Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d78a35fb-1e0f-4747-9169-b276193dbb59/e457049aacd6d455bf23166d5fdaefc0738822e1.roa
File: e457049aacd6d455bf23166d5fdaefc0738822e1.roa (raw, json)
Hash identifier: jVFMmajgnvJjHSTGyXOtS8COehtvg174azHQXeSjFyU=
Subject key identifier: 1A:E2:EA:44:DF:1C:66:04:78:8D:27:EE:5D:05:E2:F1:2C:6E:C3:00
Certificate issuer: /CN=5cf8ea952842bcf0937dda38dd1208e1ee0e5462
Certificate serial: 20CD64
Authority key identifier: 50:7D:62:82:12:BB:02:A0:9E:1F:A3:CB:24:60:BF:B2:C2:24:9B:80
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5cf8ea952842bcf0937dda38dd1208e1ee0e5462.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/d78a35fb-1e0f-4747-9169-b276193dbb59/e457049aacd6d455bf23166d5fdaefc0738822e1.roa
Signing time: Fri 07 Jul 2023 20:35:32 +0000
ROA not before: Thu 06 Jul 2023 20:35:32 +0000
ROA not after: Mon 07 Jul 2025 20:35:32 +0000
asID: 267685
IP address blocks: 160.20.225.0/24 maxlen: 26
45.163.18.0/23 maxlen: 25
2803:3ea0::/32 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2149732 (0x20cd64)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cf8ea952842bcf0937dda38dd1208e1ee0e5462
Validity
Not Before: Jul 6 20:35:32 2023 GMT
Not After : Jul 7 20:35:32 2025 GMT
Subject: CN=e457049aacd6d455bf23166d5fdaefc0738822e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:3f:69:b3:6d:f2:84:47:62:41:2c:05:82:cf:
32:71:db:dd:98:84:ae:bb:9b:bf:0f:26:f4:94:03:
a6:fc:a3:94:10:c7:94:be:35:90:22:be:63:58:51:
cf:f5:37:45:e4:25:26:b8:65:ca:17:ee:c8:a6:49:
25:a0:54:e2:53:fc:a3:26:19:f8:a0:b0:6e:2f:55:
7f:b7:48:b6:f5:4f:11:f3:80:f0:6e:bf:f6:eb:3a:
20:48:5d:65:4d:88:e3:f6:88:70:b2:21:36:fb:fe:
a7:6f:8e:26:97:84:02:22:46:c6:66:c0:d4:d5:2c:
ad:b6:34:53:d6:2f:d9:6f:d8:64:1c:bb:c4:5c:f9:
6e:29:45:fd:8c:8f:63:8a:0b:c1:9c:fb:3a:55:7f:
d6:1a:86:07:fd:a3:c8:6d:bd:9b:fb:3e:57:89:ce:
b1:65:83:94:ac:1a:66:a8:c0:39:08:73:07:c5:7b:
8b:de:64:dd:72:5b:b4:4a:12:e5:9a:b5:57:db:2e:
b1:7f:94:27:cd:da:71:e7:f4:51:8a:ea:06:03:11:
ee:09:26:ba:25:72:d6:db:57:bb:d8:71:a9:ec:5a:
de:3b:01:8a:4f:d5:18:82:cb:1c:be:27:58:28:6e:
72:3e:1d:45:6f:2e:29:fe:b9:11:5c:0a:f9:4e:d0:
ef:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:E2:EA:44:DF:1C:66:04:78:8D:27:EE:5D:05:E2:F1:2C:6E:C3:00
X509v3 Authority Key Identifier:
keyid:50:7D:62:82:12:BB:02:A0:9E:1F:A3:CB:24:60:BF:B2:C2:24:9B:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5cf8ea952842bcf0937dda38dd1208e1ee0e5462.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d78a35fb-1e0f-4747-9169-b276193dbb59/e457049aacd6d455bf23166d5fdaefc0738822e1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/d78a35fb-1e0f-4747-9169-b276193dbb59/5cf8ea952842bcf0937dda38dd1208e1ee0e5462.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.163.18.0/23
160.20.225.0/24
IPv6:
2803:3ea0::/32
Signature Algorithm: sha256WithRSAEncryption
30:71:d2:e1:8d:e7:72:2a:da:b1:c6:d5:55:fb:f6:af:ab:a9:
b0:f3:95:6a:21:1a:9c:00:d0:3c:10:ca:a8:ff:20:d0:39:c3:
ed:35:a7:92:4a:15:e6:b6:0f:b6:eb:d6:09:72:82:8e:d2:a6:
de:a1:2a:e6:41:f0:8c:84:ca:25:ce:f1:96:7e:76:77:cf:4d:
35:f4:22:c5:10:d6:fc:88:f7:b9:45:67:ec:ad:22:c7:85:33:
69:1f:0e:f6:72:9a:fa:f6:6b:50:8b:43:bf:a4:76:2c:21:ac:
74:a5:91:fd:18:b3:64:5f:4a:78:ec:e0:d6:81:ac:bb:ea:5a:
e3:7f:bc:37:59:ca:57:44:a2:ca:41:36:39:ed:a1:cf:a2:67:
65:ad:f1:15:13:68:59:f3:64:4a:7a:55:b4:dd:86:43:d8:98:
65:a8:bf:06:d4:5c:f7:a9:7c:35:09:f0:92:1b:a3:7f:4e:fd:
ac:b5:b1:d2:81:bc:ec:a1:e7:d9:61:94:e0:ae:e1:51:f4:1d:
68:a1:89:be:92:9f:9f:93:22:b3:c3:b9:b8:4a:4d:1d:a0:2d:
78:1c:57:cb:83:30:91:44:64:f9:2a:01:bd:00:be:6b:8c:99:
27:3b:ac:39:b2:5c:0c:b2:1c:7b:7a:b3:3f:b5:40:83:6c:75:
ca:3c:bd:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:48 2024 by rpki-client on console-ams.rpki-client.org