Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/df5ce020-a0af-4e15-8905-3ed4e73670a1/57b7dcda3039e7aedd3bda80c26b3223e668e960.roa
File: 57b7dcda3039e7aedd3bda80c26b3223e668e960.roa (raw, json)
Hash identifier: XmhbFyteXjrNxUoSb5HAzJyGdJzfzwdl+nK06jloJrY=
Subject key identifier: CD:5B:69:7B:0E:38:F4:AD:17:53:D4:2C:7A:65:62:1C:DC:00:68:59
Certificate issuer: /CN=dce0c8e8f0ae7604b42eaed64a0f996cf82a4b41
Certificate serial: EF0C
Authority key identifier: D9:6D:D2:B7:71:67:C2:1F:92:DE:02:EE:86:61:3D:1D:C7:99:1B:E9
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dce0c8e8f0ae7604b42eaed64a0f996cf82a4b41.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/df5ce020-a0af-4e15-8905-3ed4e73670a1/57b7dcda3039e7aedd3bda80c26b3223e668e960.roa
Signing time: Mon 01 Nov 2021 21:47:55 +0000
ROA not before: Mon 01 Nov 2021 03:00:00 +0000
ROA not after: Sun 01 Nov 2026 03:00:00 +0000
asID: 267689
IP address blocks: 45.163.20.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61196 (0xef0c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dce0c8e8f0ae7604b42eaed64a0f996cf82a4b41
Validity
Not Before: Nov 1 03:00:00 2021 GMT
Not After : Nov 1 03:00:00 2026 GMT
Subject: CN=57b7dcda3039e7aedd3bda80c26b3223e668e960
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:50:c3:14:66:46:d2:c5:90:28:97:60:c0:dd:
07:98:fb:fe:e1:e1:35:cc:9e:b3:a0:96:f2:da:14:
17:53:0b:f5:fe:86:a4:d9:3b:e7:3a:1a:06:1b:36:
cc:1f:e5:f7:80:fc:ed:a7:ba:b9:ba:58:1d:3d:85:
1b:1a:9a:0e:22:95:9b:b5:71:ba:cc:a7:a1:c2:b3:
a8:2f:d7:49:10:10:8f:ca:b8:34:87:7a:72:dd:99:
c8:de:4f:54:74:ad:6e:73:d7:08:8b:2c:08:c3:db:
63:5f:86:05:b8:14:1c:af:11:a1:be:92:88:65:fd:
4f:df:28:2f:e9:f0:58:87:8c:5c:5c:6c:0f:e5:35:
fb:3e:8c:72:ec:b7:3b:39:43:a4:e6:2c:b4:96:ff:
b9:28:3f:9d:39:e2:50:a5:3c:69:19:4b:0e:45:f3:
4e:a5:63:07:5d:d4:da:44:25:51:a9:1f:d5:30:fd:
de:ef:3c:5a:1f:c4:9e:91:60:4a:bc:7c:d1:ed:63:
93:02:63:fa:07:19:eb:e3:75:e1:b9:e7:d6:81:46:
97:cc:3e:ba:d3:7b:6d:d1:ee:7b:bd:c0:c3:6e:2d:
73:1e:8c:5e:bc:9b:35:2b:3d:dd:68:e7:7c:48:0b:
7d:ce:b2:ff:78:59:19:a0:32:05:da:c2:96:4e:8f:
68:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:5B:69:7B:0E:38:F4:AD:17:53:D4:2C:7A:65:62:1C:DC:00:68:59
X509v3 Authority Key Identifier:
keyid:D9:6D:D2:B7:71:67:C2:1F:92:DE:02:EE:86:61:3D:1D:C7:99:1B:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dce0c8e8f0ae7604b42eaed64a0f996cf82a4b41.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/df5ce020-a0af-4e15-8905-3ed4e73670a1/57b7dcda3039e7aedd3bda80c26b3223e668e960.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/df5ce020-a0af-4e15-8905-3ed4e73670a1/dce0c8e8f0ae7604b42eaed64a0f996cf82a4b41.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.163.20.0/24
Signature Algorithm: sha256WithRSAEncryption
44:40:7d:2e:fd:d6:97:14:63:75:5c:8c:69:d3:21:25:ee:59:
3e:6f:52:21:05:67:25:42:d2:bf:76:de:10:51:02:20:88:16:
84:4c:7f:fa:ad:6a:1e:96:f3:07:cb:d2:38:98:fe:27:7b:b5:
ec:64:e5:d9:35:64:be:fc:f6:43:a5:ed:d1:16:32:92:bb:57:
1a:de:9a:df:1e:c5:20:f4:02:13:e1:ca:ad:07:5a:e0:d0:50:
44:51:bc:dd:66:9d:35:ec:c2:ee:ef:34:bb:03:c4:3e:34:79:
61:40:77:20:49:b8:6b:f9:46:06:a2:24:6f:ed:ff:27:56:e2:
76:02:18:84:87:b3:2a:04:dd:97:e2:45:da:25:78:4f:23:8e:
66:e9:07:ef:4c:75:00:4c:b2:e3:bc:de:1e:66:e4:d9:a5:43:
62:c3:38:f7:37:cb:fa:57:28:20:b6:bb:18:87:c3:15:5d:20:
4d:03:95:ca:61:47:16:c0:a8:9e:df:06:20:91:37:51:87:06:
33:6d:e4:c6:5f:d4:c6:ed:23:4f:31:22:a6:61:0a:85:d0:31:
bd:9f:5c:67:31:c6:77:af:ea:ec:b4:ad:b0:1f:ca:47:2a:f0:
05:72:f2:70:4e:71:ae:03:1a:cb:64:10:57:b0:7c:6d:7e:b4:
3e:be:6e:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:37 2024 by rpki-client on console-ams.rpki-client.org