Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d5264185-9235-463a-adc1-4b7fcaf3c2b5/2d25a26e0b38bf6cc6571db9fbfae8c73adbccee.roa
File: 2d25a26e0b38bf6cc6571db9fbfae8c73adbccee.roa (raw, json)
Hash identifier: Go862ldg764Eza/5Iy392OBy3gEN8/6LCqh4e7R+5ws=
Subject key identifier: A2:A5:28:BE:92:06:9D:F5:13:19:D4:72:2E:E0:58:54:3A:D9:65:93
Certificate issuer: /CN=9dd6960f203691336ba50cdef7bcec2cfb628603
Certificate serial: 220278
Authority key identifier: 71:D6:75:E9:58:4C:AA:53:28:75:3D:A0:B0:66:6C:89:50:96:06:08
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9dd6960f203691336ba50cdef7bcec2cfb628603.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/d5264185-9235-463a-adc1-4b7fcaf3c2b5/2d25a26e0b38bf6cc6571db9fbfae8c73adbccee.roa
Signing time: Wed 21 Jun 2023 01:44:31 +0000
ROA not before: Tue 20 Jun 2023 01:44:31 +0000
ROA not after: Sat 21 Jun 2025 01:44:31 +0000
asID: 273001
IP address blocks: 45.65.137.0/24 maxlen: 24
45.65.139.0/24 maxlen: 24
2803:a5c0::/32 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2228856 (0x220278)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dd6960f203691336ba50cdef7bcec2cfb628603
Validity
Not Before: Jun 20 01:44:31 2023 GMT
Not After : Jun 21 01:44:31 2025 GMT
Subject: CN=2d25a26e0b38bf6cc6571db9fbfae8c73adbccee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c1:f7:39:04:fa:4e:98:12:67:3f:8e:95:eb:
0e:27:ba:99:26:02:ba:86:d2:05:7c:98:10:6b:35:
ec:a4:25:a1:3b:5b:98:84:20:b7:85:14:92:55:81:
59:54:ba:f1:93:94:a1:3e:2d:1e:a4:3c:d7:35:9d:
8c:53:44:44:b5:bc:75:6c:20:14:8f:5b:46:c5:f1:
4b:81:c7:a4:57:3a:77:8e:d6:e4:af:f0:93:38:09:
f6:7d:db:3b:09:b8:97:d5:79:73:bc:3c:25:51:62:
50:fd:ea:6f:13:06:6a:92:2e:c6:67:4e:7d:3c:73:
62:b9:4c:c5:b7:dd:85:9f:b5:76:b7:2a:75:13:49:
56:09:8d:08:19:2c:65:ff:11:13:05:b0:c6:db:63:
fc:40:37:cc:6d:e2:4d:80:f8:dc:74:b2:04:27:24:
17:3d:3c:e2:5b:a3:d5:87:7d:a5:b3:f2:05:c7:36:
fe:dc:0a:9e:da:fd:ba:0c:73:99:44:cf:45:1a:c3:
9a:24:96:34:ad:59:96:f3:15:2e:1a:dc:1e:1b:41:
19:58:32:49:3d:99:a0:5c:91:7b:73:2f:50:36:83:
42:53:f2:00:b5:86:4e:ad:ea:1a:42:c3:6d:d3:b2:
a1:64:c7:9a:d1:65:0f:5f:4b:3e:36:9e:96:36:62:
2d:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:A5:28:BE:92:06:9D:F5:13:19:D4:72:2E:E0:58:54:3A:D9:65:93
X509v3 Authority Key Identifier:
keyid:71:D6:75:E9:58:4C:AA:53:28:75:3D:A0:B0:66:6C:89:50:96:06:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9dd6960f203691336ba50cdef7bcec2cfb628603.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d5264185-9235-463a-adc1-4b7fcaf3c2b5/2d25a26e0b38bf6cc6571db9fbfae8c73adbccee.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/d5264185-9235-463a-adc1-4b7fcaf3c2b5/9dd6960f203691336ba50cdef7bcec2cfb628603.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.65.137.0/24
