Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ef834c18-3ac5-4b5c-9286-2c8337d2575a/00160be984b70b5d8fe908d83eb3611a601e0059.roa
File: 00160be984b70b5d8fe908d83eb3611a601e0059.roa (raw, json)
Hash identifier: GpMHO2Z5AUBNJM5c/FE/+y1YfHvNghsJ4mWe5hlIBnU=
Subject key identifier: D0:BC:7A:42:17:93:B0:00:8C:A9:31:06:F5:17:DB:0B:A2:DD:8C:D3
Certificate issuer: /CN=fa9527b858846f6022832bad81d0fc8bc215515f
Certificate serial: 0C55DF
Authority key identifier: 9F:56:40:B0:FE:BF:7D:87:6E:0B:34:7D:4A:0E:A0:68:B2:8B:4E:25
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fa9527b858846f6022832bad81d0fc8bc215515f.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/ef834c18-3ac5-4b5c-9286-2c8337d2575a/00160be984b70b5d8fe908d83eb3611a601e0059.roa
Signing time: Wed 24 Mar 2021 14:31:22 +0000
ROA not before: Wed 24 Mar 2021 14:31:22 +0000
ROA not after: Tue 24 Mar 2026 14:31:22 +0000
asID: 266896
IP address blocks: 45.239.107.0/24 maxlen: 24
2801:11:f000::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 808415 (0xc55df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa9527b858846f6022832bad81d0fc8bc215515f
Validity
Not Before: Mar 24 14:31:22 2021 GMT
Not After : Mar 24 14:31:22 2026 GMT
Subject: CN=00160be984b70b5d8fe908d83eb3611a601e0059
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:47:1b:19:1d:5f:2f:b9:6c:24:c9:a2:d8:ac:
70:e3:c6:2b:a1:eb:78:77:7b:1a:e0:08:5d:ee:b2:
08:39:56:94:73:74:ae:bb:6d:6d:f4:6f:11:2f:b6:
56:e1:43:fb:ed:6f:e1:2b:1e:a9:87:58:72:73:bb:
01:99:91:97:89:7c:ed:b3:49:91:a2:4b:19:85:ea:
24:0e:4e:a5:00:ac:42:86:c0:9e:6f:07:54:65:df:
8d:5b:bd:93:88:b6:d9:95:8a:a5:7d:3c:9e:d4:30:
ef:71:a8:c6:b6:e5:c9:94:76:f1:8b:00:41:d4:33:
9e:44:32:b7:03:a3:4a:1e:08:3c:99:ab:74:3f:78:
7e:b5:bd:7b:84:4d:62:82:97:7f:43:b5:03:3d:fe:
c7:a0:1e:39:41:ec:9e:86:a2:68:32:33:03:c7:d3:
c6:65:48:1c:f5:16:e7:7b:cf:7d:52:91:c6:a1:0a:
92:8c:57:aa:5e:83:81:c4:3e:b3:2b:71:d3:36:95:
b6:25:b2:09:ce:64:d7:02:ac:1c:d1:04:f4:b9:7f:
0d:82:b1:25:e1:44:0d:50:80:f9:3c:b4:ab:77:2b:
d0:6b:90:95:d6:51:39:97:00:65:9b:79:09:7e:40:
1e:bb:54:1a:6b:72:52:5c:ab:6f:d5:10:a6:0c:25:
f9:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:BC:7A:42:17:93:B0:00:8C:A9:31:06:F5:17:DB:0B:A2:DD:8C:D3
X509v3 Authority Key Identifier:
keyid:9F:56:40:B0:FE:BF:7D:87:6E:0B:34:7D:4A:0E:A0:68:B2:8B:4E:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fa9527b858846f6022832bad81d0fc8bc215515f.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ef834c18-3ac5-4b5c-9286-2c8337d2575a/00160be984b70b5d8fe908d83eb3611a601e0059.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/ef834c18-3ac5-4b5c-9286-2c8337d2575a/fa9527b858846f6022832bad81d0fc8bc215515f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.239.107.0/24
IPv6:
2801:11:f000::/48
Signature Algorithm: sha256WithRSAEncryption
4b:81:c4:ac:60:c2:85:17:e3:a5:af:3e:0b:eb:e1:ae:e1:47:
fb:38:e4:d7:ef:b3:c0:aa:0d:d5:4d:76:b5:04:86:97:06:2e:
18:29:b6:c3:b0:8a:1f:96:05:05:a9:c7:43:0f:6a:8a:d2:69:
61:8c:d7:83:09:9f:d6:d3:16:42:4e:5b:5e:a5:56:c1:69:5f:
bf:ad:96:73:2c:f0:42:a4:6f:2c:8a:df:9b:02:d7:31:0f:63:
57:f5:03:21:08:ab:50:48:16:6b:e8:fa:b3:d8:50:0a:ee:b5:
d8:4f:28:5e:06:7b:45:a2:2b:f7:25:34:b2:be:67:5f:2b:04:
4d:62:dc:8c:ed:56:71:28:e9:ce:54:a5:1b:c1:c1:69:27:f2:
1e:a6:59:83:c9:6c:13:67:2e:f5:b3:c1:4e:18:86:d0:41:11:
1c:7c:0b:b7:35:71:06:f7:0d:f0:4f:0a:ca:db:b0:1b:d4:50:
cf:92:8a:99:7e:4f:ea:62:3e:61:34:94:97:2b:3c:a9:13:2b:
f3:da:c5:7a:44:b9:46:f0:7d:59:65:90:62:60:e9:f1:37:9c:
a3:f9:db:57:bb:6c:74:7d:d3:7e:8d:1a:de:24:a6:cf:23:05:
dd:f9:91:fd:96:a0:9e:11:a2:84:c2:6d:08:cc:ac:f8:4a:48:
78:15:73:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:11 2024 by rpki-client on console-fra.rpki-client.org