32:D4:FD:D8:B8:B5:EF:83:CA:7B:C4:CC:60:F6
X509v3 Authority Key Identifier:
keyid:59:08:9A:13:79:FD:E9:7D:59:E4:B0:91:47:99:FA:D0:9D:69:98:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/731610640063561b294840cbdb7b67bb5e4dba3d.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ccf3b7f7-7897-457a-bf9f-1692c5e9da32/b4c90e8e95f4f2744e7037525920fa36c0987664.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/ccf3b7f7-7897-457a-bf9f-1692c5e9da32/731610640063561b294840cbdb7b67bb5e4dba3d.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.5.68.0/22
Signature Algorithm: sha256WithRSAEncryption
03:c5:e2:d0:70:ac:83:ca:6e:2c:1f:8f:ec:09:6f:7f:a0:6b:
41:f6:e2:74:2d:a6:56:19:e6:95:7b:09:01:d8:57:69:09:93:
3f:b4:5e:31:ff:3f:3f:5c:13:f7:76:a0:4e:ae:c0:58:8f:b3:
54:40:92:65:6f:75:21:60:0d:d5:a5:6f:1c:a7:9b:16:14:11:
88:9a:84:90:ee:ad:6d:51:84:81:ef:68:83:27:8e:60:11:4e:
3f:10:e2:26:94:16:0d:69:20:30:ee:e5:95:1e:63:35:a8:a9:
6e:81:77:43:ba:bc:d9:cc:1c:56:82:43:3a:05:b9:48:5b:de:
72:c3:f2:7a:70:97:01:12:8d:7f:f9:38:fa:64:50:1f:0b:dc:
8b:b2:f5:38:f7:99:09:5b:07:2a:43:95:09:c0:8f:91:81:4c:
ba:e9:01:f9:92:a7:74:cc:3b:d4:c7:e8:87:d6:a2:79:dc:a2:
30:10:1b:58:a5:0b:c1:ef:8e:7f:4e:ee:44:b2:e0:12:5b:0a:
a4:2e:3e:b0:05:a3:8a:56:80:06:7c:38:22:1b:8d:1c:27:2a:
eb:5c:40:3e:91:eb:c9:43:fb:81:0c:ae:c2:af:d5:55:5f:ce:
b9:40:7c:59:ae:72:7b:11:17:cc:41:a5:a2:81:aa:0f:c9:23:
f4:d9:a5:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:31 2024 by rpki-client on console-fra.rpki-client.org