Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e54b93f1-995f-4c8a-815b-bb0308d848cd/fdb109091d8b1b8e3a7f958d4963b70a39f0169e.roa
File: fdb109091d8b1b8e3a7f958d4963b70a39f0169e.roa (raw, json)
Hash identifier: 9POIa3Ge8bo1qj+dHg3+Umf3yP1/mHolQfHMB//Tjr8=
Subject key identifier: 08:1C:CB:75:35:9B:08:06:56:16:DB:79:94:03:3D:55:F7:39:76:21
Certificate issuer: /CN=aaf4571e3a5915e171eb5856008590d6211ff016
Certificate serial: 133684
Authority key identifier: 81:0F:F0:61:CE:B2:2C:B9:C7:D3:22:2D:E9:76:43:7C:B8:C3:FA:21
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/aaf4571e3a5915e171eb5856008590d6211ff016.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/e54b93f1-995f-4c8a-815b-bb0308d848cd/fdb109091d8b1b8e3a7f958d4963b70a39f0169e.roa
Signing time: Mon 26 Jun 2023 19:46:25 +0000
ROA not before: Sun 25 Jun 2023 19:46:24 +0000
ROA not after: Thu 26 Jun 2025 19:46:24 +0000
asID: 204300
IP address blocks: 45.4.204.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1259140 (0x133684)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aaf4571e3a5915e171eb5856008590d6211ff016
Validity
Not Before: Jun 25 19:46:24 2023 GMT
Not After : Jun 26 19:46:24 2025 GMT
Subject: CN=fdb109091d8b1b8e3a7f958d4963b70a39f0169e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:06:99:4a:e4:ff:52:24:4d:20:36:d5:01:9a:
e2:64:a4:84:34:df:f0:fb:41:5a:a9:ec:7d:82:e9:
c1:59:df:74:0c:ac:8f:1c:da:b5:bf:e8:0a:5c:04:
2a:50:45:a1:57:16:fc:f2:fd:99:2c:80:d8:88:e4:
8d:bc:ac:8d:f1:fb:a7:5d:96:e4:c0:62:de:b7:9c:
28:9c:6c:12:f6:18:be:bc:72:22:2f:73:a5:a4:da:
a7:48:37:1c:f8:6a:a0:c8:0e:f1:c2:f8:a6:ea:de:
d2:11:f7:29:4a:be:7d:a3:9e:5a:9f:b0:b7:a7:26:
c7:c8:63:99:d4:89:af:dd:d1:b1:b8:1d:f7:e9:27:
68:7b:14:59:a8:9b:9d:88:ef:0f:fa:1a:b4:e7:01:
32:f6:ea:9c:65:7c:5b:a3:29:2c:2d:54:7a:20:ac:
44:5f:c1:66:d7:f2:ae:33:28:21:83:8e:6f:6f:97:
62:ce:23:43:de:b1:d8:63:18:de:30:f3:ca:47:c8:
41:5d:39:d2:6f:0f:c1:b3:d8:10:70:6c:cb:6a:f9:
f6:2f:1a:9f:0a:8a:64:ea:82:97:35:bb:5a:52:08:
46:15:40:c8:3f:73:41:59:8c:fd:00:40:a5:ee:a6:
fd:5f:86:1d:3d:ba:e6:a2:00:29:e4:b7:a2:ca:c3:
58:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:1C:CB:75:35:9B:08:06:56:16:DB:79:94:03:3D:55:F7:39:76:21
X509v3 Authority Key Identifier:
keyid:81:0F:F0:61:CE:B2:2C:B9:C7:D3:22:2D:E9:76:43:7C:B8:C3:FA:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/aaf4571e3a5915e171eb5856008590d6211ff016.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e54b93f1-995f-4c8a-815b-bb0308d848cd/fdb109091d8b1b8e3a7f958d4963b70a39f0169e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/e54b93f1-995f-4c8a-815b-bb0308d848cd/aaf4571e3a5915e171eb5856008590d6211ff016.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.4.204.0/23
Signature Algorithm: sha256WithRSAEncryption
4f:57:f2:7f:9e:63:ab:26:15:44:03:5a:59:5e:69:3e:3a:36:
0e:fb:76:74:9b:f0:b6:22:18:d6:9c:c8:d5:d5:84:a3:b4:b6:
23:16:95:0f:07:96:3a:1e:bf:35:cf:d4:3d:de:50:3a:f6:0a:
84:6c:2c:9c:3a:b4:35:c4:69:57:37:7c:64:ec:ac:30:fb:46:
63:b9:be:ce:89:7e:58:d2:5f:65:ee:d5:8d:8a:26:fc:ca:ab:
7b:01:a6:80:b0:71:b2:1a:73:2e:c1:75:2b:dc:e1:16:b9:e2:
f7:a2:85:1e:29:c2:1c:dc:3c:fe:cf:66:05:72:d3:50:1e:9f:
e7:31:65:96:7e:ae:5d:1a:e3:85:91:39:ac:71:cb:42:39:23:
78:e1:93:7c:60:5a:71:17:d1:38:5a:d9:a3:70:ce:16:3e:0e:
78:91:c0:f4:9b:f3:15:a0:e5:1b:0c:24:06:1d:49:fe:fc:2f:
d9:56:ce:58:ad:7c:ca:ab:a8:83:24:5f:87:50:d0:4e:c1:29:
e4:32:14:11:af:40:28:be:70:37:b7:f9:4c:8d:41:5d:92:a0:
c0:91:b6:d1:2a:b6:71:41:ba:6b:de:2d:10:11:40:23:3b:2f:
ef:4e:68:29:d5:90:9f:fc:ae:5c:80:fa:c3:da:22:e4:0d:da:
3a:2c:1f:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:33 2024 by rpki-client on console-fra.rpki-client.org