Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e3617b10-3c45-4925-bbdf-6372eaa49bb4/d2b4d2b744e63105944e287b38c8597a5f7ccc8a.roa
File: d2b4d2b744e63105944e287b38c8597a5f7ccc8a.roa (raw, json)
Hash identifier: 28vH3sosSyeOwUHzlwr1cH7tOCzrs+sveEhTr/HzmlQ=
Subject key identifier: 56:05:DD:FE:44:41:33:52:C9:C7:23:38:FE:C5:B2:89:95:89:7B:E1
Certificate issuer: /CN=bf01c8b5c661e4a83900b9cf88863f17432603dd
Certificate serial: 0EF609
Authority key identifier: F2:9E:A1:22:8F:3A:E6:32:66:6D:60:45:B3:0D:F9:6D:C4:B7:01:0A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bf01c8b5c661e4a83900b9cf88863f17432603dd.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/e3617b10-3c45-4925-bbdf-6372eaa49bb4/d2b4d2b744e63105944e287b38c8597a5f7ccc8a.roa
Signing time: Tue 20 Jun 2023 18:20:27 +0000
ROA not before: Mon 19 Jun 2023 18:20:27 +0000
ROA not after: Fri 20 Jun 2025 18:20:27 +0000
asID: 263725
IP address blocks: 45.182.23.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 980489 (0xef609)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf01c8b5c661e4a83900b9cf88863f17432603dd
Validity
Not Before: Jun 19 18:20:27 2023 GMT
Not After : Jun 20 18:20:27 2025 GMT
Subject: CN=d2b4d2b744e63105944e287b38c8597a5f7ccc8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a2:ed:49:7f:71:48:be:3b:bb:dc:c5:25:c3:
86:71:ed:18:92:3f:f5:0a:e4:f4:fd:ee:67:cf:00:
d6:57:64:85:a5:d9:dd:23:c6:8b:44:2d:15:cf:71:
4f:89:5e:6c:ba:8c:cc:fe:c5:9d:47:bd:c6:21:89:
e8:82:ca:87:aa:ab:b8:87:34:1d:44:f5:c6:d8:74:
6c:68:1e:76:69:69:e3:d1:c1:49:cb:1a:01:6e:3a:
eb:29:a0:f8:3e:64:8e:10:83:bb:0f:81:df:8f:3d:
05:f9:bb:ac:de:b0:60:71:76:6a:5c:47:e5:38:e6:
91:67:b5:43:05:38:00:13:53:9c:e6:23:3c:9a:7a:
6c:a5:30:5c:ae:9f:08:25:78:fc:54:d9:49:6f:4d:
fa:12:ad:96:fb:ed:60:a3:70:41:e7:79:84:2a:75:
b2:dd:09:e2:f0:7d:f2:b0:69:33:be:b2:4f:2a:b2:
59:9f:19:f6:d0:78:78:d3:4a:93:e1:6a:6d:10:ec:
57:77:72:77:8e:56:a1:71:ae:aa:76:a8:d3:c8:0b:
ea:82:ab:9f:0d:a4:46:d8:7e:92:ae:05:72:68:50:
82:85:e6:38:af:c3:8f:82:be:0c:51:4d:f0:a6:36:
ee:30:02:1d:b4:03:3a:1f:2c:82:a5:c4:fa:38:87:
c0:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:05:DD:FE:44:41:33:52:C9:C7:23:38:FE:C5:B2:89:95:89:7B:E1
X509v3 Authority Key Identifier:
keyid:F2:9E:A1:22:8F:3A:E6:32:66:6D:60:45:B3:0D:F9:6D:C4:B7:01:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bf01c8b5c661e4a83900b9cf88863f17432603dd.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e3617b10-3c45-4925-bbdf-6372eaa49bb4/d2b4d2b744e63105944e287b38c8597a5f7ccc8a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/e3617b10-3c45-4925-bbdf-6372eaa49bb4/bf01c8b5c661e4a83900b9cf88863f17432603dd.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.182.23.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:c4:20:f4:da:7f:7f:d3:71:e6:3e:c3:23:51:74:65:e1:b8:
57:9d:1c:79:5b:c6:1e:93:ce:b0:a7:33:86:d1:84:3d:7b:83:
5f:7e:4e:af:c7:43:dd:87:7a:92:3f:88:f5:f9:6f:05:0e:f5:
46:76:fa:87:2d:2b:c0:8b:bb:ed:c2:00:a1:db:5a:be:7a:18:
41:66:cb:c0:bf:a0:b4:c7:bc:0c:0e:e2:bd:ec:bd:6b:63:90:
4d:ae:e9:e8:71:9d:a6:e4:ab:a1:de:c3:eb:3e:0c:c7:ed:ac:
4b:78:28:b8:56:c3:1b:b6:51:c1:30:17:a6:dd:c5:ea:9d:06:
a3:88:b9:e3:72:fa:e2:1d:23:07:de:15:6d:dd:54:2d:96:1d:
cb:c7:6a:0c:44:01:a7:fa:2d:ef:ae:ba:c7:57:9a:11:f2:99:
36:b5:96:c6:3d:38:23:1a:cb:c8:ab:80:ae:c2:91:11:c8:e7:
6f:3e:3d:5c:a7:c5:b2:cf:41:ba:81:e2:cf:34:e7:8e:14:05:
8e:03:27:5f:cc:01:8b:65:f4:83:4f:3b:53:a1:39:54:95:0a:
36:0b:d2:e8:d5:fb:14:41:3d:ea:fb:ad:62:e9:4f:49:0f:f9:
d7:09:f5:85:f8:88:9b:f2:16:95:e9:a7:1e:30:a4:e7:09:ac:
ef:6a:e7:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:32 2024 by rpki-client on console-fra.rpki-client.org