Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d53a6a92-fb74-4e2d-a041-ae98bbcf9033/837fbf28e60138846809692086bb19d8c55fefcd.roa
File: 837fbf28e60138846809692086bb19d8c55fefcd.roa (raw, json)
Hash identifier: BVTh4ecU8i5gGIr7GkmyO35quBZppizraWeJA6+Jm8U=
Subject key identifier: 5F:E8:AB:C0:4F:9A:1B:BA:12:54:E4:62:1C:A4:A9:90:BD:7D:93:F7
Certificate issuer: /CN=ddadb9d544e015937addf6f7bacfb49314bd6944
Certificate serial: 1CE953
Authority key identifier: DB:63:79:4E:47:9E:22:56:88:1F:69:19:6B:73:88:AB:BB:F7:31:5D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ddadb9d544e015937addf6f7bacfb49314bd6944.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/d53a6a92-fb74-4e2d-a041-ae98bbcf9033/837fbf28e60138846809692086bb19d8c55fefcd.roa
Signing time: Mon 08 May 2023 01:02:34 +0000
ROA not before: Sun 07 May 2023 01:02:34 +0000
ROA not after: Thu 08 May 2025 01:02:34 +0000
asID: 265530
IP address blocks: 45.5.52.0/22 maxlen: 24
2806:28e::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1894739 (0x1ce953)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddadb9d544e015937addf6f7bacfb49314bd6944
Validity
Not Before: May 7 01:02:34 2023 GMT
Not After : May 8 01:02:34 2025 GMT
Subject: CN=837fbf28e60138846809692086bb19d8c55fefcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:4c:05:b1:d5:80:16:b3:9d:90:67:ce:2d:b6:
0a:fa:bb:55:76:76:dc:96:13:22:4c:bd:4f:f5:b6:
52:73:62:e6:9c:ec:e6:53:05:eb:29:c7:ae:45:ba:
4f:4d:2e:56:04:b8:7f:0b:f2:fd:5b:b7:cc:1f:45:
c7:55:00:1f:ec:ea:b6:55:5c:5f:97:51:7e:f1:37:
7a:a6:5e:8a:82:f3:eb:a2:66:a8:40:c9:59:a2:80:
cc:03:1f:c7:c7:10:14:2e:e4:39:d2:8a:fa:bf:37:
7a:c5:0d:09:b2:24:63:29:db:e9:50:ba:24:8a:5f:
44:d4:44:f9:7d:9d:da:5c:30:f3:2d:a2:5b:41:03:
64:1c:69:fb:82:c9:8c:c0:d5:a1:e5:a5:f1:c1:2f:
c1:4f:55:6f:42:bc:2f:1e:91:a6:1f:0b:e1:7c:28:
74:38:f1:9f:ec:9a:ad:9d:e2:5d:82:31:f1:c8:aa:
7c:ab:d9:69:b7:97:28:c4:10:d4:fa:3d:72:bd:78:
0a:e3:4d:55:4c:b1:47:6a:a7:b2:18:78:d3:34:46:
af:da:2d:a1:7e:cd:d8:98:0a:16:a5:fd:10:fd:ca:
00:32:1b:69:69:f7:f2:b9:f4:30:56:8c:94:86:ed:
46:23:62:9a:05:4b:3d:bc:d8:d4:59:66:50:09:4a:
8d:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:E8:AB:C0:4F:9A:1B:BA:12:54:E4:62:1C:A4:A9:90:BD:7D:93:F7
X509v3 Authority Key Identifier:
keyid:DB:63:79:4E:47:9E:22:56:88:1F:69:19:6B:73:88:AB:BB:F7:31:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ddadb9d544e015937addf6f7bacfb49314bd6944.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d53a6a92-fb74-4e2d-a041-ae98bbcf9033/837fbf28e60138846809692086bb19d8c55fefcd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/d53a6a92-fb74-4e2d-a041-ae98bbcf9033/ddadb9d544e015937addf6f7bacfb49314bd6944.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.5.52.0/22
IPv6:
2806:28e::/32
Signature Algorithm: sha256WithRSAEncryption
0b:55:0f:af:37:6f:7c:59:94:9d:13:3c:06:cc:1e:08:96:6e:
12:51:67:2f:bb:c5:99:fc:85:51:10:50:9d:8d:8f:dc:2a:83:
16:e8:92:e9:22:1d:b9:3d:62:72:ca:80:92:37:61:a3:69:f2:
21:88:a2:45:2b:9e:83:17:de:66:3a:de:80:e9:5f:d4:c1:6c:
7c:6d:49:fb:b6:0a:77:dc:7f:39:33:c5:46:30:91:8b:36:5f:
e0:90:03:8f:19:0e:15:09:12:78:b8:10:6c:d8:27:77:4e:96:
ff:15:dd:3e:02:60:d8:4c:ca:fa:30:e4:a1:80:0f:4c:c3:74:
03:28:fb:1c:78:f8:93:c6:de:4c:1e:ee:75:97:ae:32:7c:98:
5d:7f:b9:c7:87:27:2d:e6:8b:a4:8b:ba:68:cd:c6:c6:5c:f0:
d9:af:0b:b9:66:bf:a8:5d:44:17:31:aa:2b:e2:28:2a:2b:b5:
e3:e2:e2:99:c8:20:e2:2f:76:24:30:c0:7a:9a:bb:fd:5e:a5:
33:e0:c3:58:7e:3b:07:e7:40:73:b6:78:cd:4e:85:f8:31:1c:
88:56:99:64:f3:13:d9:0e:c0:41:45:e6:8b:e8:d2:78:1f:00:
a0:a0:dd:58:9b:53:bc:57:5c:c1:43:01:21:74:59:c3:36:9b:
b7:96:28:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:08 2024 by rpki-client on console-fra.rpki-client.org