Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f4997a4b-4015-4a0b-b9e7-4be167340d41/35b54ebffe5e0851edfbca883431711680f72e3f.roa
File: 35b54ebffe5e0851edfbca883431711680f72e3f.roa (raw, json)
Hash identifier: rDrnc2WkA+81m6dsKF8OffjmIuHWllYUnP8b4BgAelA=
Subject key identifier: 53:0C:5B:6B:09:0D:D4:C1:CD:50:3C:F7:CC:1C:84:AA:3D:31:58:89
Certificate issuer: /CN=3e95a63d17dd730b1ef48c1a5faae09b393461ce
Certificate serial: 1C363E
Authority key identifier: DD:57:B3:E2:B2:FE:45:0E:A0:44:9B:F6:56:DF:3F:9A:9B:06:12:3F
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3e95a63d17dd730b1ef48c1a5faae09b393461ce.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/f4997a4b-4015-4a0b-b9e7-4be167340d41/35b54ebffe5e0851edfbca883431711680f72e3f.roa
Signing time: Sat 21 Jan 2023 03:56:22 +0000
ROA not before: Tue 23 Mar 2021 14:36:21 +0000
ROA not after: Tue 24 Mar 2026 14:36:21 +0000
asID: 21662
IP address blocks: 45.191.0.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1848894 (0x1c363e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e95a63d17dd730b1ef48c1a5faae09b393461ce
Validity
Not Before: Mar 23 14:36:21 2021 GMT
Not After : Mar 24 14:36:21 2026 GMT
Subject: CN=35b54ebffe5e0851edfbca883431711680f72e3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:8b:2c:e8:38:30:a5:8d:70:2a:3c:f8:df:40:
ce:c4:e6:25:df:af:ef:d9:af:fe:85:ed:f0:47:b8:
64:4b:c1:21:47:10:35:40:d8:b5:23:80:73:67:b3:
88:3b:75:73:64:75:04:87:c9:ad:90:be:40:7c:7e:
58:ff:3d:eb:3c:9c:d7:be:1b:9e:18:ce:46:88:d7:
5c:e8:0c:dd:a6:26:5d:2f:0c:27:7b:9f:a1:5f:9b:
fb:f3:d3:35:b5:13:0b:6b:a2:c7:b9:4f:6c:56:72:
e5:cc:76:0d:e3:f8:51:5b:fe:21:79:26:e9:3a:98:
28:5e:f9:20:51:ac:76:1e:8b:81:d4:43:03:42:4c:
01:11:c1:80:b9:70:fb:86:44:fa:4f:62:42:31:a2:
0f:b5:b3:fb:b3:87:e4:8e:57:21:ca:77:97:bc:9e:
78:45:a0:be:a3:29:90:34:9a:c7:49:78:f1:8d:3b:
e1:f5:a7:ca:87:f8:01:7b:05:c6:4b:d2:ae:7e:82:
89:a3:02:fb:2f:84:a9:2e:c3:ca:31:0a:25:fa:33:
58:0b:33:0d:b4:40:b1:a5:2d:ab:9a:57:21:7f:3d:
86:67:e0:52:fb:61:9b:16:0b:8a:c0:41:e4:bd:d0:
ca:57:58:70:33:32:a2:63:50:2a:83:3b:fd:52:5d:
06:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:0C:5B:6B:09:0D:D4:C1:CD:50:3C:F7:CC:1C:84:AA:3D:31:58:89
X509v3 Authority Key Identifier:
keyid:DD:57:B3:E2:B2:FE:45:0E:A0:44:9B:F6:56:DF:3F:9A:9B:06:12:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3e95a63d17dd730b1ef48c1a5faae09b393461ce.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f4997a4b-4015-4a0b-b9e7-4be167340d41/35b54ebffe5e0851edfbca883431711680f72e3f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/f4997a4b-4015-4a0b-b9e7-4be167340d41/3e95a63d17dd730b1ef48c1a5faae09b393461ce.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.191.0.0/22
Signature Algorithm: sha256WithRSAEncryption
5f:2b:2d:56:ce:74:24:ea:51:0a:a2:99:59:39:71:8f:05:72:
d1:85:1a:2f:d2:35:1c:6b:dd:77:31:7c:cf:35:0c:e8:4f:02:
b2:ae:cf:4c:a9:39:c2:87:83:6e:98:19:58:d3:22:6f:1f:b2:
9d:80:e2:64:a5:2f:1c:f9:dc:b5:d6:47:55:c9:8e:26:d7:8e:
06:19:b3:81:08:64:d1:56:d8:ee:b7:20:c7:6a:be:c2:8d:05:
cb:5d:87:34:3d:ef:d4:1c:74:6c:50:b3:17:2a:75:ee:47:b2:
23:4e:65:f8:3f:d1:f8:49:0a:d9:9b:39:6a:3f:97:d4:53:68:
97:f7:aa:b4:76:2d:04:63:3e:72:37:c1:91:61:6d:61:19:07:
a8:9b:14:30:97:78:09:f2:90:e0:dd:26:73:05:bb:62:7e:0b:
71:bb:f2:fe:3d:2a:e2:fc:ca:35:52:7f:cc:9c:61:50:db:b2:
36:58:43:f0:7a:5b:90:c7:66:21:f0:e5:b9:95:37:4d:0f:4d:
37:08:f8:4d:50:58:fe:0f:6a:25:99:f7:26:9c:ca:18:bc:a2:
85:8e:27:fd:85:1a:37:5b:3f:40:fc:8b:b8:dc:91:42:33:2a:
dd:8b:a7:21:4a:d6:52:7a:7d:8b:94:f8:3d:e7:0b:e1:ce:fc:
fa:78:ce:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:56 2024 by rpki-client on console-ams.rpki-client.org