Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d47b7104-4089-4a18-9345-2a7514ab534a/de288cc10a437ddfb255f8be62d2707f8a6b26f6.roa
File: de288cc10a437ddfb255f8be62d2707f8a6b26f6.roa (raw, json)
Hash identifier: FSSeKmjGbdo6bCwzgv/jVNXVICYKH5US5/z1Sa7U48c=
Subject key identifier: 2D:A5:11:3E:86:21:A8:FE:C5:6E:B4:B4:63:A5:B1:84:B9:B5:B2:57
Certificate issuer: /CN=dd0af7b6e3a89703bf69f14c87e734e6e57b2b98
Certificate serial: 26476C
Authority key identifier: 04:6A:4C:3C:87:8A:D1:A8:AA:46:E0:62:E3:55:44:96:1D:1A:CA:3B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dd0af7b6e3a89703bf69f14c87e734e6e57b2b98.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/d47b7104-4089-4a18-9345-2a7514ab534a/de288cc10a437ddfb255f8be62d2707f8a6b26f6.roa
Signing time: Thu 04 Jan 2024 14:59:44 +0000
ROA not before: Sun 16 Apr 2023 03:00:00 +0000
ROA not after: Thu 17 Apr 2025 03:00:00 +0000
asID: 266771
IP address blocks: 45.232.176.0/24 maxlen: 24
45.232.177.0/24 maxlen: 24
45.232.178.0/24 maxlen: 24
45.232.179.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2508652 (0x26476c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd0af7b6e3a89703bf69f14c87e734e6e57b2b98
Validity
Not Before: Apr 16 03:00:00 2023 GMT
Not After : Apr 17 03:00:00 2025 GMT
Subject: CN=de288cc10a437ddfb255f8be62d2707f8a6b26f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:0b:6c:c6:a5:a8:22:6e:24:83:97:00:93:de:
b0:43:95:fc:da:2a:f2:7e:2f:3a:1e:df:2f:24:8f:
7b:0e:f8:07:8e:76:04:77:1c:ca:ff:4a:56:73:1d:
82:81:65:8a:48:e8:fb:e9:7e:c7:7b:d6:56:6a:60:
0c:f1:e7:de:ad:60:be:93:35:52:1a:b3:57:31:c3:
09:fb:d1:5c:ad:c8:ee:32:35:a5:23:94:86:d3:1e:
b4:74:91:d0:9e:ef:7b:5c:41:6a:c3:4c:70:84:c0:
9a:11:34:90:f9:ff:2c:1d:c7:30:3b:a2:84:77:b8:
14:3f:2d:4c:00:66:7a:1f:13:61:4c:48:7a:2e:47:
7e:58:9e:b6:27:8d:f2:12:2e:44:a8:05:28:7f:81:
22:df:29:87:fd:72:1e:60:e7:a6:31:3b:5c:eb:63:
5d:20:b4:c0:95:90:23:33:ec:fb:85:b1:e0:f0:97:
5f:69:8c:ab:f4:d6:d6:5b:25:f6:2b:3a:ed:0c:96:
3a:0a:35:7f:9f:da:63:45:95:ae:13:e8:56:6c:c5:
fb:ce:1a:bc:21:ea:1a:a2:26:de:c5:68:69:22:1f:
c7:81:ca:89:99:fc:8c:0d:68:2e:1a:0b:8f:6d:7f:
21:b1:62:7a:7c:fd:5d:c5:15:e8:7f:10:f7:c9:f8:
a7:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:A5:11:3E:86:21:A8:FE:C5:6E:B4:B4:63:A5:B1:84:B9:B5:B2:57
X509v3 Authority Key Identifier:
keyid:04:6A:4C:3C:87:8A:D1:A8:AA:46:E0:62:E3:55:44:96:1D:1A:CA:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dd0af7b6e3a89703bf69f14c87e734e6e57b2b98.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d47b7104-4089-4a18-9345-2a7514ab534a/de288cc10a437ddfb255f8be62d2707f8a6b26f6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/d47b7104-4089-4a18-9345-2a7514ab534a/dd0af7b6e3a89703bf69f14c87e734e6e57b2b98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.232.176.0/22
Signature Algorithm: sha256WithRSAEncryption
86:82:f3:49:dd:7a:fb:2e:99:66:53:9a:cb:25:9d:c4:76:51:
6c:8d:b5:45:69:21:ea:96:3f:67:c4:e0:4d:f6:1a:85:6a:37:
66:97:2a:da:2d:35:98:b6:7f:75:a0:ea:2b:35:d0:cd:fd:18:
85:d3:d3:4a:92:41:21:d0:e0:3b:a1:fc:b3:15:ed:00:af:7e:
1a:42:c0:61:2c:16:3f:e1:d0:55:57:7c:4f:4c:e3:e0:4f:a4:
f1:ad:42:d2:7e:78:78:6d:b6:5a:fc:88:46:ff:81:fb:46:09:
fc:fa:c1:bd:d4:86:07:da:d1:8b:d0:51:a8:40:4b:77:c9:37:
46:d3:bf:d4:cf:8f:ba:27:2b:a4:40:db:bc:3b:a2:00:65:f7:
db:86:a6:1c:69:7b:01:90:a1:f9:f8:5b:a5:23:41:89:37:9a:
0e:c5:70:b4:b5:ed:8f:c0:59:7b:2c:29:80:a7:37:7a:1b:28:
15:f0:77:3d:9b:85:5b:b9:88:ea:50:74:f1:ed:43:59:05:97:
c9:d6:69:2f:a8:e6:20:2a:9e:53:a8:c5:d5:ac:f0:29:c1:2d:
1e:ae:d6:16:df:e2:ef:cd:41:a4:6a:52:82:d5:19:e2:2c:a9:
56:62:37:74:cf:e3:b3:59:d8:39:cc:33:75:6b:e7:37:56:e8:
8c:7e:62:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:48 2024 by rpki-client on console-ams.rpki-client.org