Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f7cbb791-0118-44a2-942e-8264f6f91496/34c17575c9757a1fa4ee78c34b1e82e18e444721.roa
File: 34c17575c9757a1fa4ee78c34b1e82e18e444721.roa (raw, json)
Hash identifier: cYPJNx7ZXZ6Ajx5/G1k6C0t2nOthfstV6uVHEJmR72U=
Subject key identifier: 58:95:68:1A:77:EC:7F:E5:2F:6E:26:DF:F8:52:55:14:56:EC:85:CE
Certificate issuer: /CN=96b6385dac5d112ac08ad68e528602afddcc7d04
Certificate serial: 252452
Authority key identifier: 05:0C:07:7C:9B:CC:2C:E2:AF:AB:41:60:26:63:87:F7:AE:CC:01:7A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/96b6385dac5d112ac08ad68e528602afddcc7d04.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/f7cbb791-0118-44a2-942e-8264f6f91496/34c17575c9757a1fa4ee78c34b1e82e18e444721.roa
Signing time: Fri 23 Feb 2024 07:53:53 +0000
ROA not before: Fri 23 Feb 2024 07:53:52 +0000
ROA not after: Mon 23 Feb 2026 07:53:52 +0000
asID: 266783
IP address blocks: 45.189.112.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2434130 (0x252452)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96b6385dac5d112ac08ad68e528602afddcc7d04
Validity
Not Before: Feb 23 07:53:52 2024 GMT
Not After : Feb 23 07:53:52 2026 GMT
Subject: CN=34c17575c9757a1fa4ee78c34b1e82e18e444721
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:59:cf:6f:5b:35:5b:f1:39:81:db:4f:b4:5f:
f5:3d:b3:1a:c2:82:f8:12:43:03:ac:fd:02:64:53:
99:36:48:72:f5:47:ab:5d:46:55:45:d0:7b:8b:75:
06:19:88:53:16:15:e6:08:00:e3:87:de:52:af:dc:
c3:ac:39:98:72:a6:4f:c3:3e:01:53:5c:d8:2b:2c:
21:02:2c:d8:b9:df:e5:03:dd:3d:c0:22:38:c9:1b:
68:7e:67:f1:53:c4:7b:dd:ae:2a:ec:c2:60:a4:cf:
2f:0b:66:86:2e:42:e6:17:80:d2:be:6c:37:b3:d9:
ed:a3:d9:90:65:ef:75:93:01:51:a4:ab:cb:f4:c6:
03:a1:57:f0:8c:c8:b9:8e:7f:bd:b9:da:1a:56:13:
6e:d7:a8:16:21:3e:11:d5:f4:d8:75:d5:38:b3:fe:
fa:28:4d:7a:e0:3c:11:c5:3b:ff:c1:d0:79:1d:0b:
14:05:6e:67:63:89:f9:21:54:d6:e1:e4:1c:eb:7b:
15:de:c2:7b:79:f0:9e:c8:46:5a:04:5b:97:e2:cb:
45:e1:0b:bd:ab:d6:39:ec:b0:99:d7:53:1c:43:ff:
1e:52:47:b1:7e:6b:b9:0c:c8:67:43:a5:40:57:79:
be:56:f1:8c:e0:02:4e:16:22:8a:68:a4:17:43:00:
dd:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:95:68:1A:77:EC:7F:E5:2F:6E:26:DF:F8:52:55:14:56:EC:85:CE
X509v3 Authority Key Identifier:
keyid:05:0C:07:7C:9B:CC:2C:E2:AF:AB:41:60:26:63:87:F7:AE:CC:01:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/96b6385dac5d112ac08ad68e528602afddcc7d04.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f7cbb791-0118-44a2-942e-8264f6f91496/34c17575c9757a1fa4ee78c34b1e82e18e444721.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/f7cbb791-0118-44a2-942e-8264f6f91496/96b6385dac5d112ac08ad68e528602afddcc7d04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.189.112.0/22
Signature Algorithm: sha256WithRSAEncryption
5b:49:00:1f:20:3c:bb:bd:4c:00:e1:93:2c:c6:fe:f9:b8:eb:
35:79:8d:1c:79:35:61:d4:cc:77:aa:d5:ec:88:54:41:ef:56:
28:5c:23:78:a6:78:1e:76:3a:ac:0d:4a:51:b2:9e:cd:a6:36:
8d:fd:5e:90:28:6e:34:0d:eb:4f:93:0e:45:cb:fe:bc:49:bb:
03:16:6f:e7:84:ba:89:90:8d:09:fc:b9:13:f9:99:17:e5:2f:
07:82:6f:1d:ca:00:49:38:ad:34:58:1f:5f:8c:b2:fc:82:11:
5b:31:cd:bc:95:8f:f4:53:30:8f:53:a2:7b:a7:81:af:0d:a3:
38:e8:7d:10:1f:fa:7d:8d:ea:56:07:58:a6:bb:3d:b5:fc:b0:
92:f5:cf:15:20:54:3e:e8:dd:42:4a:7b:05:fc:04:f7:0a:ee:
55:1c:c7:e7:6e:8f:38:0b:36:d2:22:5b:a1:65:7d:39:9a:0d:
cc:56:c4:ba:bb:1c:6a:0d:56:d0:24:cd:18:9a:a8:04:c5:e7:
c8:3e:5a:d3:74:43:0e:45:63:2d:86:c3:d4:2e:b6:42:8c:38:
4c:f7:21:64:e1:0c:e0:ad:55:35:d5:59:48:ac:da:d9:c4:57:
72:0f:1a:33:d0:24:72:37:ea:52:1e:34:9f:02:72:78:d4:1a:
2d:a4:2a:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:53 2024 by rpki-client on console-ams.rpki-client.org