Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/dbfcb988-8a7c-459b-af49-dfa594a29a45/7504de680f84135bfbafcd570be35f8842a081ae.roa
File: 7504de680f84135bfbafcd570be35f8842a081ae.roa (raw, json)
Hash identifier: VLWt+LwzTed0IBJBkrZ3lxDNdvVxiBRxasSLlBIYyeo=
Subject key identifier: C4:B1:88:7C:17:EA:EC:37:D6:65:BA:62:40:41:A3:D5:AE:A8:41:1D
Certificate issuer: /CN=cb0d50fb966e4001e10ac528d57fe833560a5d85
Certificate serial: 07CC52
Authority key identifier: 27:71:FE:F9:8F:EB:73:41:30:2C:D8:40:3F:8D:24:3C:47:AA:83:9A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cb0d50fb966e4001e10ac528d57fe833560a5d85.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/dbfcb988-8a7c-459b-af49-dfa594a29a45/7504de680f84135bfbafcd570be35f8842a081ae.roa
Signing time: Mon 08 Apr 2024 16:08:11 +0000
ROA not before: Mon 08 Apr 2024 16:08:11 +0000
ROA not after: Wed 08 Apr 2026 16:08:11 +0000
asID: 267850
IP address blocks: 45.175.137.0/24 maxlen: 24
45.175.138.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 511058 (0x7cc52)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb0d50fb966e4001e10ac528d57fe833560a5d85
Validity
Not Before: Apr 8 16:08:11 2024 GMT
Not After : Apr 8 16:08:11 2026 GMT
Subject: CN=7504de680f84135bfbafcd570be35f8842a081ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:4e:6b:21:52:51:ca:05:ac:6c:0e:40:5f:06:
39:cf:d7:8e:4d:7c:c5:d7:66:62:df:c2:db:1d:e9:
07:1a:cc:d4:f6:36:a2:4c:69:11:1d:84:e1:ae:93:
d9:9e:a3:20:21:6a:8d:4b:00:70:d9:ee:c0:72:76:
80:00:1a:a5:f1:0a:3d:9d:76:98:4d:d3:ee:3c:8c:
fa:c0:2d:75:8b:ef:4b:0d:d6:2f:d7:de:2e:07:ca:
8d:f0:5d:51:90:50:65:0a:9c:d8:c4:da:51:18:d7:
4d:c2:2c:36:95:05:c3:6a:b1:ef:6e:04:b6:28:29:
7b:e4:48:7b:be:1f:ca:e2:a0:fe:5a:fa:37:44:f5:
a7:fa:d6:38:8e:64:65:3e:7f:2a:b5:22:49:6f:1a:
7b:a8:ba:f7:79:fa:fc:89:13:66:71:9d:72:1b:fc:
36:e8:b1:44:2f:68:aa:6f:17:4a:2a:79:19:01:71:
be:87:16:da:7d:44:54:ce:65:00:1f:d9:43:d6:3f:
7f:35:b8:39:0c:26:e7:ba:96:d3:ae:ad:96:b3:b5:
e9:45:ca:6b:6e:33:77:f0:21:e5:28:89:49:2e:f1:
ae:cd:14:15:eb:e5:1e:5c:d8:1c:ed:7b:be:76:a2:
26:47:e9:5f:b5:80:9c:e0:95:b4:41:1f:c1:9f:e7:
d0:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:B1:88:7C:17:EA:EC:37:D6:65:BA:62:40:41:A3:D5:AE:A8:41:1D
X509v3 Authority Key Identifier:
keyid:27:71:FE:F9:8F:EB:73:41:30:2C:D8:40:3F:8D:24:3C:47:AA:83:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cb0d50fb966e4001e10ac528d57fe833560a5d85.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/dbfcb988-8a7c-459b-af49-dfa594a29a45/7504de680f84135bfbafcd570be35f8842a081ae.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/dbfcb988-8a7c-459b-af49-dfa594a29a45/cb0d50fb966e4001e10ac528d57fe833560a5d85.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.175.137.0-45.175.138.255
Signature Algorithm: sha256WithRSAEncryption
5c:c1:68:60:39:0d:c5:21:61:a1:bd:b8:ed:9c:c9:dc:21:23:
07:00:6c:93:06:21:00:a3:15:ff:a3:8b:b4:27:2b:0b:ba:ef:
1d:83:76:83:c5:78:f0:fa:11:07:1a:06:c4:ef:48:1d:2d:36:
ec:6b:10:a0:5a:fa:f3:d6:59:16:05:94:a7:b5:ce:d8:ad:92:
dc:3a:0f:6c:99:c7:59:84:a0:9c:89:b2:63:63:1a:0d:5e:c8:
ca:4e:4b:76:e6:c2:cc:f9:18:5e:04:f7:4b:7b:86:a1:0d:59:
e6:cf:bb:05:21:bc:1b:c8:35:d9:26:26:9e:47:85:b0:23:02:
e8:14:5b:7a:e2:ab:10:7a:a7:24:2a:3e:3b:e5:35:a4:b2:b4:
c4:d4:76:37:79:73:94:42:b2:27:df:14:bd:80:20:00:63:f0:
15:fa:94:45:97:f9:84:50:1b:85:8d:68:ed:1c:36:6a:4f:d6:
8a:f2:fa:b7:40:0a:b7:92:70:9f:65:ac:96:8f:e6:02:c7:1c:
ad:fe:5f:6f:dc:c5:9f:16:74:92:e1:85:28:a2:4f:a3:b9:b5:
41:90:ce:4a:5c:d5:c9:ed:81:d5:c8:b4:10:f9:a3:00:7d:7c:
41:44:9b:c8:a4:5a:f1:d8:4d:94:2f:20:23:65:96:a3:f6:0b:
86:65:17:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:49 2024 by rpki-client on console-ams.rpki-client.org