Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d80d847a-9743-4310-92de-896eec4ed18b/65cdffcc5354d6d8cf45ae6260bb38764e581529.roa
File: 65cdffcc5354d6d8cf45ae6260bb38764e581529.roa (raw, json)
Hash identifier: Bshzmz4P45y7blfXnc5b8UTID4GXV/4N/+coGJPyRWw=
Subject key identifier: FD:BD:07:23:B1:60:C6:16:DC:2F:04:72:D9:D2:71:2A:71:9C:75:4D
Certificate issuer: /CN=a2f5abf58c957a2bfcf51b30227c2c814dce93e0
Certificate serial: 24BE5E
Authority key identifier: B5:30:E3:C7:88:9B:B3:9E:2E:C3:55:6C:A0:36:10:01:7A:E3:A5:56
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a2f5abf58c957a2bfcf51b30227c2c814dce93e0.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/d80d847a-9743-4310-92de-896eec4ed18b/65cdffcc5354d6d8cf45ae6260bb38764e581529.roa
Signing time: Mon 06 Nov 2023 17:29:32 +0000
ROA not before: Mon 06 Nov 2023 17:29:32 +0000
ROA not after: Thu 06 Nov 2025 17:29:32 +0000
asID: 263725
IP address blocks: 45.166.93.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2408030 (0x24be5e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2f5abf58c957a2bfcf51b30227c2c814dce93e0
Validity
Not Before: Nov 6 17:29:32 2023 GMT
Not After : Nov 6 17:29:32 2025 GMT
Subject: CN=65cdffcc5354d6d8cf45ae6260bb38764e581529
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:9a:93:1a:88:eb:0c:ca:47:59:44:46:2b:d0:
81:df:a7:cf:a4:ca:b4:c7:6f:b1:7a:c2:32:42:22:
84:65:4d:c0:6e:46:c3:b6:82:47:8f:82:cb:d8:3d:
8a:4d:00:d1:e4:09:b7:5a:59:00:0e:a6:26:49:0e:
87:d2:e1:9d:78:be:d9:08:69:8e:fa:d9:42:1e:72:
cd:3b:ff:2a:6b:68:b8:e6:0c:78:98:b0:a3:7f:c7:
a5:d2:36:33:d1:0a:5c:3c:92:fd:3c:b5:25:9a:15:
e3:c3:d0:e2:28:a9:6a:26:ff:b9:99:b7:27:95:b5:
5f:ee:f0:7e:2e:c6:29:f7:d9:35:4e:70:a8:3b:b8:
51:f7:e3:5b:c4:96:af:7f:7e:44:d5:11:0f:65:ab:
e5:8f:53:d7:1d:b6:4d:9c:d3:d5:0d:c0:f8:b4:d5:
f1:eb:bc:9e:c8:55:d7:7b:95:e1:d5:5a:9e:01:57:
e7:02:53:78:18:55:62:c6:cc:fc:dd:23:8e:9f:84:
4c:08:ba:1b:6e:63:61:08:2e:c0:00:d8:2b:45:e8:
96:3f:94:cf:40:be:29:49:a7:14:56:cb:89:e6:93:
a9:8f:34:91:d2:81:01:a4:d7:b6:c3:16:c9:67:e1:
3c:06:e9:24:5f:bb:b2:53:4f:65:c5:7e:f7:0b:d7:
4e:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:BD:07:23:B1:60:C6:16:DC:2F:04:72:D9:D2:71:2A:71:9C:75:4D
X509v3 Authority Key Identifier:
keyid:B5:30:E3:C7:88:9B:B3:9E:2E:C3:55:6C:A0:36:10:01:7A:E3:A5:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a2f5abf58c957a2bfcf51b30227c2c814dce93e0.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d80d847a-9743-4310-92de-896eec4ed18b/65cdffcc5354d6d8cf45ae6260bb38764e581529.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/d80d847a-9743-4310-92de-896eec4ed18b/a2f5abf58c957a2bfcf51b30227c2c814dce93e0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.166.93.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:59:07:c9:15:a8:9c:8c:a1:1a:23:47:e7:1b:df:34:fa:c5:
87:56:bf:2b:ca:9b:93:df:13:7d:7b:a2:e0:70:7c:b0:48:8d:
84:fe:e4:da:15:ad:ae:1f:ee:75:b0:a6:51:33:3f:a0:e8:06:
34:4f:e9:ee:ef:34:fa:9c:ec:ac:b3:cf:9d:0d:d9:9d:fa:9d:
d6:6c:27:1f:02:56:ec:94:c5:21:0d:52:cf:30:9d:ed:be:f4:
13:b5:b2:c9:39:38:0f:eb:28:d2:28:c7:ee:bb:60:7b:d6:06:
ee:39:1c:d1:a0:32:95:89:f9:82:ca:84:5f:9e:86:91:d4:c4:
35:99:b0:ad:20:8d:49:3b:ab:67:7c:d5:e9:dd:dd:5c:2a:ff:
31:d3:e2:69:6e:04:1c:55:b1:ca:ef:63:00:c1:0f:a3:9d:77:
df:78:a9:61:ac:b1:e5:60:c4:08:5b:ed:aa:15:02:10:e6:20:
9a:38:69:08:8a:1a:ca:1b:bc:92:13:c8:87:27:77:6b:4c:68:
bf:8f:10:d5:dc:68:b1:22:5b:36:44:c0:41:82:a6:53:da:13:
28:68:40:4e:8c:be:6d:55:7c:34:40:cd:f6:a8:5f:10:74:71:
10:f4:2a:f3:7c:86:2c:6a:c5:aa:7a:9b:9d:09:7f:4a:e1:ce:
ed:9f:74:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:32 2024 by rpki-client on console-fra.rpki-client.org