Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d8b272fc-2d26-4067-9285-780d3fbccab4/bac58c0134f8bfb3c015d7fb1eb0273789e3ecb2.roa
File: bac58c0134f8bfb3c015d7fb1eb0273789e3ecb2.roa (raw, json)
Hash identifier: lwMFFqbSNT1of65fzbm8vCwYvrYLEbHF/Tmb6uRBQBA=
Subject key identifier: A7:27:1E:7D:03:81:A4:E7:BC:AC:72:26:ED:A7:21:6B:8E:05:5C:00
Certificate issuer: /CN=b67a5716e00aeccf404a86a23559e2b4aa264abf
Certificate serial: 1EADB7
Authority key identifier: AE:5F:5C:AE:1F:09:02:69:FD:99:6B:E7:B3:0D:E2:36:D4:04:CE:D9
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b67a5716e00aeccf404a86a23559e2b4aa264abf.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/d8b272fc-2d26-4067-9285-780d3fbccab4/bac58c0134f8bfb3c015d7fb1eb0273789e3ecb2.roa
Signing time: Thu 11 Apr 2024 17:11:01 +0000
ROA not before: Thu 11 Apr 2024 17:11:00 +0000
ROA not after: Sat 11 Apr 2026 17:11:00 +0000
asID: 52468
IP address blocks: 45.226.179.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2010551 (0x1eadb7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b67a5716e00aeccf404a86a23559e2b4aa264abf
Validity
Not Before: Apr 11 17:11:00 2024 GMT
Not After : Apr 11 17:11:00 2026 GMT
Subject: CN=bac58c0134f8bfb3c015d7fb1eb0273789e3ecb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a2:2f:ff:a2:24:d7:10:0e:82:58:5b:86:b1:
24:7d:f9:8c:01:a9:dd:db:25:df:fb:72:a4:3c:68:
bd:95:b2:c0:10:de:ec:ea:6a:a3:15:96:df:9a:10:
ec:e5:21:55:09:c1:10:31:4a:3c:47:3c:a7:e5:28:
fd:0f:8e:e5:00:d0:5d:4d:d0:40:b8:c1:b9:d9:2a:
e2:89:39:1e:63:61:b9:d9:37:f7:d7:6f:3a:c8:17:
a1:70:1e:ab:cd:e8:f0:d7:6d:c7:7d:92:fc:30:4f:
6e:65:86:24:a3:40:36:05:9c:f4:54:7f:6a:df:ea:
4b:39:08:ad:a7:82:e6:10:05:b5:85:8d:f1:4e:29:
c4:73:60:f9:57:e3:d4:de:fc:b4:1f:03:fc:e7:c7:
75:86:87:a4:17:65:87:43:44:1b:f7:2a:ee:3b:99:
f7:ce:7d:10:cc:28:41:b6:38:51:12:ce:ab:5e:f2:
61:73:6d:ab:cb:3f:2c:1c:31:23:12:a1:f8:5a:63:
eb:9c:73:dd:48:e0:10:0f:09:0d:8b:85:c5:8e:d4:
b5:4a:af:c2:47:8d:f7:de:96:c1:3a:21:5c:6d:41:
5e:5d:2a:ef:38:c9:3b:3b:43:f2:de:85:d2:bf:95:
65:25:d8:a3:ee:5b:67:c9:11:c7:78:8d:9b:d0:ed:
11:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:27:1E:7D:03:81:A4:E7:BC:AC:72:26:ED:A7:21:6B:8E:05:5C:00
X509v3 Authority Key Identifier:
keyid:AE:5F:5C:AE:1F:09:02:69:FD:99:6B:E7:B3:0D:E2:36:D4:04:CE:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b67a5716e00aeccf404a86a23559e2b4aa264abf.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d8b272fc-2d26-4067-9285-780d3fbccab4/bac58c0134f8bfb3c015d7fb1eb0273789e3ecb2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/d8b272fc-2d26-4067-9285-780d3fbccab4/b67a5716e00aeccf404a86a23559e2b4aa264abf.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.226.179.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:8d:a9:c7:6b:00:23:83:9c:01:bc:77:09:bb:a4:f5:68:c8:
b7:dc:d5:d5:ec:c1:57:16:f1:16:b2:73:96:27:ca:90:6f:c5:
76:c6:23:7b:7c:2a:65:3a:95:99:81:89:72:64:24:c0:6d:65:
90:a5:d4:fe:9f:28:ee:6c:03:3e:1f:47:fc:70:78:28:f1:b5:
69:18:8c:b7:52:b7:aa:ae:00:82:dd:52:10:5b:a5:37:39:8f:
36:e7:e0:e5:31:d6:52:4a:e2:4e:81:63:aa:b3:40:a5:f5:b7:
24:68:73:df:5c:cd:a7:e1:58:ca:f9:74:04:fa:22:ec:f0:a7:
1b:77:11:35:7a:03:94:c3:51:3c:1a:f1:f1:17:19:44:3f:dd:
62:36:6e:e6:7a:a2:48:aa:48:e9:6f:76:1a:1b:ac:62:85:24:
bc:43:e9:67:eb:b0:b0:78:57:66:c7:f2:32:73:86:7e:93:7c:
6c:b9:a9:72:e6:d0:2d:77:e1:9b:fc:c2:27:5c:bb:47:1d:bb:
cf:b7:4f:3c:c6:6e:f1:8f:b1:31:af:04:1b:ce:b6:fe:9f:94:
13:70:3a:d9:f3:ae:56:81:55:30:48:5f:69:3d:5d:dd:51:a7:
46:54:46:c5:bf:0b:8c:c8:39:e7:58:c2:a0:e3:38:04:bb:de:
00:ab:80:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:32 2024 by rpki-client on console-fra.rpki-client.org