Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f3e70c09-57f9-4c10-aa5a-c26c47b6e458/03ddcfe773243073f786271729f82540fcb0989d.roa
File: 03ddcfe773243073f786271729f82540fcb0989d.roa (raw, json)
Hash identifier: qwxuokQyrlvU2Se1MuAiTlfVuEL6CgB/yPeRWtsDp1U=
Subject key identifier: 54:8A:9A:4B:3F:4E:55:24:AE:16:A5:D6:82:33:2A:55:EE:E8:37:38
Certificate issuer: /CN=71aa3a686337a2f3b85e309b47afd1076b540c5c
Certificate serial: 01CA4F
Authority key identifier: 29:50:65:51:F5:83:16:B8:60:7B:0F:15:F2:49:D7:04:BB:64:9F:AE
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/71aa3a686337a2f3b85e309b47afd1076b540c5c.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/f3e70c09-57f9-4c10-aa5a-c26c47b6e458/03ddcfe773243073f786271729f82540fcb0989d.roa
Signing time: Tue 18 Jul 2023 23:14:11 +0000
ROA not before: Mon 17 Jul 2023 23:14:11 +0000
ROA not after: Fri 18 Jul 2025 23:14:11 +0000
asID: 265612
IP address blocks: 45.189.236.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117327 (0x1ca4f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71aa3a686337a2f3b85e309b47afd1076b540c5c
Validity
Not Before: Jul 17 23:14:11 2023 GMT
Not After : Jul 18 23:14:11 2025 GMT
Subject: CN=03ddcfe773243073f786271729f82540fcb0989d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:26:b7:0f:d6:1f:08:fd:76:e1:72:00:06:01:
48:9a:e5:92:e0:2b:02:96:f3:8d:dd:64:8e:6b:1e:
e0:8f:06:e3:7a:8e:fc:b0:68:e2:47:d8:a7:99:62:
b2:a8:e2:e2:c6:05:cc:8d:10:52:b4:84:43:28:ef:
7c:af:ef:f2:d1:9d:6a:e5:3f:af:66:ba:46:76:58:
66:53:d1:a2:98:b3:72:14:bb:2e:be:66:b8:ba:20:
86:2f:11:81:61:86:16:db:1a:43:b6:9f:31:47:21:
90:ac:21:f7:83:ff:eb:c9:e0:e6:69:26:07:3e:dc:
14:00:53:58:08:64:c1:49:aa:8d:5a:ae:9d:09:49:
c9:d3:5f:68:e3:07:e9:e2:e0:7a:5a:3a:57:91:55:
53:1d:1e:67:0b:60:87:ea:87:89:cb:42:05:d8:84:
39:98:c4:60:66:2e:78:5a:2d:b1:f0:61:83:e4:b4:
49:76:41:95:2c:f6:88:49:6f:f6:dc:65:c8:7a:83:
9f:72:b0:28:80:e2:63:29:0d:eb:7b:5b:f9:48:47:
85:40:60:0f:b0:86:a8:1d:c3:e4:02:62:15:eb:32:
d4:e1:05:ee:47:e1:10:c2:4b:b0:9e:c7:7f:af:09:
c3:28:72:28:e1:19:22:0b:ba:0d:e1:e4:ad:fb:a0:
ab:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:8A:9A:4B:3F:4E:55:24:AE:16:A5:D6:82:33:2A:55:EE:E8:37:38
X509v3 Authority Key Identifier:
keyid:29:50:65:51:F5:83:16:B8:60:7B:0F:15:F2:49:D7:04:BB:64:9F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/71aa3a686337a2f3b85e309b47afd1076b540c5c.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f3e70c09-57f9-4c10-aa5a-c26c47b6e458/03ddcfe773243073f786271729f82540fcb0989d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/f3e70c09-57f9-4c10-aa5a-c26c47b6e458/71aa3a686337a2f3b85e309b47afd1076b540c5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.189.236.0/22
Signature Algorithm: sha256WithRSAEncryption
09:fb:34:12:bc:97:3c:30:53:1e:14:73:67:28:b3:29:c4:19:
eb:fa:78:b9:a0:37:5d:e3:b9:73:06:9e:29:d7:4f:97:cb:d7:
c2:f0:d8:3b:08:ca:3c:2c:49:b0:65:fa:fe:7c:74:91:14:b8:
b0:ab:36:0c:8c:fd:7a:33:6f:34:72:9d:e2:62:d2:1f:a4:f3:
c7:d4:00:f9:c2:ad:2c:4f:47:92:0b:fb:3f:99:58:c7:44:ce:
55:30:58:e8:bb:15:fd:04:46:e4:bd:7d:60:b4:ef:83:6f:2c:
33:8a:06:45:90:bb:a4:d8:68:9a:fd:2a:41:5e:5d:42:f7:dc:
8d:f4:57:19:7c:3e:8a:c3:6f:a4:1e:ca:8b:88:88:9b:e5:09:
72:31:44:c9:f1:fe:40:69:0e:a0:3b:ea:82:79:87:f2:23:24:
01:2c:26:ac:00:ed:15:56:74:bb:f1:6f:53:6a:c9:b0:0b:a9:
89:4d:84:41:ce:15:72:12:f3:65:50:6a:fb:ec:be:02:5f:24:
f3:41:e6:9d:ee:a3:2b:7b:1f:bc:b5:12:cc:66:a9:94:78:e3:
6e:b0:98:c5:aa:e6:f1:99:2e:f0:76:18:88:ee:66:5a:2d:8c:
58:c5:8c:6e:8b:3a:f1:59:98:6e:4d:47:0d:cc:6c:f2:51:2c:
b7:c6:57:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:53 2024 by rpki-client on console-ams.rpki-client.org