Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ea6483d8-690c-49b3-83a7-905ea284e6ed/ab023f9c61db0504e6bd6ccc56f036c1c9f3678c.roa
File: ab023f9c61db0504e6bd6ccc56f036c1c9f3678c.roa (raw, json)
Hash identifier: BzSHt9WN4CGXHgY6V6+Q5gM2fDqgSeUQjmlzv5FkdlQ=
Subject key identifier: BE:81:6B:6A:C1:B3:89:E4:F3:24:8C:39:72:2F:AA:11:9E:36:E4:82
Certificate issuer: /CN=aa80ae534a6e88b737ea558d8a561cc2d4f32534
Certificate serial: 012022
Authority key identifier: B1:60:21:B8:03:26:8D:3F:AA:E0:AD:9A:C7:A3:26:1B:CC:BA:1D:24
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/aa80ae534a6e88b737ea558d8a561cc2d4f32534.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/ea6483d8-690c-49b3-83a7-905ea284e6ed/ab023f9c61db0504e6bd6ccc56f036c1c9f3678c.roa
Signing time: Tue 20 Jun 2023 22:23:50 +0000
ROA not before: Mon 19 Jun 2023 22:23:50 +0000
ROA not after: Fri 20 Jun 2025 22:23:50 +0000
asID: 265607
IP address blocks: 45.188.108.0/22 maxlen: 24
2806:363::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73762 (0x12022)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa80ae534a6e88b737ea558d8a561cc2d4f32534
Validity
Not Before: Jun 19 22:23:50 2023 GMT
Not After : Jun 20 22:23:50 2025 GMT
Subject: CN=ab023f9c61db0504e6bd6ccc56f036c1c9f3678c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:72:23:db:5e:2d:16:fa:d9:ad:dd:00:58:0b:
4c:d1:9a:58:47:a4:cb:c2:8c:13:52:fc:5f:bd:13:
44:ac:4a:49:ac:93:bf:89:99:3f:0e:2c:f8:0b:d6:
9a:f1:fb:da:de:bc:df:6c:bf:d5:ee:13:ac:4f:d4:
56:04:ef:8a:b3:8e:68:16:5e:6c:7b:05:b7:22:16:
dd:ec:c6:17:f4:c5:7f:51:3d:00:1f:bc:b6:fd:e5:
84:ac:53:58:d9:0d:a1:5c:a3:56:62:ce:3a:e9:c2:
45:62:78:45:5f:56:12:96:fb:e9:02:18:54:88:11:
f3:16:1a:bd:6b:71:90:c2:9e:8a:2c:43:2b:69:34:
d5:9a:12:89:95:76:4a:92:5d:bb:02:79:59:44:10:
13:75:6c:83:e3:58:a8:ac:fe:4f:c9:85:de:b5:c6:
ed:b5:d2:37:0a:f7:12:1f:9e:e9:1e:18:75:fb:b2:
80:0c:3c:95:d7:00:0f:4e:e8:f9:36:ed:91:88:ee:
64:cd:5b:eb:2c:f0:19:18:b4:33:34:2d:1c:0b:36:
a6:e7:03:5b:02:d6:e7:44:7f:e5:26:64:0d:8a:0e:
39:06:ef:a3:7a:4a:45:c9:0b:5d:93:67:3b:c1:dc:
29:89:50:ad:9e:38:ce:9d:a3:4f:de:55:ff:a1:67:
6f:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:81:6B:6A:C1:B3:89:E4:F3:24:8C:39:72:2F:AA:11:9E:36:E4:82
X509v3 Authority Key Identifier:
keyid:B1:60:21:B8:03:26:8D:3F:AA:E0:AD:9A:C7:A3:26:1B:CC:BA:1D:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/aa80ae534a6e88b737ea558d8a561cc2d4f32534.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ea6483d8-690c-49b3-83a7-905ea284e6ed/ab023f9c61db0504e6bd6ccc56f036c1c9f3678c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/ea6483d8-690c-49b3-83a7-905ea284e6ed/aa80ae534a6e88b737ea558d8a561cc2d4f32534.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.188.108.0/22
IPv6:
2806:363::/32
Signature Algorithm: sha256WithRSAEncryption
18:f7:b7:4e:ae:fd:81:e5:98:88:c7:0e:d2:6e:24:64:4f:68:
cc:6b:95:9b:78:db:45:ff:3e:cd:43:ad:0c:a1:8a:38:14:3c:
37:08:59:48:5d:be:83:5e:5d:78:18:74:a2:3d:28:83:5c:a0:
f5:7c:66:59:2b:24:9c:fa:52:8e:97:aa:35:30:a3:9b:9d:ec:
7b:17:87:3c:2c:da:23:c7:2b:27:ab:ec:4b:7b:90:11:c9:36:
0d:55:84:95:f3:bc:36:ae:63:87:91:18:e0:ef:f7:72:44:75:
b2:4a:44:fa:b3:74:8b:72:d2:3b:0c:9a:00:98:23:87:43:6f:
8b:02:c9:8e:0e:46:1e:dd:33:70:08:cb:cd:ba:98:61:ab:42:
bb:21:e5:35:cb:ff:92:7c:5b:df:bb:a3:d4:c3:cb:83:03:22:
2c:65:8e:ad:d1:16:d5:62:33:de:24:f8:d2:d9:22:7c:c4:5e:
69:02:07:04:7a:63:ac:3f:8e:c9:34:10:c0:3e:e7:d2:14:6d:
bf:6f:ad:94:8c:43:eb:3b:47:1f:ab:c6:6f:a3:64:f1:63:29:
8d:4e:83:fa:8b:88:fb:16:19:b2:bb:ac:e1:2a:93:f2:38:dd:
1a:40:43:e3:13:da:ad:70:30:55:74:5c:5d:90:f4:dd:bc:26:
74:c1:c1:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:50 2024 by rpki-client on console-ams.rpki-client.org