Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e3617b10-3c45-4925-bbdf-6372eaa49bb4/ec8d8b221083e07d4c9abd656c6f4aa826359f3a.roa
File: ec8d8b221083e07d4c9abd656c6f4aa826359f3a.roa (raw, json)
Hash identifier: 67lcg/JsDfig9abJlDbK9qvJRaCN1G4qXri9IRkdx0o=
Subject key identifier: 84:CD:A2:CA:39:F0:4B:A5:43:F5:75:B7:86:2D:D1:DC:86:B4:CB:47
Certificate issuer: /CN=bf01c8b5c661e4a83900b9cf88863f17432603dd
Certificate serial: 1093DD
Authority key identifier: F2:9E:A1:22:8F:3A:E6:32:66:6D:60:45:B3:0D:F9:6D:C4:B7:01:0A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bf01c8b5c661e4a83900b9cf88863f17432603dd.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/e3617b10-3c45-4925-bbdf-6372eaa49bb4/ec8d8b221083e07d4c9abd656c6f4aa826359f3a.roa
Signing time: Thu 24 Aug 2023 03:54:18 +0000
ROA not before: Wed 23 Aug 2023 03:54:18 +0000
ROA not after: Sun 24 Aug 2025 03:54:18 +0000
asID: 263170
IP address blocks: 45.182.20.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1086429 (0x1093dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf01c8b5c661e4a83900b9cf88863f17432603dd
Validity
Not Before: Aug 23 03:54:18 2023 GMT
Not After : Aug 24 03:54:18 2025 GMT
Subject: CN=ec8d8b221083e07d4c9abd656c6f4aa826359f3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:fc:33:8d:1f:fd:03:ae:26:90:59:b0:9a:9d:
27:8f:fb:fe:48:2b:a8:92:72:be:a4:cc:0b:6a:d7:
a1:7b:e0:0a:82:0f:5a:ef:c0:1d:6d:e8:2f:95:17:
00:d9:22:26:4b:07:97:65:bd:47:7e:31:31:7d:19:
19:81:54:fa:02:50:a1:23:2d:a4:08:e4:3e:f5:f3:
a0:5f:a4:53:5a:2f:3f:23:9a:98:ca:99:7f:55:6f:
a2:c0:d8:dc:c5:2e:ce:cb:ec:a2:76:de:de:fb:67:
dc:66:19:0f:62:3c:81:b9:e4:50:67:3a:e8:50:05:
de:af:55:3e:1c:65:d2:7b:0d:a5:15:2a:80:57:15:
ea:ba:0e:9e:49:f8:84:f8:c8:2e:6d:a6:c5:c1:88:
a0:b7:e7:6a:a1:48:6d:8b:7f:d6:a3:7d:c9:5c:93:
1f:d1:2c:dc:47:20:b9:17:21:a5:d2:35:22:84:59:
81:68:b6:6f:55:e0:c9:2e:b5:e3:bd:c1:9c:fd:40:
32:92:d1:2e:c4:96:02:a8:b6:ca:00:2b:dd:da:ea:
b7:c3:36:50:ed:cd:dd:14:79:5d:97:79:4c:22:4c:
4b:2d:a7:e8:85:6e:b6:2a:9e:19:d7:27:33:97:6a:
fd:d5:7c:25:2a:71:01:63:01:76:87:d5:ca:90:4a:
2b:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:CD:A2:CA:39:F0:4B:A5:43:F5:75:B7:86:2D:D1:DC:86:B4:CB:47
X509v3 Authority Key Identifier:
keyid:F2:9E:A1:22:8F:3A:E6:32:66:6D:60:45:B3:0D:F9:6D:C4:B7:01:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bf01c8b5c661e4a83900b9cf88863f17432603dd.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e3617b10-3c45-4925-bbdf-6372eaa49bb4/ec8d8b221083e07d4c9abd656c6f4aa826359f3a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/e3617b10-3c45-4925-bbdf-6372eaa49bb4/bf01c8b5c661e4a83900b9cf88863f17432603dd.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.182.20.0/24
Signature Algorithm: sha256WithRSAEncryption
82:dc:8b:3c:70:4b:49:47:20:27:cf:3e:56:b8:db:b4:3c:3a:
11:91:24:95:a6:56:7a:5d:4f:dc:1f:40:04:71:a2:09:c6:61:
94:e2:f3:9c:d9:35:db:75:ab:a8:30:46:71:11:9b:98:82:33:
08:82:41:b6:99:31:42:99:88:5b:02:6b:3b:c3:a4:2b:9f:6f:
2e:4e:27:c9:1a:ee:da:68:d5:3a:49:ea:57:40:59:63:24:55:
34:b8:52:75:27:59:cb:20:a5:80:74:65:cc:07:61:4d:e1:19:
9c:28:8b:ac:d9:dc:e1:ce:cd:96:05:e4:ac:77:17:19:92:3f:
a7:eb:8a:72:82:56:86:b8:2c:ee:a1:d1:c1:52:be:ea:a9:bc:
c1:6e:67:66:08:d5:f7:72:40:87:3a:a2:7b:1c:a9:5d:f4:9b:
d4:77:f3:3b:c9:91:3a:28:19:41:d4:fc:7b:5a:c4:56:e9:88:
0e:23:31:65:9d:6c:f3:c3:0b:a3:0b:46:37:e7:f6:92:be:53:
b9:57:6c:f6:7f:58:ad:1d:e0:0d:8e:95:84:46:25:51:29:45:
e8:3f:b6:47:18:ed:5c:17:a1:ba:51:51:1b:3a:20:19:d2:c7:
38:84:61:16:02:d7:45:7b:db:08:c4:99:9a:33:9c:8c:85:a8:
08:c7:7b:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:50 2024 by rpki-client on console-ams.rpki-client.org