Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e5330f14-0e1f-4134-9869-4be92de8e05e/b6bd90587e752d16e1a3b6ecfa78c6d422a5363c.roa
File: b6bd90587e752d16e1a3b6ecfa78c6d422a5363c.roa (raw, json)
Hash identifier: AASpeREqP5HEdiwf2tHxpaOcQulFqFDwFrtMky344tA=
Subject key identifier: 27:3D:8F:E6:B7:DA:19:7F:1A:49:67:3A:E7:7A:BE:CA:A4:2D:CF:A0
Certificate issuer: /CN=de0d914e3acec8ecbafe212675f0227f286f21e8
Certificate serial: 24C6D8
Authority key identifier: E5:FF:64:CE:04:BD:9D:11:03:FA:72:6B:C2:CE:F0:93:C2:73:07:48
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/de0d914e3acec8ecbafe212675f0227f286f21e8.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/e5330f14-0e1f-4134-9869-4be92de8e05e/b6bd90587e752d16e1a3b6ecfa78c6d422a5363c.roa
Signing time: Mon 11 Dec 2023 18:06:36 +0000
ROA not before: Mon 11 Dec 2023 18:06:36 +0000
ROA not after: Thu 11 Dec 2025 18:06:36 +0000
asID: 267787
IP address blocks: 45.171.160.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2410200 (0x24c6d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de0d914e3acec8ecbafe212675f0227f286f21e8
Validity
Not Before: Dec 11 18:06:36 2023 GMT
Not After : Dec 11 18:06:36 2025 GMT
Subject: CN=b6bd90587e752d16e1a3b6ecfa78c6d422a5363c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:5f:ae:49:ba:c1:5b:d1:5c:69:11:95:69:0f:
0a:8f:56:d4:5e:1b:38:d1:e9:bd:35:e2:5c:28:b0:
c5:a4:a8:fb:2f:fc:c9:c4:05:5a:66:a4:3e:46:fe:
f7:a4:ce:57:39:8c:06:d5:0e:02:9c:e9:f0:aa:83:
24:bf:52:75:f3:d1:c5:7f:16:11:2e:4d:0f:a3:92:
f0:78:5d:49:39:9c:17:35:19:b4:cc:ca:83:3a:91:
ce:56:0e:f1:cf:c1:b6:e3:ed:21:49:8a:5b:c2:47:
cc:ad:bc:90:6c:00:c1:f0:eb:56:45:ad:76:ce:e4:
85:cf:7e:98:41:60:d1:5d:cf:1d:48:07:d7:4c:0b:
e8:05:5f:65:65:32:bb:b1:ff:b1:16:05:0a:8d:6b:
f3:6a:ad:3f:95:ff:b9:7f:ec:31:f1:7b:94:47:b4:
5d:da:60:b1:3d:6c:25:1e:25:0e:fe:be:73:8f:87:
da:8f:3a:6d:ca:57:bf:ea:c8:17:74:d2:f1:d5:b3:
60:1b:f7:30:52:b6:82:56:86:c6:05:f9:e0:62:41:
06:0a:6c:44:ae:8b:71:2b:08:1e:ce:16:75:e7:7b:
0b:c5:7c:7d:03:0b:3f:88:d2:a5:11:7e:e4:ca:6d:
86:5e:0c:a6:3f:40:a4:bc:ab:f5:0a:5c:48:1e:1a:
83:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:3D:8F:E6:B7:DA:19:7F:1A:49:67:3A:E7:7A:BE:CA:A4:2D:CF:A0
X509v3 Authority Key Identifier:
keyid:E5:FF:64:CE:04:BD:9D:11:03:FA:72:6B:C2:CE:F0:93:C2:73:07:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/de0d914e3acec8ecbafe212675f0227f286f21e8.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e5330f14-0e1f-4134-9869-4be92de8e05e/b6bd90587e752d16e1a3b6ecfa78c6d422a5363c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/e5330f14-0e1f-4134-9869-4be92de8e05e/de0d914e3acec8ecbafe212675f0227f286f21e8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.171.160.0/22
Signature Algorithm: sha256WithRSAEncryption
1d:db:4e:ce:2a:88:05:9b:73:e6:00:17:75:c3:f3:05:bb:41:
00:b8:90:7a:17:51:cb:25:cf:dd:55:15:7e:82:87:55:ec:1a:
26:b4:9e:e2:f3:b9:7e:91:0a:b1:f2:c5:07:7f:4b:3d:0a:8c:
ae:7b:f2:dc:01:5b:c5:b1:a0:29:ae:e1:49:cd:34:87:0f:31:
f9:9f:49:0c:bf:5f:d8:6f:c8:41:03:24:77:e2:80:b6:a6:1e:
37:b4:7e:85:40:03:17:19:41:06:b8:f9:42:21:fc:75:12:ec:
87:51:f2:c8:66:4e:4a:8e:fd:99:7e:b0:2f:22:16:14:31:32:
6c:a9:dc:e5:91:53:e6:ec:d8:df:d9:6d:75:29:10:71:ea:e8:
6f:41:20:ff:7f:c9:70:86:75:01:0e:b2:fa:ac:1d:11:18:8b:
31:4a:c7:7a:6b:e9:48:f5:93:b3:3d:cf:dd:6f:e6:21:83:c5:
a5:20:b9:77:81:11:e7:e0:e5:2a:38:d0:2f:4d:a7:25:a8:98:
43:4c:95:68:f6:57:22:2d:01:9e:54:4c:f6:42:97:61:da:8f:
eb:a4:07:1f:ec:28:60:fb:f8:45:08:df:ce:3b:70:9e:13:6d:
a1:1a:f5:00:b5:8a:71:c2:8e:44:70:f4:b4:80:6a:78:d5:88:
2f:eb:10:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:50 2024 by rpki-client on console-ams.rpki-client.org