Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ea4e93cf-258e-4095-b153-52da0ff5def7/249f1b8bc42a4b42ded9f4a077b4faab8c2d9477.roa
File: 249f1b8bc42a4b42ded9f4a077b4faab8c2d9477.roa (raw, json)
Hash identifier: YMzBW9Y3Xx+P0xmixoBj9Gle3pEsiVWugL8Dp/rJu/E=
Subject key identifier: 56:42:30:47:69:6F:44:59:3C:C1:DD:CD:5C:8F:CE:B5:A0:BE:AB:DD
Certificate issuer: /CN=64f666bdaccc96943f7d7ccb43d6b7d2046d0633
Certificate serial: 155DAA
Authority key identifier: AA:1E:24:BE:21:73:46:07:BE:18:B9:3D:D7:27:BB:06:95:02:FD:1F
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/64f666bdaccc96943f7d7ccb43d6b7d2046d0633.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/ea4e93cf-258e-4095-b153-52da0ff5def7/249f1b8bc42a4b42ded9f4a077b4faab8c2d9477.roa
Signing time: Wed 02 Mar 2022 01:59:32 +0000
ROA not before: Wed 24 Mar 2021 03:00:00 +0000
ROA not after: Tue 24 Mar 2026 03:00:00 +0000
asID: 265857
IP address blocks: 45.225.0.0/24 maxlen: 24
45.225.1.0/24 maxlen: 24
45.225.2.0/24 maxlen: 24
45.225.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1400234 (0x155daa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64f666bdaccc96943f7d7ccb43d6b7d2046d0633
Validity
Not Before: Mar 24 03:00:00 2021 GMT
Not After : Mar 24 03:00:00 2026 GMT
Subject: CN=249f1b8bc42a4b42ded9f4a077b4faab8c2d9477
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:d9:01:80:ef:e0:ab:ed:22:63:2f:6f:b8:2a:
83:26:cb:0c:73:74:df:88:1d:e4:ef:74:9e:d1:c6:
95:2c:c0:4e:36:ab:a2:54:f1:9f:cb:90:b6:c8:39:
df:fa:0e:f0:cf:06:64:b6:2f:0a:98:4a:4e:1d:36:
ec:45:c4:01:58:12:d8:99:ce:d9:2a:44:93:6c:33:
ba:c4:5a:27:c8:c1:2b:1a:bc:87:a1:4c:3a:fc:fb:
b3:d2:25:5d:44:88:e3:d6:3e:44:31:87:2d:83:32:
4b:dc:18:48:f1:19:f8:dd:2f:19:30:c2:b6:10:d9:
cd:4b:fd:5f:71:bd:3c:55:57:fc:c8:e9:36:79:8a:
4d:3d:67:48:76:83:11:f4:c5:7a:e8:63:80:f7:7e:
43:d4:01:d1:5d:7b:78:60:47:3a:0c:71:58:6f:0c:
b5:13:9d:76:29:52:44:20:ea:5a:b1:08:1e:36:6d:
c4:1b:49:e2:65:54:85:f6:97:8c:f8:85:32:1f:50:
03:cd:70:c1:7a:69:b2:c9:1a:31:35:d2:45:b4:2f:
d8:71:11:2c:96:67:4c:21:ae:36:58:1a:71:68:be:
d3:83:2d:d4:94:4e:94:69:35:52:b0:aa:6b:1f:3c:
10:10:76:88:56:ab:0c:53:fe:24:be:e4:12:ea:06:
8c:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:42:30:47:69:6F:44:59:3C:C1:DD:CD:5C:8F:CE:B5:A0:BE:AB:DD
X509v3 Authority Key Identifier:
keyid:AA:1E:24:BE:21:73:46:07:BE:18:B9:3D:D7:27:BB:06:95:02:FD:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/64f666bdaccc96943f7d7ccb43d6b7d2046d0633.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ea4e93cf-258e-4095-b153-52da0ff5def7/249f1b8bc42a4b42ded9f4a077b4faab8c2d9477.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/ea4e93cf-258e-4095-b153-52da0ff5def7/64f666bdaccc96943f7d7ccb43d6b7d2046d0633.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.225.0.0/22
Signature Algorithm: sha256WithRSAEncryption
0f:d4:ff:53:1f:78:23:e0:dc:ba:a0:96:5e:b8:6f:6f:ae:9d:
91:47:ee:1e:ca:d2:54:fa:ae:87:5a:1d:d9:8b:61:76:f2:09:
15:63:e6:ff:7e:99:d3:bd:e7:1c:02:55:b1:7a:41:80:c3:3d:
57:e2:85:a4:fa:3b:0c:2d:65:61:ad:77:fd:05:1c:e2:88:47:
e5:3f:a4:c9:42:a6:81:62:e0:f4:77:cb:4d:4e:38:b5:b5:03:
98:42:e9:94:2a:df:61:db:d1:5f:52:18:22:18:99:0e:39:f9:
b2:63:f8:ed:d2:c5:bb:03:77:c1:1b:da:84:00:c3:23:49:e6:
38:94:27:61:d3:25:c9:4e:f3:99:d0:06:89:9c:8a:5e:31:11:
85:22:fc:c2:a0:2b:8c:29:61:29:c0:8d:e1:fa:6d:16:26:10:
66:90:b3:b9:57:16:a1:d5:df:67:17:95:10:d1:e5:5c:c5:c8:
da:55:d5:f9:6a:ac:b6:fd:bd:8c:e2:a2:cc:03:a8:ac:cd:e6:
d3:67:ef:6c:5f:a0:bc:e3:dd:3e:64:85:74:37:24:01:04:b4:
8e:93:da:13:a7:e2:6c:b6:b9:cb:ce:ea:38:1e:53:a0:db:7c:
de:dc:9a:93:75:2d:d4:1b:72:c6:16:80:38:6b:d8:0e:8c:69:
2d:a4:17:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:41 2024 by rpki-client on console-ams.rpki-client.org