Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ce4e1c85-38b7-4a68-a3fd-a812b75a731e/fdd1db6cfa0fad9d2a1493615ba246d40eab091c.roa
File: fdd1db6cfa0fad9d2a1493615ba246d40eab091c.roa (raw, json)
Hash identifier: VdrH9axu7WT08G47e6GeSNFgnQDcgFsBTiAPULp1mp0=
Subject key identifier: 3B:D5:F1:B9:23:CE:C4:16:39:72:8D:F3:0F:25:43:58:2E:A2:FC:89
Certificate issuer: /CN=222a52d30ba3eec506c4b1db1e0d991b13603988
Certificate serial: 0D356F
Authority key identifier: AB:D1:85:59:8B:3B:64:F3:44:13:E2:79:7F:E1:25:D7:A4:04:4A:B7
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/222a52d30ba3eec506c4b1db1e0d991b13603988.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/ce4e1c85-38b7-4a68-a3fd-a812b75a731e/fdd1db6cfa0fad9d2a1493615ba246d40eab091c.roa
Signing time: Wed 24 Mar 2021 14:39:27 +0000
ROA not before: Wed 24 Mar 2021 14:39:27 +0000
ROA not after: Tue 24 Mar 2026 14:39:27 +0000
asID: 27947
IP address blocks: 45.70.196.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 865647 (0xd356f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=222a52d30ba3eec506c4b1db1e0d991b13603988
Validity
Not Before: Mar 24 14:39:27 2021 GMT
Not After : Mar 24 14:39:27 2026 GMT
Subject: CN=fdd1db6cfa0fad9d2a1493615ba246d40eab091c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:6b:6b:04:2b:40:c6:af:5a:37:4c:4f:f6:7d:
6d:1f:07:ce:6f:df:8b:c9:e2:2c:4c:9e:8e:30:e4:
78:71:da:0e:4e:8c:1d:bf:14:20:cf:4e:59:46:06:
11:3a:a6:a7:67:87:ee:c5:8b:c3:eb:49:0f:6c:b9:
1c:8f:27:1d:ce:ae:c1:8a:6e:e6:cf:bc:6f:48:fd:
40:6f:1f:06:f1:bc:d6:de:ee:03:f9:6b:91:c8:1b:
74:11:d8:ad:c7:a5:bb:15:21:82:ad:49:1d:59:b0:
54:77:44:a9:49:1c:84:42:7e:03:8e:18:9b:39:35:
fc:70:1f:09:af:2d:99:ff:d9:0a:25:9a:ab:e7:8c:
0b:53:15:19:f5:ef:2e:9c:74:86:de:d4:06:6c:4c:
4d:47:58:77:12:0f:aa:03:2a:d9:a3:a6:d2:76:a1:
2c:22:a6:3c:2b:c2:58:58:e7:4d:28:84:c1:44:96:
20:34:e4:d5:d7:5a:12:43:73:fa:7b:84:86:e9:a3:
94:72:7f:9c:1f:ea:bf:9e:35:67:ed:a4:96:91:9e:
4c:e9:42:18:93:ff:19:33:d8:19:fe:fb:b5:19:e1:
b1:00:5d:d9:f8:50:ab:1e:94:05:07:29:e2:6a:54:
72:4e:61:36:41:b9:20:ed:d5:39:83:89:f4:86:16:
fd:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:D5:F1:B9:23:CE:C4:16:39:72:8D:F3:0F:25:43:58:2E:A2:FC:89
X509v3 Authority Key Identifier:
keyid:AB:D1:85:59:8B:3B:64:F3:44:13:E2:79:7F:E1:25:D7:A4:04:4A:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/222a52d30ba3eec506c4b1db1e0d991b13603988.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ce4e1c85-38b7-4a68-a3fd-a812b75a731e/fdd1db6cfa0fad9d2a1493615ba246d40eab091c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/ce4e1c85-38b7-4a68-a3fd-a812b75a731e/222a52d30ba3eec506c4b1db1e0d991b13603988.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.70.196.0/24
Signature Algorithm: sha256WithRSAEncryption
77:83:3e:32:dd:3f:0e:9f:23:f7:ac:e5:48:12:4b:a3:4d:ff:
25:a3:6e:db:fc:e9:81:06:61:62:1c:54:a7:7b:92:84:99:98:
f3:7d:81:8d:ba:fd:38:aa:82:96:fb:e7:5a:34:e8:3d:b8:c2:
90:c3:35:6b:07:b8:17:21:4e:e4:df:b5:53:92:ee:16:1a:20:
87:5f:73:11:d2:61:ab:9d:fc:10:0a:f7:7c:d4:88:21:d9:a7:
8e:b7:18:bb:9e:85:9f:23:16:87:cd:da:96:2b:2f:1d:4a:f4:
15:ae:42:1c:d6:d3:c6:5c:d9:c1:e4:96:ac:a5:e7:03:ff:93:
7e:45:c8:e7:1f:d1:c3:77:41:10:87:0a:b7:1b:3c:12:38:02:
8a:7d:6e:29:44:b3:36:54:0a:ce:da:9c:a4:88:8e:8a:06:fd:
f8:55:9c:03:18:02:50:ed:5b:51:14:f3:a3:c2:c1:f0:f2:64:
bd:5d:25:dc:a9:34:c6:73:fb:98:97:6b:39:20:30:03:36:75:
5d:47:45:17:25:95:7c:df:e0:4a:1f:e4:ab:9e:2d:ac:96:fb:
69:a6:7f:9e:c1:23:1d:76:07:34:7e:45:dd:94:9c:e4:ae:af:
8a:45:e0:c0:0a:24:4b:68:b7:b7:f9:1e:e6:6a:10:88:d8:e5:
7b:53:56:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:48 2024 by rpki-client on console-ams.rpki-client.org