Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f15396bb-f79d-43ce-9ba9-9eb702067f91/cf1904e6778357a0136939235900506c05ffea80.roa
File: cf1904e6778357a0136939235900506c05ffea80.roa (raw, json)
Hash identifier: fHzT/EeViDXzeNpnOG9nUxAfIgP1n7M88vNOghZBHLA=
Subject key identifier: 93:4B:9F:CA:FA:6A:DE:5F:83:47:07:06:CB:04:54:5A:25:CF:DA:40
Certificate issuer: /CN=4a3a2ab3d06d0440522fa070bc18ce8d8e9cf003
Certificate serial: 256FE0
Authority key identifier: 2A:03:50:BA:30:19:DB:A9:B8:18:CE:20:1B:F4:BB:51:A1:8D:99:54
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4a3a2ab3d06d0440522fa070bc18ce8d8e9cf003.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/f15396bb-f79d-43ce-9ba9-9eb702067f91/cf1904e6778357a0136939235900506c05ffea80.roa
Signing time: Thu 21 Mar 2024 19:09:57 +0000
ROA not before: Thu 21 Mar 2024 19:09:56 +0000
ROA not after: Sat 21 Mar 2026 19:09:56 +0000
asID: 265684
IP address blocks: 45.5.116.0/24 maxlen: 24
45.5.117.0/24 maxlen: 24
45.5.118.0/24 maxlen: 24
45.5.119.0/24 maxlen: 24
45.186.104.0/24 maxlen: 24
45.186.105.0/24 maxlen: 24
45.186.106.0/24 maxlen: 24
45.186.107.0/24 maxlen: 24
45.228.233.0/24 maxlen: 24
45.228.234.0/24 maxlen: 24
45.228.235.0/24 maxlen: 24
2803:e1c0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2453472 (0x256fe0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a3a2ab3d06d0440522fa070bc18ce8d8e9cf003
Validity
Not Before: Mar 21 19:09:56 2024 GMT
Not After : Mar 21 19:09:56 2026 GMT
Subject: CN=cf1904e6778357a0136939235900506c05ffea80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:39:45:43:c1:da:fc:4c:8c:32:4c:5c:8f:db:
de:a6:5a:1e:ae:64:60:66:70:e8:99:3d:5a:95:08:
3c:81:37:d8:b9:09:7f:9e:90:ff:b3:9f:86:9f:89:
a4:3a:c1:55:7d:ab:4a:1a:e1:b6:00:94:b7:ca:b9:
65:72:b7:85:ab:40:ad:04:52:d7:5d:7d:23:e9:91:
6b:fb:0b:05:37:86:7c:09:9e:55:26:8f:3b:94:06:
ab:61:ae:9d:80:0a:b3:eb:be:53:ed:df:f0:c6:b9:
c0:d6:d5:e6:0d:50:fb:d8:96:7d:40:45:54:8f:bf:
88:ba:30:e5:2a:a3:b7:56:e7:2c:80:ed:26:b5:84:
09:62:d4:26:90:7c:ad:8f:9b:96:6d:13:ff:63:9c:
56:02:91:9b:46:d3:33:05:23:e5:84:9b:ca:73:38:
a8:26:93:eb:29:db:2b:3f:b6:9e:1e:af:bf:d7:70:
4e:e6:cf:05:0c:cf:59:d9:16:d5:40:91:3f:0b:fc:
bd:40:a1:7d:6a:0c:db:db:b2:31:05:05:99:ff:d5:
c7:ab:32:d6:08:21:9d:2a:99:d3:2d:9b:1f:eb:83:
90:f4:62:bc:37:2e:f8:55:3e:c3:2c:bd:03:29:bc:
ae:20:1f:6e:bd:1b:35:8c:15:8c:10:41:1f:77:59:
e3:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:4B:9F:CA:FA:6A:DE:5F:83:47:07:06:CB:04:54:5A:25:CF:DA:40
X509v3 Authority Key Identifier:
keyid:2A:03:50:BA:30:19:DB:A9:B8:18:CE:20:1B:F4:BB:51:A1:8D:99:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4a3a2ab3d06d0440522fa070bc18ce8d8e9cf003.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f15396bb-f79d-43ce-9ba9-9eb702067f91/cf1904e6778357a0136939235900506c05ffea80.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/f15396bb-f79d-43ce-9ba9-9eb702067f91/4a3a2ab3d06d0440522fa070bc18ce8d8e9cf003.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.5.116.0/22
45.186.104.0/22
45.228.233.0-45.228.235.255
IPv6:
2803:e1c0::/32
Signature Algorithm: sha256WithRSAEncryption
4f:11:28:d8:68:d1:16:fe:0f:fd:5b:05:26:cc:e7:ac:d0:2b:
ea:cc:ac:b0:bd:a3:e3:aa:93:7a:06:03:1d:ba:42:f0:91:00:
48:77:ca:73:c7:6c:7f:bd:c1:68:10:f5:44:89:05:d9:0e:9e:
23:e3:4a:58:8a:64:7f:8f:f4:30:8e:03:78:58:66:6f:61:68:
5c:59:a5:ca:54:e2:ed:1b:80:bd:60:68:d4:62:e4:f2:9f:85:
3d:b0:a1:a5:80:ac:d9:b1:1e:5d:2e:8b:0e:1c:d9:98:d7:b2:
62:ac:6e:8a:c4:b8:9c:2c:01:17:d2:ab:bf:6d:84:5d:48:6d:
73:7e:07:e6:0a:c6:17:76:62:95:09:ef:6f:4b:e3:dd:09:d7:
c9:f6:b7:57:b0:e3:b8:8c:31:31:de:1d:13:96:8b:22:ce:8e:
a3:88:9a:00:e8:0e:12:10:71:ba:c3:ce:62:d5:a9:b2:c8:c4:
75:3e:57:be:86:c4:eb:b8:c5:82:f6:33:58:40:b3:49:9c:47:
d2:20:81:d2:36:a0:b7:26:c5:7c:b3:51:fb:47:86:e0:83:ef:
fd:8e:85:28:77:0f:94:33:12:ed:82:18:56:83:c3:5a:b9:04:
71:25:89:f8:60:71:15:c3:ff:52:d7:3c:ef:8e:8c:69:ea:38:
a9:78:37:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:43 2024 by rpki-client on console-ams.rpki-client.org