Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/fc2acae1-4d2d-4021-ae24-953534ca6efe/04f67715160a3c5195e9095ffda868e8b1fe01f0.roa
File: 04f67715160a3c5195e9095ffda868e8b1fe01f0.roa (raw, json)
Hash identifier: AusqbIsTVZoq30rVNJq/ZgJxBh4tjee3ioCyJ/x9mCs=
Subject key identifier: B6:8F:28:4A:97:C8:96:C9:AF:66:FD:B2:71:39:C9:65:CC:35:B2:BA
Certificate issuer: /CN=3a0b642c22955b5add812a8a0c66c25349002a5b
Certificate serial: 07F0E7
Authority key identifier: 9F:C8:3A:F8:78:01:CF:C4:21:99:CF:E6:4E:CE:70:CE:F8:8D:AD:13
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3a0b642c22955b5add812a8a0c66c25349002a5b.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/fc2acae1-4d2d-4021-ae24-953534ca6efe/04f67715160a3c5195e9095ffda868e8b1fe01f0.roa
Signing time: Wed 24 Mar 2021 14:35:17 +0000
ROA not before: Wed 24 Mar 2021 14:35:17 +0000
ROA not after: Tue 24 Mar 2026 14:35:17 +0000
asID: 27951
IP address blocks: 45.5.182.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 520423 (0x7f0e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a0b642c22955b5add812a8a0c66c25349002a5b
Validity
Not Before: Mar 24 14:35:17 2021 GMT
Not After : Mar 24 14:35:17 2026 GMT
Subject: CN=04f67715160a3c5195e9095ffda868e8b1fe01f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:b8:f7:a7:c5:56:9a:ef:70:00:ce:c7:fb:3d:
7f:d1:d3:15:4f:83:aa:be:d5:fc:60:98:e0:6a:90:
4b:43:4d:c4:96:35:f3:df:19:de:06:24:52:d4:12:
e7:ff:44:2e:05:8d:69:ab:81:a9:74:c9:bc:ac:09:
51:14:23:b6:2e:ae:81:b4:fd:7b:43:e3:c5:ac:16:
12:66:0f:0b:30:a6:94:b0:29:3b:c8:a1:fd:8b:c7:
25:37:cb:b1:bf:46:fc:8e:bd:ae:56:95:65:5d:2e:
00:c6:7c:f8:7d:66:2e:8d:d9:cb:9b:c9:9d:bc:b9:
c5:38:62:76:d3:69:7a:4c:49:a8:94:1a:75:68:8a:
10:9e:ba:47:81:18:75:f7:cf:84:46:12:cb:12:42:
d5:14:74:e0:ce:0d:b6:05:c3:63:7a:96:2c:d7:ad:
d5:cb:87:74:50:6a:c1:06:a7:6b:e9:d7:49:54:bc:
96:c3:54:a3:39:7d:df:fe:67:06:6b:00:f2:9a:85:
64:cc:1f:8b:b7:89:6d:92:60:4c:53:22:59:c3:bf:
b7:6a:c4:83:99:94:02:19:66:96:89:41:39:90:a5:
a1:70:42:c5:23:28:48:82:b5:9c:6b:fd:d5:4d:67:
eb:cd:19:bd:c2:7f:4d:57:0c:1e:1f:8d:59:0b:c6:
5b:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:8F:28:4A:97:C8:96:C9:AF:66:FD:B2:71:39:C9:65:CC:35:B2:BA
X509v3 Authority Key Identifier:
keyid:9F:C8:3A:F8:78:01:CF:C4:21:99:CF:E6:4E:CE:70:CE:F8:8D:AD:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3a0b642c22955b5add812a8a0c66c25349002a5b.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/fc2acae1-4d2d-4021-ae24-953534ca6efe/04f67715160a3c5195e9095ffda868e8b1fe01f0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/fc2acae1-4d2d-4021-ae24-953534ca6efe/3a0b642c22955b5add812a8a0c66c25349002a5b.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.5.182.0/23
Signature Algorithm: sha256WithRSAEncryption
11:34:c4:5a:95:9c:d5:18:56:c8:43:cd:8f:21:86:40:0e:3a:
4b:14:48:00:99:ae:b3:a3:df:23:fd:60:c9:3c:52:6d:4b:d0:
67:e8:21:d4:29:24:28:f6:5c:da:07:21:59:b0:5b:c0:45:da:
66:03:75:8f:b0:95:a2:b8:5b:80:b6:f1:48:8a:c4:82:5a:40:
ca:f1:fd:a5:0b:b6:f5:9a:7e:df:8d:92:f3:39:0b:b9:a3:93:
c0:d9:df:04:90:9f:a8:74:e3:93:62:69:ee:d7:7f:19:c9:02:
5c:88:2e:ed:7b:f7:e1:2a:dd:61:61:ce:ec:08:4b:2d:32:e8:
f8:04:a6:0b:23:85:67:3d:34:29:ac:52:ee:65:77:2a:2a:ff:
34:07:6e:f0:4d:16:88:b2:46:35:42:5c:1e:6f:60:92:1f:41:
67:ab:2f:6b:58:b2:cb:09:7d:51:fb:6f:e9:b3:5d:88:8d:51:
38:c4:4c:66:41:48:2e:03:6b:76:74:91:76:df:7d:1e:dc:da:
c2:68:ab:ab:6b:d5:fb:ae:bc:71:f5:76:77:54:c9:8b:d2:5a:
1d:4e:11:b1:bc:74:2b:0d:92:91:8c:3f:23:9b:37:d7:1d:9f:
ec:47:27:f5:7a:e3:a6:72:65:00:12:65:53:60:53:b0:2f:e9:
3e:c9:d1:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:56 2024 by rpki-client on console-ams.rpki-client.org