Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/fece80fb-b8bb-4d10-b4c2-249d801884fa/1276a952157699bd1578eb4fcbb28909a439ba42.roa
File: 1276a952157699bd1578eb4fcbb28909a439ba42.roa (raw, json)
Hash identifier: ejFKiRQCReWtC/x/q0NirfWPp6XCKTy9w1Rzzf7tVAI=
Subject key identifier: BE:EC:E4:DA:FB:A2:84:22:AF:3D:7F:53:A8:D5:2A:47:70:5C:F2:76
Certificate issuer: /CN=cb320b79e8976c901f192c3b7778287f392e9486
Certificate serial: 0D33E9
Authority key identifier: AF:95:77:E7:E8:85:BB:2A:53:5B:C9:A4:17:2F:B3:A0:2E:24:6A:C1
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cb320b79e8976c901f192c3b7778287f392e9486.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/fece80fb-b8bb-4d10-b4c2-249d801884fa/1276a952157699bd1578eb4fcbb28909a439ba42.roa
Signing time: Wed 24 Mar 2021 14:34:19 +0000
ROA not before: Wed 24 Mar 2021 14:34:19 +0000
ROA not after: Tue 24 Mar 2026 14:34:19 +0000
asID: 269733
IP address blocks: 45.239.120.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 865257 (0xd33e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb320b79e8976c901f192c3b7778287f392e9486
Validity
Not Before: Mar 24 14:34:19 2021 GMT
Not After : Mar 24 14:34:19 2026 GMT
Subject: CN=1276a952157699bd1578eb4fcbb28909a439ba42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:00:4e:02:a0:99:32:81:8a:f0:0b:0a:7e:d1:
13:22:6a:79:1c:df:15:8e:c1:ec:0b:24:2a:45:96:
a6:2d:41:a3:5d:c9:f4:4c:f1:54:42:74:c6:ea:13:
17:ec:6b:b3:16:b0:28:27:b6:35:51:30:62:e8:72:
98:3d:b3:4e:d3:14:19:4f:c6:52:7d:e8:7f:24:8b:
a9:e6:63:46:e2:ac:1c:bf:00:96:7e:e7:99:ca:52:
d7:05:12:01:22:a5:4b:a9:ec:00:2a:1f:83:d6:32:
4a:5d:58:67:34:78:c4:5f:9e:ce:08:85:36:f1:d4:
d8:55:2d:82:7a:59:b5:ef:14:02:89:55:05:16:bf:
d2:29:26:36:b0:80:3c:8b:65:96:36:16:d1:0e:2c:
f3:7b:8e:59:27:05:af:76:61:a2:92:d7:bd:d2:93:
30:f9:54:a7:88:79:9d:0a:8f:fb:71:41:da:cd:89:
9b:b2:f8:1f:ea:8d:48:46:4a:2f:5f:fc:19:c8:80:
f9:b8:bd:ee:33:f4:3f:a4:71:d9:f2:3a:70:e1:a1:
a0:97:57:4c:ad:74:d0:41:7e:51:ac:7c:a0:36:e5:
1c:16:31:69:b5:df:4a:21:10:76:9a:7d:8f:85:53:
63:3b:fe:5f:f0:78:ac:fb:dd:88:fc:18:11:71:8f:
42:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:EC:E4:DA:FB:A2:84:22:AF:3D:7F:53:A8:D5:2A:47:70:5C:F2:76
X509v3 Authority Key Identifier:
keyid:AF:95:77:E7:E8:85:BB:2A:53:5B:C9:A4:17:2F:B3:A0:2E:24:6A:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cb320b79e8976c901f192c3b7778287f392e9486.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/fece80fb-b8bb-4d10-b4c2-249d801884fa/1276a952157699bd1578eb4fcbb28909a439ba42.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/fece80fb-b8bb-4d10-b4c2-249d801884fa/cb320b79e8976c901f192c3b7778287f392e9486.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.239.120.0/22
Signature Algorithm: sha256WithRSAEncryption
75:e8:fb:24:88:f4:4b:b3:65:57:d5:6c:92:39:24:22:55:ae:
70:69:ae:cd:28:19:28:8e:ea:dd:6c:0b:e4:c6:00:bb:15:49:
f4:2d:79:20:ce:10:09:45:6a:e2:7f:2f:1e:20:aa:03:a3:f4:
94:38:7a:4f:f4:81:f8:2d:92:a5:15:c0:59:78:c0:3c:cf:bf:
f0:02:16:5b:d6:14:f7:a0:29:fa:10:74:04:92:77:7d:ba:d4:
3a:2c:f5:83:73:07:99:2c:9f:b6:62:20:49:73:f3:97:9e:10:
95:18:28:e5:22:10:af:f4:7a:62:70:b1:1a:00:e8:21:b9:1d:
1e:a1:e9:40:a0:30:2f:f5:3e:35:09:23:99:e9:54:b0:28:ec:
02:49:39:b9:2d:64:e9:ef:52:1c:81:ba:bb:f7:55:47:7f:7c:
a7:03:e2:80:dc:42:45:6e:8a:a5:94:10:71:13:25:fd:79:4b:
17:97:0e:26:f2:52:72:1c:cf:77:b4:18:64:9f:d4:1f:0a:31:
c8:47:cd:65:d4:16:d6:20:1a:d8:43:77:7a:71:35:c2:e2:55:
55:77:a0:87:24:a6:94:43:f9:c7:04:c4:c1:dd:0a:79:81:a4:
ba:1f:62:36:4d:ff:cf:e4:4d:02:b2:b6:06:3d:a5:57:ab:b9:
86:3c:f8:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:54 2024 by rpki-client on console-ams.rpki-client.org