Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/fece80fb-b8bb-4d10-b4c2-249d801884fa/8a403aed8aeb50fe7363c703b2212f41eb541a78.roa
File: 8a403aed8aeb50fe7363c703b2212f41eb541a78.roa (raw, json)
Hash identifier: r/RpNfJQOd58PJYyIzLzZujjiDa32Ub+VG85LZQwqWQ=
Subject key identifier: AE:E9:DB:1F:49:61:C3:E4:B2:27:F9:E1:C7:27:46:83:74:24:19:1E
Certificate issuer: /CN=cb320b79e8976c901f192c3b7778287f392e9486
Certificate serial: 0D32FA
Authority key identifier: AF:95:77:E7:E8:85:BB:2A:53:5B:C9:A4:17:2F:B3:A0:2E:24:6A:C1
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cb320b79e8976c901f192c3b7778287f392e9486.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/fece80fb-b8bb-4d10-b4c2-249d801884fa/8a403aed8aeb50fe7363c703b2212f41eb541a78.roa
Signing time: Wed 24 Mar 2021 14:34:19 +0000
ROA not before: Wed 24 Mar 2021 14:34:19 +0000
ROA not after: Tue 24 Mar 2026 14:34:19 +0000
asID: 61503
IP address blocks: 45.239.120.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 865018 (0xd32fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb320b79e8976c901f192c3b7778287f392e9486
Validity
Not Before: Mar 24 14:34:19 2021 GMT
Not After : Mar 24 14:34:19 2026 GMT
Subject: CN=8a403aed8aeb50fe7363c703b2212f41eb541a78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:9d:bf:3e:1b:51:32:35:e2:81:1c:b4:13:5c:
b6:5f:ba:bb:7b:4c:e7:7c:5c:a8:7a:7b:cf:1e:36:
a4:a8:4a:08:25:7a:98:b1:46:cb:9e:19:aa:60:ef:
52:6e:7b:ce:78:70:2d:60:c7:fa:14:9d:99:2c:0c:
96:64:70:32:75:d1:78:af:56:88:f0:40:a9:6d:cd:
64:b5:21:19:58:a8:ab:db:1a:69:85:73:7f:23:49:
d6:37:32:90:1b:7a:71:91:d0:7d:74:d5:f4:73:d8:
99:5a:72:36:f4:3f:85:68:0b:d6:76:bc:d9:d5:35:
1e:44:58:3c:03:45:41:a8:8e:dc:a1:ea:1d:7e:f8:
ca:f3:3b:04:bb:11:8d:0e:7f:28:59:0d:ec:24:3d:
b9:3e:25:f7:05:53:81:4d:4b:c2:1b:04:53:ca:ac:
d2:6c:98:40:e2:4d:22:e0:03:f0:99:a3:a4:8b:a6:
81:8a:dd:6f:15:da:77:11:b0:59:ba:84:63:79:e5:
59:da:f9:08:e2:87:ab:a9:24:bf:a6:d8:8c:f9:3d:
ae:ed:dd:0a:00:05:49:42:97:c1:78:ef:b0:9f:0c:
18:e9:d9:bc:86:26:85:ac:1d:6b:f7:b3:21:1c:9e:
d7:b6:7d:50:7e:e2:5a:3f:89:d5:32:ee:b8:f4:e9:
4b:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:E9:DB:1F:49:61:C3:E4:B2:27:F9:E1:C7:27:46:83:74:24:19:1E
X509v3 Authority Key Identifier:
keyid:AF:95:77:E7:E8:85:BB:2A:53:5B:C9:A4:17:2F:B3:A0:2E:24:6A:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cb320b79e8976c901f192c3b7778287f392e9486.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/fece80fb-b8bb-4d10-b4c2-249d801884fa/8a403aed8aeb50fe7363c703b2212f41eb541a78.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/fece80fb-b8bb-4d10-b4c2-249d801884fa/cb320b79e8976c901f192c3b7778287f392e9486.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.239.120.0/22
Signature Algorithm: sha256WithRSAEncryption
51:91:67:1b:4d:e0:27:c8:b4:be:a3:d1:7c:73:b2:c1:c8:90:
0a:25:81:0b:24:22:5d:be:dd:c1:8b:9a:90:c0:67:8f:e7:f6:
6c:e9:a0:8f:b5:d0:ea:75:94:09:8f:1b:e9:b9:d2:7e:b5:34:
18:45:72:62:4c:63:5b:9c:67:a3:c1:f4:6f:31:92:e3:82:45:
ba:9d:fc:7a:68:3a:3a:1a:8b:b4:09:29:1f:37:94:66:25:5a:
d4:c9:3f:c8:b9:4d:af:bb:86:a6:47:a8:e5:05:9f:33:08:c3:
5d:09:bc:e7:12:f3:d1:ec:32:1b:c7:84:dc:27:84:c5:87:37:
fd:df:5b:9a:53:1f:e8:f0:31:64:6d:54:98:cd:0e:15:47:9e:
41:ee:3d:8a:3b:4d:e3:a1:5b:78:74:34:de:f0:b4:ad:1c:e5:
a2:b7:4f:4c:ba:f7:00:ef:b6:19:62:51:61:90:61:2c:8e:3d:
0e:79:83:2c:8c:b1:02:6e:e4:21:c5:f5:e6:02:a4:af:fc:57:
31:59:05:ba:5d:17:03:f1:ca:7b:59:f7:82:c5:ea:9b:84:22:
da:87:cd:d2:4c:e5:9a:4c:a0:99:eb:64:f8:21:93:e9:80:8b:
f1:8a:d1:16:21:1e:cf:e5:19:7a:14:cf:9a:d1:5e:d2:12:ba:
5e:82:48:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:37 2024 by rpki-client on console-fra.rpki-client.org