Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d47b7104-4089-4a18-9345-2a7514ab534a/6016c2a67bce0c90935de1a443a03f26c4594971.roa
File: 6016c2a67bce0c90935de1a443a03f26c4594971.roa (raw, json)
Hash identifier: 4PYFVWF0vtRM7O3LqgorqGyTcc17YlXlY0SmaBNWj4s=
Subject key identifier: A8:0B:A7:8A:F3:DF:69:B1:4B:DF:EF:12:B9:4D:CA:33:FB:AB:47:EB
Certificate issuer: /CN=dd0af7b6e3a89703bf69f14c87e734e6e57b2b98
Certificate serial: 1F2876
Authority key identifier: 04:6A:4C:3C:87:8A:D1:A8:AA:46:E0:62:E3:55:44:96:1D:1A:CA:3B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dd0af7b6e3a89703bf69f14c87e734e6e57b2b98.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/d47b7104-4089-4a18-9345-2a7514ab534a/6016c2a67bce0c90935de1a443a03f26c4594971.roa
Signing time: Fri 24 Mar 2023 08:30:42 +0000
ROA not before: Thu 23 Mar 2023 08:30:42 +0000
ROA not after: Sat 22 Mar 2025 08:30:42 +0000
asID: 266771
IP address blocks: 45.232.176.0/24 maxlen: 24
45.232.177.0/24 maxlen: 24
45.232.178.0/24 maxlen: 24
45.232.179.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2041974 (0x1f2876)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd0af7b6e3a89703bf69f14c87e734e6e57b2b98
Validity
Not Before: Mar 23 08:30:42 2023 GMT
Not After : Mar 22 08:30:42 2025 GMT
Subject: CN=6016c2a67bce0c90935de1a443a03f26c4594971
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:9b:78:4f:27:c0:ce:5b:aa:b5:51:3a:a8:0c:
62:8f:43:4f:ec:eb:22:3f:83:1b:f9:e1:85:3b:c6:
2e:b1:0b:fe:dd:86:60:ce:23:49:45:87:0f:1b:c4:
0a:da:6c:10:90:39:9e:c0:ea:a0:97:48:62:d1:fa:
26:f2:4c:48:2b:78:3a:d5:df:80:cc:b0:00:52:16:
2f:88:1f:a9:89:77:42:39:a7:97:7a:7c:54:49:5f:
c4:c7:ee:2f:db:ea:63:2b:1f:76:ef:7f:7b:d7:b9:
d6:92:87:3e:da:a2:a4:2c:0f:cf:4f:85:0c:da:3f:
fd:b6:c6:da:93:6f:4d:ff:94:7d:82:e8:27:d8:4f:
c6:b5:2d:c5:87:0a:1d:4b:98:b7:8e:e4:fc:f8:92:
86:52:fe:6a:df:b0:3e:83:36:09:ce:50:e4:fb:1b:
07:ae:ba:4c:24:e8:9d:c4:af:c1:0c:77:dc:93:30:
6c:5a:92:07:a5:6e:62:10:e0:9f:94:8e:c6:ef:7e:
e1:2d:75:37:8e:32:da:9c:e7:7a:c1:8d:7e:f5:a8:
64:83:da:9d:24:d4:42:ec:9b:5c:c1:e1:35:5f:42:
9d:52:1a:f1:21:40:0e:ca:7f:33:0e:59:c4:94:8f:
ab:14:d0:6c:2e:1e:7c:1b:c6:0f:fb:4e:e5:30:6a:
12:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:0B:A7:8A:F3:DF:69:B1:4B:DF:EF:12:B9:4D:CA:33:FB:AB:47:EB
X509v3 Authority Key Identifier:
keyid:04:6A:4C:3C:87:8A:D1:A8:AA:46:E0:62:E3:55:44:96:1D:1A:CA:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dd0af7b6e3a89703bf69f14c87e734e6e57b2b98.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d47b7104-4089-4a18-9345-2a7514ab534a/6016c2a67bce0c90935de1a443a03f26c4594971.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/d47b7104-4089-4a18-9345-2a7514ab534a/dd0af7b6e3a89703bf69f14c87e734e6e57b2b98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.232.176.0/22
Signature Algorithm: sha256WithRSAEncryption
57:ab:19:1c:a4:0b:a7:f8:f4:50:36:55:a9:26:ed:d1:50:a8:
d0:00:dc:18:88:e1:df:85:2f:d1:a4:bf:20:eb:4e:13:c4:c8:
5e:33:6c:1f:cb:f9:28:d5:13:4d:6c:f0:ed:06:c0:ea:99:55:
91:0e:19:5c:81:30:17:9d:97:62:60:e4:dd:44:d7:a9:ce:b1:
57:3c:e5:40:00:93:fa:66:b8:de:0b:86:65:80:8e:3a:ef:54:
4a:03:7c:a6:c2:e1:93:cb:c2:16:9d:b6:a9:5a:fc:1c:55:64:
2e:9f:c7:90:85:7c:9d:71:e0:17:6d:72:36:03:d7:fc:1d:21:
c8:c7:a7:83:59:06:11:f2:ab:08:f3:ff:6c:5b:85:57:9d:cc:
10:31:be:26:45:39:f2:cd:88:b4:c7:cd:fa:05:fa:0d:d6:0b:
26:68:fc:a2:e3:6f:aa:07:19:67:3e:0d:16:a0:a3:43:4d:73:
83:aa:d0:59:27:43:f8:ab:9f:2f:fd:ad:bf:f0:70:4d:bb:f1:
2c:af:a5:ec:59:17:c3:ab:0f:78:48:5e:cd:d1:34:f5:5b:20:
f6:16:2e:07:97:27:b3:b4:75:14:6a:14:47:8a:7d:ea:d9:8d:
18:62:44:94:e7:ce:ba:40:ba:c4:a8:57:54:b1:19:8e:fe:5e:
24:1d:2d:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:35 2024 by rpki-client on console-ams.rpki-client.org