Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f136e942-1849-49a7-a9f8-46f6106ec54d/cdab3b5a0206e9bf91ec02c938bf98930f642cf7.roa
File: cdab3b5a0206e9bf91ec02c938bf98930f642cf7.roa (raw, json)
Hash identifier: iEBieiuV7yFOS0qXX75nJyvo0GjkhmX6vjAYXn1kTRE=
Subject key identifier: 6F:6B:69:87:B4:F7:0A:EB:32:50:E1:E2:AC:E0:29:4F:77:92:E5:E0
Certificate issuer: /CN=58f96ca109bc5993a1bf6e91b30fce649102e01e
Certificate serial: 79E8
Authority key identifier: 69:2C:0F:D8:64:11:92:31:6A:77:37:C1:F2:3B:14:13:71:32:74:12
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/58f96ca109bc5993a1bf6e91b30fce649102e01e.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/f136e942-1849-49a7-a9f8-46f6106ec54d/cdab3b5a0206e9bf91ec02c938bf98930f642cf7.roa
Signing time: Mon 09 Oct 2023 01:50:35 +0000
ROA not before: Sun 08 Oct 2023 01:50:35 +0000
ROA not after: Thu 09 Oct 2025 01:50:35 +0000
asID: 64153
IP address blocks: 45.68.40.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 31208 (0x79e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58f96ca109bc5993a1bf6e91b30fce649102e01e
Validity
Not Before: Oct 8 01:50:35 2023 GMT
Not After : Oct 9 01:50:35 2025 GMT
Subject: CN=cdab3b5a0206e9bf91ec02c938bf98930f642cf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:90:da:78:72:5a:b6:ac:e9:8d:b9:d1:ab:a1:
f0:ea:38:8f:40:14:0e:db:7f:64:d8:0c:44:7d:14:
d5:5d:c0:30:71:cf:15:16:50:8e:17:cc:f5:6f:7e:
5a:ed:08:43:d8:cd:d8:4b:10:17:8d:18:4d:3a:3c:
8c:23:5d:ed:14:57:ea:2e:50:b6:69:42:26:31:6e:
2f:2b:a9:c2:9d:11:fd:3f:7e:9d:70:4d:ab:b5:ed:
55:7b:9c:f5:0c:e7:8e:3b:fa:c8:7d:b3:7a:7a:4a:
59:8b:b6:93:e0:e2:12:a6:99:ea:d6:13:f7:9d:ee:
a0:fa:e1:3a:92:5c:8e:6a:e3:80:27:84:18:21:4a:
3f:2e:3e:81:00:ef:50:f9:b4:84:8f:22:e8:5d:5b:
92:b1:b6:c8:b5:45:23:73:9f:71:b7:07:c1:98:00:
90:79:b7:33:75:96:35:01:23:28:de:92:f1:40:0c:
7d:91:9d:0d:33:31:91:48:23:da:1f:bc:25:b0:7d:
1b:76:88:27:26:b5:cc:4c:16:f6:20:7c:68:a6:d4:
31:f2:80:de:d7:e4:df:29:b1:20:f5:6c:d6:51:cd:
74:92:47:49:7d:64:85:e6:14:90:36:a3:ad:e1:74:
94:30:da:56:8b:ab:29:fa:87:34:a7:c7:44:29:3b:
cc:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:6B:69:87:B4:F7:0A:EB:32:50:E1:E2:AC:E0:29:4F:77:92:E5:E0
X509v3 Authority Key Identifier:
keyid:69:2C:0F:D8:64:11:92:31:6A:77:37:C1:F2:3B:14:13:71:32:74:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/58f96ca109bc5993a1bf6e91b30fce649102e01e.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f136e942-1849-49a7-a9f8-46f6106ec54d/cdab3b5a0206e9bf91ec02c938bf98930f642cf7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/f136e942-1849-49a7-a9f8-46f6106ec54d/58f96ca109bc5993a1bf6e91b30fce649102e01e.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.68.40.0/22
Signature Algorithm: sha256WithRSAEncryption
03:5b:0e:60:3c:50:79:23:23:49:ec:89:3f:4a:12:f4:33:1c:
f7:77:74:84:19:bc:52:ca:47:3b:09:c2:27:83:70:39:fe:4d:
17:fe:0e:aa:87:ef:37:b3:f5:85:c5:4d:ca:32:f5:77:f0:64:
cd:44:39:a3:86:56:26:ad:53:94:3b:45:ba:7e:93:32:e7:e6:
71:26:cc:5e:8e:30:b9:d6:66:0e:8b:35:6d:57:0d:9d:22:8a:
b6:46:1e:f0:cd:fe:28:c6:ef:95:93:78:1d:a3:db:a0:96:8c:
54:82:9c:4f:50:fb:34:9b:15:80:2f:75:6f:03:88:a6:f7:5e:
cc:ca:c0:a9:7e:4f:18:d5:00:13:cc:ae:84:d8:eb:12:aa:37:
81:ed:01:cf:04:cc:d0:b3:43:69:ad:88:4d:fe:21:8c:24:5c:
a1:f6:39:70:56:64:cd:7b:23:59:4e:a1:9f:8e:5d:90:82:15:
94:d8:a7:75:f7:0d:af:84:e8:60:de:2a:59:e9:7c:46:91:e4:
21:28:07:67:03:e9:b9:31:2c:3b:ec:a9:b5:95:4d:15:0e:b9:
a5:1e:e2:67:77:00:18:08:01:c4:b7:ba:2a:df:38:62:d8:00:
e8:50:a1:0b:87:4b:03:90:02:0f:dd:5c:66:ab:2b:63:1e:8f:
1b:c1:57:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:12 2024 by rpki-client on console-fra.rpki-client.org