45.65.139.0/24
IPv6:
2803:a5c0::/32
Signature Algorithm: sha256WithRSAEncryption
4b:3d:1e:00:77:cb:62:16:73:0e:30:f7:c6:b2:a0:0e:f1:8b:
7f:82:6f:e2:fc:68:c5:24:34:d9:1a:db:ed:2d:d1:5a:8a:0c:
9c:f5:d7:9c:42:50:d9:d2:09:e5:cd:8a:d6:ae:d0:40:1b:c3:
a0:cc:8d:51:a3:14:9d:25:3f:9a:fe:00:c0:dd:f2:cd:df:24:
31:2c:8f:ad:d6:36:ed:1f:94:c7:9a:fc:6e:41:0c:fa:cc:58:
79:a6:3c:47:08:d5:8d:72:27:37:77:33:cf:a4:36:45:e5:3c:
0b:1f:c3:f8:f4:e4:bf:90:29:25:7f:37:5b:fa:98:cd:52:2d:
04:66:4d:94:79:a1:28:56:81:44:db:44:28:f8:f3:a2:24:25:
d4:8e:4d:b9:e8:1d:54:22:43:e0:7f:d6:c6:74:65:80:22:e7:
a7:86:dd:b1:87:1a:ba:57:11:95:40:c2:91:d3:12:3e:c5:c2:
b8:e6:30:0f:74:49:90:96:38:ad:55:48:81:07:2c:82:7c:fe:
aa:74:1b:4f:5a:b9:2c:30:c2:24:16:0a:8b:1d:7a:f9:fd:a9:
d0:62:d3:af:69:a1:b1:ff:65:23:6d:94:5c:12:61:99:65:a3:
c3:b6:7e:55:2b:8a:93:2b:60:47:1f:c2:c8:5a:ae:0b:a8:7b:
ef:a2:e4:2e
-----BEGIN CERTIFICATE-----
MIIFVTCCBD2gAwIBAgIDIgJ4MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDlk
ZDY5NjBmMjAzNjkxMzM2YmE1MGNkZWY3YmNlYzJjZmI2Mjg2MDMwHhcNMjMwNjIw
MDE0NDMxWhcNMjUwNjIxMDE0NDMxWjAzMTEwLwYDVQQDEygyZDI1YTI2ZTBiMzhi
ZjZjYzY1NzFkYjlmYmZhZThjNzNhZGJjY2VlMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAucH3OQT6TpgSZz+OlesOJ7qZJgK6htIFfJgQazXspCWhO1uY
hCC3hRSSVYFZVLrxk5ShPi0epDzXNZ2MU0REtbx1bCAUj1tGxfFLgcekVzp3jtbk
r/CTOAn2fds7CbiX1XlzvDwlUWJQ/epvEwZqki7GZ059PHNiuUzFt92Fn7V2typ1
E0lWCY0IGSxl/xETBbDG22P8QDfMbeJNgPjcdLIEJyQXPTziW6PVh32ls/IFxzb+
3Aqe2v26DHOZRM9FGsOaJJY0rVmW8xUuGtweG0EZWDJJPZmgXJF7cy9QNoNCU/IA
tYZOreoaQsNt07KhZMea0WUPX0s+Np6WNmItHwIDAQABo4ICcDCCAmwwHQYDVR0O
BBYEFKKlKL6SBp31ExnUci7gWFQ62WWTMB8GA1UdIwQYMBaAFHHWdelYTKpTKHU9
oLBmbIlQlgYIMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvOWRkNjk2
MGYyMDM2OTEzMzZiYTUwY2RlZjdiY2VjMmNmYjYyODYwMy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZDUyNjQxODUtOTIzNS00NjNhLWFkYzEtNGI3ZmNh
ZjNjMmI1LzJkMjVhMjZlMGIzOGJmNmNjNjU3MWRiOWZiZmFlOGM3M2FkYmNjZWUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9kNTI2NDE4NS05MjM1LTQ2M2EtYWRjMS00Yjdm
Y2FmM2MyYjUvOWRkNjk2MGYyMDM2OTEzMzZiYTUwY2RlZjdiY2VjMmNmYjYyODYw
My5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA0BggrBgEFBQcBBwEB/wQl
MCMwEgQCAAEwDAMEAC1BiQMEAC1BizANBAIAAjAHAwUAKAOlwDANBgkqhkiG9w0B
AQsFAAOCAQEASz0eAHfLYhZzDjD3xrKgDvGLf4Jv4vxoxSQ02Rrb7S3RWooMnPXX
nEJQ2dIJ5c2K1q7QQBvDoMyNUaMUnSU/mv4AwN3yzd8kMSyPrdY27R+Ux5r8bkEM
+sxYeaY8RwjVjXInN3czz6Q2ReU8Cx/D+PTkv5ApJX83W/qYzVItBGZNlHmhKFaB
RNtEKPjzoiQl1I5NuegdVCJD4H/WxnRlgCLnp4bdsYcaulcRlUDCkdMSPsXCuOYw
D3RJkJY4rVVIgQcsgnz+qnQbT1q5LDDCJBYKix16+f2p0GLTr2mhsf9lI22UXBJh
mWWjw7Z+VSuKkytgRx/CyFquC6h776LkLg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:35 2024 by rpki-client on console-ams.rpki-client.org