Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e571b174-cc90-4dbc-8519-355b841d74db/3d018e81f32f657b099b2fe86e3645d63dede91a.roa
File: 3d018e81f32f657b099b2fe86e3645d63dede91a.roa (raw, json)
Hash identifier: L94lg27/cIvE/HuARs7oSDfTKF2XO9P6Rf6BPDjqxLM=
Subject key identifier: 32:C5:1B:8A:70:90:E7:17:E3:AF:D8:DC:CA:D7:9F:BF:BF:DA:E1:75
Certificate issuer: /CN=581e0c9d08ecb217623b5290ee851242221cdc85
Certificate serial: 24DEA0
Authority key identifier: 80:04:EA:0A:FB:6A:C0:26:B6:FE:AC:80:48:FD:11:65:E8:63:F9:9A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/581e0c9d08ecb217623b5290ee851242221cdc85.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/e571b174-cc90-4dbc-8519-355b841d74db/3d018e81f32f657b099b2fe86e3645d63dede91a.roa
Signing time: Wed 18 Oct 2023 00:44:56 +0000
ROA not before: Tue 17 Oct 2023 00:44:56 +0000
ROA not after: Sat 18 Oct 2025 00:44:56 +0000
asID: 52468
IP address blocks: 45.71.200.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2416288 (0x24dea0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=581e0c9d08ecb217623b5290ee851242221cdc85
Validity
Not Before: Oct 17 00:44:56 2023 GMT
Not After : Oct 18 00:44:56 2025 GMT
Subject: CN=3d018e81f32f657b099b2fe86e3645d63dede91a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:02:6d:a0:37:33:16:68:78:48:72:fd:70:4f:
a6:a9:1f:7e:d0:6e:7f:86:82:c3:35:6e:f3:e9:0f:
70:ec:24:0a:ab:5c:0a:5b:3c:4f:f6:ac:c6:85:f5:
95:44:30:1d:c7:d9:93:ab:e0:b5:d3:b5:8a:93:ed:
7c:9b:78:10:fc:85:30:4c:59:73:87:8b:11:01:58:
c4:19:d1:80:f3:45:7a:4b:1d:99:a4:05:d0:a4:29:
ed:2c:28:6e:40:10:21:1c:b8:35:10:2a:10:e4:c6:
ac:88:f3:bb:ce:61:b8:42:b2:b5:30:a8:9f:0a:ec:
09:e5:e3:df:b5:29:b5:8b:1f:d5:08:20:09:29:38:
c1:73:45:93:7b:91:28:39:fe:da:7d:e0:ae:43:0e:
eb:e5:75:9f:14:8e:52:7a:66:fc:89:e1:80:f6:88:
29:86:ca:b7:c2:ad:70:4f:64:08:b1:c6:46:d6:f3:
ce:62:ee:2f:85:71:33:87:12:e6:f3:d0:1d:7e:1c:
5b:9a:fd:f0:de:87:a5:3e:23:cb:40:6d:38:9d:30:
96:de:72:c6:3e:54:bf:49:da:a3:02:ba:8a:a0:e2:
30:86:10:22:50:b6:28:f7:2c:e8:55:f0:d6:bb:2a:
b1:c2:f5:7e:2a:86:f6:6c:b7:e0:aa:74:51:de:ee:
f2:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:C5:1B:8A:70:90:E7:17:E3:AF:D8:DC:CA:D7:9F:BF:BF:DA:E1:75
X509v3 Authority Key Identifier:
keyid:80:04:EA:0A:FB:6A:C0:26:B6:FE:AC:80:48:FD:11:65:E8:63:F9:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/581e0c9d08ecb217623b5290ee851242221cdc85.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e571b174-cc90-4dbc-8519-355b841d74db/3d018e81f32f657b099b2fe86e3645d63dede91a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/e571b174-cc90-4dbc-8519-355b841d74db/581e0c9d08ecb217623b5290ee851242221cdc85.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.71.200.0/22
Signature Algorithm: sha256WithRSAEncryption
34:57:cc:60:db:1d:30:a1:1c:64:e9:ec:d1:7c:ce:ab:8e:2a:
36:d4:bc:60:09:33:a1:5e:8e:60:8c:ef:b2:a3:85:3e:70:a0:
29:b8:ad:02:b8:33:dd:d6:49:77:d0:88:a7:fa:50:2a:76:d0:
1f:00:a3:c3:a6:04:ae:17:12:33:b4:28:f3:ef:64:d7:c8:d8:
f1:da:3a:00:7f:89:fc:a8:b4:d9:4c:58:ab:b0:69:43:a0:09:
ee:d3:32:53:8d:7d:69:52:ea:ae:15:fd:a1:cf:2c:b6:8f:26:
02:93:07:46:2e:48:2f:77:ff:5b:92:e7:6c:2a:42:d9:fa:dc:
1b:95:0c:2c:8c:07:ad:cd:c5:cb:8d:ef:9e:8a:fc:52:92:b6:
68:b5:73:5d:05:1e:34:bc:50:bf:60:ce:8b:d1:25:0d:e4:e7:
52:4c:19:20:b6:fc:c5:f1:39:7c:d4:18:1a:ca:b5:c7:19:ff:
c4:1e:cb:b4:16:a0:16:35:60:6e:55:7a:06:c6:d6:e4:8d:ad:
84:61:30:98:1d:d5:c5:c1:55:d3:24:ac:21:75:56:46:1f:e0:
a4:ba:31:15:13:59:39:f6:c7:b9:a9:be:3b:58:9b:36:87:c9:
94:a9:e9:29:f5:7f:89:39:83:bb:4f:cf:0c:cf:8e:44:cf:70:
54:f8:62:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:33 2024 by rpki-client on console-fra.rpki-client.org