Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f11df6a4-341c-4c7d-82c7-76d731b32f05/24b8857e0483d700887fadf81fd2bd3cd8f48f3d.roa
File: 24b8857e0483d700887fadf81fd2bd3cd8f48f3d.roa (raw, json)
Hash identifier: 87SACV7NFC7ZTTU9P028QcBSK7nzwtt8UIanCvkGeKs=
Subject key identifier: DA:1C:80:2A:8F:21:35:5F:44:A5:69:C0:4E:9E:A1:C0:08:5C:CE:BB
Certificate issuer: /CN=fb91382a758277d413b7e5274dc3fa85f93dc57a
Certificate serial: 2242D8
Authority key identifier: 2C:0C:78:77:B0:80:61:12:92:F2:0F:E9:6C:ED:5F:0B:E3:CF:9B:D7
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fb91382a758277d413b7e5274dc3fa85f93dc57a.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/f11df6a4-341c-4c7d-82c7-76d731b32f05/24b8857e0483d700887fadf81fd2bd3cd8f48f3d.roa
Signing time: Sun 14 Jan 2024 07:30:01 +0000
ROA not before: Sun 14 Jan 2024 07:30:01 +0000
ROA not after: Tue 13 Jan 2026 07:30:01 +0000
asID: 263750
IP address blocks: 45.190.190.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2245336 (0x2242d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb91382a758277d413b7e5274dc3fa85f93dc57a
Validity
Not Before: Jan 14 07:30:01 2024 GMT
Not After : Jan 13 07:30:01 2026 GMT
Subject: CN=24b8857e0483d700887fadf81fd2bd3cd8f48f3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:35:65:26:67:09:15:43:10:bd:01:33:42:1b:
b8:25:63:2a:e7:ac:1c:0a:ec:fd:3c:e5:4b:f6:9f:
10:dc:0b:20:31:de:d2:f9:8a:28:73:b4:90:fd:c2:
a7:a3:19:32:77:bc:ec:44:d9:fc:af:70:dc:d1:41:
4d:fb:7b:8c:3d:cf:e2:7d:b7:99:34:ce:5a:7d:3f:
bd:96:09:51:cc:6d:1a:88:43:d5:ad:8c:85:ca:53:
32:82:07:c7:be:91:eb:88:0a:a7:00:74:26:19:b6:
ac:cd:24:c8:13:2f:6a:96:35:cb:26:b1:43:a2:ca:
9f:a3:cf:bd:83:73:1c:e0:84:63:04:98:47:8a:27:
32:91:56:3d:cc:f6:bf:58:3a:f0:83:10:c7:77:4d:
ce:cf:f0:1f:4c:6c:e4:b7:4e:36:30:42:d2:b6:b8:
2a:8f:26:f2:81:d5:72:a6:7e:5b:fa:dc:10:d6:40:
d9:60:b8:a0:18:9b:12:80:6c:59:46:f1:55:8f:10:
e9:09:7a:04:4f:4e:98:cb:ae:35:76:d1:1e:97:bd:
b6:09:1e:f7:fa:d0:bf:d4:ac:b4:2e:b0:3b:b3:bf:
d4:07:38:4a:39:49:55:d7:f9:b1:5f:eb:59:1d:4d:
43:16:f7:1e:6b:87:bc:31:42:65:ca:af:00:27:95:
2e:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:1C:80:2A:8F:21:35:5F:44:A5:69:C0:4E:9E:A1:C0:08:5C:CE:BB
X509v3 Authority Key Identifier:
keyid:2C:0C:78:77:B0:80:61:12:92:F2:0F:E9:6C:ED:5F:0B:E3:CF:9B:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fb91382a758277d413b7e5274dc3fa85f93dc57a.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f11df6a4-341c-4c7d-82c7-76d731b32f05/24b8857e0483d700887fadf81fd2bd3cd8f48f3d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/f11df6a4-341c-4c7d-82c7-76d731b32f05/fb91382a758277d413b7e5274dc3fa85f93dc57a.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.190.190.0/23
Signature Algorithm: sha256WithRSAEncryption
68:02:56:f4:14:51:b0:58:8b:c1:79:16:3b:c1:e2:26:3d:2f:
1d:97:5c:d2:3a:47:1f:cc:b2:f6:a9:56:4b:15:4c:7b:ba:8a:
c3:b9:98:e3:b6:5b:60:5e:b1:c7:4d:f7:6c:ad:af:25:ab:da:
bd:ee:b3:53:e3:fd:8e:d3:9c:e5:cd:c2:76:09:90:29:e1:e0:
05:eb:c6:9f:20:5d:35:4b:0a:91:ab:57:b3:ab:ad:9d:b1:d5:
2c:63:ad:21:50:b2:b0:72:b5:d7:64:20:7d:ee:37:06:00:f6:
ce:4b:98:49:ff:d1:c1:f9:e1:fd:13:9d:be:dd:94:b2:50:3d:
c9:55:63:d9:0d:26:09:5e:58:8d:ad:12:34:cc:36:ce:b4:92:
44:be:fc:f7:e4:c2:12:05:d8:18:48:2d:47:71:6d:fc:48:86:
15:e4:c3:28:74:86:19:5b:50:04:50:63:5f:9b:3a:7c:59:d9:
63:c3:c8:8e:35:59:1c:e3:f0:7d:9b:23:85:a1:30:65:a9:b7:
6c:5f:7d:3c:91:6f:cb:e8:c2:45:b1:50:3f:a0:f0:c3:f8:8d:
1d:cf:c6:20:3c:c6:58:38:26:2a:39:c7:a5:79:33:eb:12:3c:
87:d1:c6:89:db:9d:1a:6f:6a:27:cd:db:57:8f:04:d8:30:10:
e1:7f:45:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:53 2024 by rpki-client on console-ams.rpki-client.org