Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d5264185-9235-463a-adc1-4b7fcaf3c2b5/9a7431521c5f306404f45930a1bd130f62c6c855.roa
File: 9a7431521c5f306404f45930a1bd130f62c6c855.roa (raw, json)
Hash identifier: c0MJi4K3SwG4mIvLrJqC5mOk/yI/kA+pQNC5uXyjZHY=
Subject key identifier: 90:0C:4D:E8:74:65:48:68:19:B7:45:06:C9:8C:D0:AF:34:7E:A3:1A
Certificate issuer: /CN=9dd6960f203691336ba50cdef7bcec2cfb628603
Certificate serial: 21FE59
Authority key identifier: 71:D6:75:E9:58:4C:AA:53:28:75:3D:A0:B0:66:6C:89:50:96:06:08
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9dd6960f203691336ba50cdef7bcec2cfb628603.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/d5264185-9235-463a-adc1-4b7fcaf3c2b5/9a7431521c5f306404f45930a1bd130f62c6c855.roa
Signing time: Wed 21 Jun 2023 01:44:29 +0000
ROA not before: Tue 20 Jun 2023 01:44:29 +0000
ROA not after: Sat 21 Jun 2025 01:44:29 +0000
asID: 273001
IP address blocks: 45.65.136.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2227801 (0x21fe59)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dd6960f203691336ba50cdef7bcec2cfb628603
Validity
Not Before: Jun 20 01:44:29 2023 GMT
Not After : Jun 21 01:44:29 2025 GMT
Subject: CN=9a7431521c5f306404f45930a1bd130f62c6c855
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:99:74:19:12:9b:16:86:2d:f2:0b:07:4c:99:
af:43:fb:4a:0a:81:a7:34:68:ea:da:30:b2:17:e4:
52:c1:6d:ce:26:42:0a:fa:42:83:ab:f2:5c:f2:47:
5e:d3:9c:1c:23:75:79:8b:91:e7:1d:d9:ce:85:a4:
49:cb:e0:fa:3e:b1:65:8e:6a:19:a7:41:57:92:62:
b4:4b:54:46:33:9b:75:97:cd:eb:0a:7d:13:ad:00:
63:e2:af:bf:5d:b3:3e:fa:3d:6d:3e:6a:bc:20:ca:
4f:63:5a:65:8b:95:91:87:d3:da:71:1d:dc:36:f8:
23:3a:b2:aa:47:b8:24:e5:76:f6:ca:7d:40:98:d8:
cc:e3:94:12:b8:be:9e:fb:68:af:da:55:21:d8:b1:
0c:65:4d:ca:22:72:e5:e8:5f:ca:06:99:cb:f6:ea:
33:4b:64:ad:87:fd:b7:96:c3:ee:62:b9:7a:10:1d:
ea:6c:0b:33:0d:18:1e:a3:fb:84:5e:15:40:53:f6:
a6:d7:ab:54:c7:74:50:a8:bd:f5:1b:1c:6f:30:c0:
11:d6:4d:bb:1a:b5:be:09:2d:34:22:bc:25:e9:61:
eb:c8:1a:68:77:6d:07:aa:bd:89:12:eb:ce:00:76:
c3:5e:8a:31:7c:e7:08:31:fc:27:ac:b0:16:21:01:
7d:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:0C:4D:E8:74:65:48:68:19:B7:45:06:C9:8C:D0:AF:34:7E:A3:1A
X509v3 Authority Key Identifier:
keyid:71:D6:75:E9:58:4C:AA:53:28:75:3D:A0:B0:66:6C:89:50:96:06:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9dd6960f203691336ba50cdef7bcec2cfb628603.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d5264185-9235-463a-adc1-4b7fcaf3c2b5/9a7431521c5f306404f45930a1bd130f62c6c855.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/d5264185-9235-463a-adc1-4b7fcaf3c2b5/9dd6960f203691336ba50cdef7bcec2cfb628603.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.65.136.0/24
Signature Algorithm: sha256WithRSAEncryption
25:cb:90:a9:15:07:85:02:c0:a8:80:92:90:ff:d4:0a:00:d2:
0a:b8:9b:c8:12:d4:ad:b1:46:51:f6:a8:ce:53:bc:ce:1a:f5:
c3:9d:cb:60:d5:51:da:f4:a5:73:7c:9f:1f:14:32:b1:30:7a:
cd:c7:69:cb:3d:ef:7f:82:3e:1a:9e:de:d9:c2:1a:29:cd:d5:
0d:e5:a0:aa:b5:d9:ca:05:84:32:41:90:84:f0:ef:e6:47:b0:
db:2b:04:7f:54:37:fc:7e:dc:ae:f2:24:9e:30:58:81:b5:5a:
2b:c5:fe:21:90:38:a6:5f:01:f7:ac:bf:d8:e3:ff:ed:2f:f1:
bf:64:21:7e:72:d8:73:92:ad:e2:95:01:dd:fb:9f:66:4d:70:
14:65:56:5d:3d:ce:9b:42:ac:65:89:33:0c:41:68:c6:07:28:
45:38:2f:e3:25:8e:1c:f6:c8:c5:10:92:a6:fb:1a:50:e7:e5:
d5:2e:6d:60:a4:0a:d6:8f:25:43:75:e4:a7:a3:7c:ac:ac:6a:
4d:b0:6d:ca:f2:7e:2b:e4:3c:74:f4:b6:cc:a3:e3:10:cd:28:
f3:c9:90:9e:22:9a:38:d1:e0:c7:5e:eb:38:da:53:5b:81:b3:
49:08:e9:48:ed:51:38:ac:be:17:7c:50:46:9a:6a:b6:23:b7:
fa:51:88:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:48 2024 by rpki-client on console-ams.rpki-client.org