Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d63272f3-6db6-4333-b950-15c17bf3382a/4ec5c2a0bac4937ff94438a4c3ff32a9383a8d1c.roa
File: 4ec5c2a0bac4937ff94438a4c3ff32a9383a8d1c.roa (raw, json)
Hash identifier: I5fLsdg+iF23eo8C4cIg3s5P45sVj5+d5MCijRO/ukw=
Subject key identifier: 2C:8B:36:D3:06:77:53:BC:3C:1A:32:FA:FD:9D:ED:25:46:2B:E1:45
Certificate issuer: /CN=f636851443b2f7396ed85156f5c70cbcfa4debd5
Certificate serial: 248115
Authority key identifier: 52:BC:7B:8C:C8:D3:91:E2:24:05:1C:BB:CB:C4:E1:7A:60:86:38:E4
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f636851443b2f7396ed85156f5c70cbcfa4debd5.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/d63272f3-6db6-4333-b950-15c17bf3382a/4ec5c2a0bac4937ff94438a4c3ff32a9383a8d1c.roa
Signing time: Fri 13 Oct 2023 08:30:01 +0000
ROA not before: Thu 12 Oct 2023 08:30:01 +0000
ROA not after: Sat 11 Oct 2025 08:30:01 +0000
asID: 269799
IP address blocks: 45.233.103.0/24 maxlen: 24
2803:a0a0:900::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2392341 (0x248115)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f636851443b2f7396ed85156f5c70cbcfa4debd5
Validity
Not Before: Oct 12 08:30:01 2023 GMT
Not After : Oct 11 08:30:01 2025 GMT
Subject: CN=4ec5c2a0bac4937ff94438a4c3ff32a9383a8d1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:38:00:7e:5b:ed:c1:c8:07:c8:f3:a0:35:41:
93:9a:0d:60:92:b5:47:5d:5e:2d:1a:25:f7:61:28:
14:ba:09:af:2a:fa:67:a6:a1:d6:ce:59:48:f4:71:
c5:30:a1:af:c9:10:d4:b8:bd:ab:a2:68:3b:ec:70:
2f:75:2a:c1:0e:86:9b:63:fa:df:ca:9f:95:bc:1b:
c4:ce:5f:f7:08:35:e3:5b:1f:15:bd:c0:a4:78:2c:
6c:d1:c0:8a:7e:b0:06:25:d8:f7:15:b2:09:c9:94:
f9:9e:14:8c:03:9d:9c:21:ac:a5:0c:e4:82:e4:cc:
2b:7e:dd:8f:8b:da:38:53:a1:3d:ae:5f:95:7d:c9:
86:03:1d:03:1a:2a:a0:e4:42:fb:68:d1:5c:b5:25:
4b:a3:0c:d4:43:c7:79:02:52:dd:5a:4c:1e:a2:e2:
69:22:81:48:db:6b:94:7d:5e:48:9b:38:f4:93:56:
34:31:3a:19:96:5c:09:b8:7d:57:c8:37:45:ff:00:
cd:0d:12:12:6e:2a:75:c9:30:af:93:05:3a:91:5e:
d7:d2:0f:42:e0:28:b4:86:9e:f9:12:55:9f:df:8b:
a5:a9:a2:a7:6e:6d:c5:41:79:f9:00:0e:9e:66:95:
87:9b:f3:07:3e:7d:1d:a5:2e:dc:d3:ea:7f:75:c3:
f0:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:8B:36:D3:06:77:53:BC:3C:1A:32:FA:FD:9D:ED:25:46:2B:E1:45
X509v3 Authority Key Identifier:
keyid:52:BC:7B:8C:C8:D3:91:E2:24:05:1C:BB:CB:C4:E1:7A:60:86:38:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f636851443b2f7396ed85156f5c70cbcfa4debd5.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d63272f3-6db6-4333-b950-15c17bf3382a/4ec5c2a0bac4937ff94438a4c3ff32a9383a8d1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/d63272f3-6db6-4333-b950-15c17bf3382a/f636851443b2f7396ed85156f5c70cbcfa4debd5.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.233.103.0/24
IPv6:
2803:a0a0:900::/40
Signature Algorithm: sha256WithRSAEncryption
71:e7:cf:78:a3:49:55:38:22:c9:1a:5d:16:2f:6b:48:e5:af:
21:fb:64:7a:11:7f:bf:b5:81:3d:89:87:77:64:3a:78:54:ef:
7c:f6:33:8e:b3:f1:99:eb:95:60:82:b6:42:96:24:62:88:7f:
de:1c:e0:ce:86:0d:e5:e9:eb:40:b5:ed:7f:1d:c2:8c:44:b0:
a4:97:ba:8d:2b:2e:3e:99:9b:20:9a:69:a6:ba:69:c8:47:7a:
23:6b:c2:7b:a5:50:b8:95:53:ce:31:b1:9d:65:22:1c:55:16:
f0:31:60:d1:7b:3e:fa:7c:69:91:d0:97:e4:02:78:c7:b6:b9:
f3:54:e1:17:bf:28:97:6d:aa:ef:63:d9:e8:3c:2d:db:7e:d0:
d8:ba:ff:43:ea:54:c2:f0:82:74:1a:f5:cb:6d:7b:0b:17:87:
72:c4:b5:54:34:9b:17:3b:ef:2b:3c:c7:83:61:15:a4:4e:9f:
40:03:3d:c0:59:45:de:a3:d8:4b:23:60:d5:95:93:e6:3b:a4:
3b:d4:1a:75:3e:70:03:9f:8d:64:04:8a:ac:dd:0c:bc:c1:69:
fa:78:89:9d:28:f8:63:b2:87:72:27:f8:2c:79:a3:1e:7e:9d:
0f:9b:a2:a8:ea:4d:87:53:64:0a:da:f7:b1:bf:e9:8e:11:d2:
8f:52:8b:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:08 2024 by rpki-client on console-fra.rpki-client.org