Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d2c7834f-d9fb-4602-a19d-ebc045750344/f942fd5dc09be47a6aec372f983a5e822d7b5ad8.roa
File: f942fd5dc09be47a6aec372f983a5e822d7b5ad8.roa (raw, json)
Hash identifier: EjMVEVNahKHmaL4741y+8nxgmeYspr6W53XsLsTYz84=
Subject key identifier: D1:F9:58:C8:A3:63:35:49:2A:29:E9:57:F3:22:DF:C5:22:B9:1D:80
Certificate issuer: /CN=8669f75329643f51ee734f5266f76ad26961b120
Certificate serial: 496B
Authority key identifier: 5F:D3:D7:22:E0:42:41:7A:72:CD:74:40:C4:7E:3C:47:6D:A2:DA:45
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8669f75329643f51ee734f5266f76ad26961b120.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/d2c7834f-d9fb-4602-a19d-ebc045750344/f942fd5dc09be47a6aec372f983a5e822d7b5ad8.roa
Signing time: Sun 08 Oct 2023 00:25:02 +0000
ROA not before: Sat 07 Oct 2023 00:25:02 +0000
ROA not after: Wed 08 Oct 2025 00:25:02 +0000
asID: 28435
IP address blocks: 45.189.148.0/22 maxlen: 22
45.189.148.0/23 maxlen: 23
45.189.150.0/23 maxlen: 23
45.189.148.0/24 maxlen: 24
45.189.149.0/24 maxlen: 24
45.189.150.0/24 maxlen: 24
45.189.151.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18795 (0x496b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8669f75329643f51ee734f5266f76ad26961b120
Validity
Not Before: Oct 7 00:25:02 2023 GMT
Not After : Oct 8 00:25:02 2025 GMT
Subject: CN=f942fd5dc09be47a6aec372f983a5e822d7b5ad8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:0f:f3:ef:24:02:74:9a:87:4f:23:ad:fb:31:
57:15:af:bd:8e:62:ee:1d:49:4e:72:f8:96:06:f8:
4c:1c:8b:25:38:83:70:79:57:c5:4b:98:b3:63:03:
08:d8:33:71:3d:c9:52:16:02:ef:21:d6:57:89:3d:
93:f7:03:fe:fd:95:66:94:a0:6e:7f:83:ec:de:6b:
df:c4:c6:02:66:48:24:3d:a5:10:72:01:fe:e6:4b:
3f:39:91:83:8d:b7:2c:96:16:ea:87:10:2c:22:62:
6f:5e:3d:9f:a3:0d:32:59:52:81:18:45:2f:3a:34:
92:5e:d0:e8:ff:c3:75:48:08:37:ff:ef:07:46:84:
8a:78:0c:eb:c4:58:b1:cb:1d:45:cd:74:e2:42:f3:
e4:87:63:35:90:fc:bc:3a:00:71:ea:8f:1b:73:ae:
76:1b:2a:a1:c0:2e:fe:6d:e1:d1:43:86:41:15:25:
bd:17:53:c4:ae:4d:2b:b7:a9:86:ac:a0:d1:6d:a8:
3e:a7:18:5f:e2:85:c1:b8:1b:67:9c:c9:23:c5:f8:
c9:38:a9:09:0b:db:ec:8c:43:72:b3:8a:a8:bd:96:
f7:c5:1f:66:a4:17:ed:e9:84:74:33:dd:42:7c:3a:
74:c5:0d:de:3c:2e:f7:81:0b:ad:8b:7a:8c:62:bf:
c1:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:F9:58:C8:A3:63:35:49:2A:29:E9:57:F3:22:DF:C5:22:B9:1D:80
X509v3 Authority Key Identifier:
keyid:5F:D3:D7:22:E0:42:41:7A:72:CD:74:40:C4:7E:3C:47:6D:A2:DA:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8669f75329643f51ee734f5266f76ad26961b120.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d2c7834f-d9fb-4602-a19d-ebc045750344/f942fd5dc09be47a6aec372f983a5e822d7b5ad8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/d2c7834f-d9fb-4602-a19d-ebc045750344/8669f75329643f51ee734f5266f76ad26961b120.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.189.148.0/22
Signature Algorithm: sha256WithRSAEncryption
28:70:83:aa:cf:e5:07:82:9f:42:86:d1:d5:a7:e0:dc:bd:75:
a3:7d:f5:48:60:a7:d8:72:ef:c6:f8:10:e6:68:87:88:70:87:
28:85:d5:2c:1d:88:1b:0b:86:dd:89:d8:cd:de:26:68:6b:36:
ce:12:82:a7:58:a8:06:c1:97:5b:e4:5f:ff:dd:7f:4f:f2:7b:
d7:2e:c9:20:22:87:c7:92:ff:d0:b0:6b:ce:1c:e6:9b:ed:60:
8c:42:06:29:0f:94:f7:83:f7:39:7d:7e:6a:56:bc:e0:42:2b:
49:68:be:02:20:f5:fa:d2:b9:ff:cd:b7:1e:00:45:da:01:66:
25:ee:bd:2f:16:39:24:df:5c:4f:96:e8:00:5a:44:30:ab:af:
04:de:bc:f1:d0:f0:51:92:19:6c:e4:88:a4:7a:83:49:f0:3c:
ce:0f:74:da:b0:bf:22:16:0c:11:9c:1e:53:09:32:2d:a8:e2:
31:8d:38:2f:bc:4c:41:20:2a:08:b4:ac:c6:a3:02:4b:88:74:
2e:44:2e:29:82:2c:1c:50:58:f3:12:d4:03:29:78:a8:d2:bf:
10:74:a9:61:ac:aa:3c:ad:b3:bd:e2:b5:3c:f8:6c:7b:08:cd:
ef:42:44:b4:b8:e1:1b:d7:bb:23:c7:6f:f1:79:cb:c3:21:40:
d5:a9:dd:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:35 2024 by rpki-client on console-ams.rpki-client.org