Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ffecd954-8a15-4c38-ad18-aaef8f175896/f441fcd2bd1827d7db8812532eea7fedd21c2fbf.roa
File: f441fcd2bd1827d7db8812532eea7fedd21c2fbf.roa (raw, json)
Hash identifier: bRPJb6mglGVc6Ku/eJECSdAZfnNK7SOs3LhVnGj/rpM=
Subject key identifier: 4C:AB:E9:CB:EB:7A:9F:58:69:66:2E:54:EA:09:DC:89:59:82:7D:24
Certificate issuer: /CN=47b26b4cc424b80b0e574677390a5e2698d3886d
Certificate serial: 0F6D8E
Authority key identifier: 2A:4F:D1:6B:51:87:4D:E8:DE:72:FA:FE:BF:D5:BB:89:98:8B:DC:BE
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/47b26b4cc424b80b0e574677390a5e2698d3886d.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/ffecd954-8a15-4c38-ad18-aaef8f175896/f441fcd2bd1827d7db8812532eea7fedd21c2fbf.roa
Signing time: Thu 02 Nov 2023 16:09:36 +0000
ROA not before: Thu 02 Nov 2023 16:09:36 +0000
ROA not after: Sun 02 Nov 2025 16:09:36 +0000
asID: 265685
IP address blocks: 45.5.20.0/24 maxlen: 24
45.5.21.0/24 maxlen: 24
45.5.22.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1011086 (0xf6d8e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47b26b4cc424b80b0e574677390a5e2698d3886d
Validity
Not Before: Nov 2 16:09:36 2023 GMT
Not After : Nov 2 16:09:36 2025 GMT
Subject: CN=f441fcd2bd1827d7db8812532eea7fedd21c2fbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:d3:e3:1b:77:64:47:c3:91:2a:37:0c:ab:97:
24:8e:4f:94:3a:a5:51:2b:a5:4e:95:51:d8:2c:69:
2f:47:c6:f6:70:ce:42:13:41:5c:fd:e8:98:42:4f:
7e:16:83:a0:08:c4:83:9e:a6:bc:b6:dd:46:dc:e4:
f0:91:f4:e5:1d:11:c7:e6:e7:07:56:4f:7a:cc:9f:
62:e0:71:f4:3d:88:f8:fb:9c:be:a4:b6:6b:ec:e0:
5c:20:7e:d5:5d:05:4f:28:92:1f:69:1d:a2:94:50:
d7:9a:ba:a5:fc:0b:1d:22:ae:6c:39:a3:ed:60:f8:
93:ae:75:52:f5:da:fe:4d:e2:b6:54:bd:74:c8:4b:
6c:d6:9b:57:ec:66:f1:0a:a6:f1:0e:05:c3:44:9b:
07:2e:79:08:24:53:8b:d1:85:b4:d4:20:a9:e9:be:
3d:2e:75:c2:03:44:c0:ce:6a:e8:03:8d:bd:80:a9:
ae:91:8a:ea:d2:2c:15:1d:da:7e:c2:84:b7:f4:46:
da:cb:fc:2a:fb:ad:52:3a:ee:d3:b5:32:f1:87:ca:
37:bf:11:93:42:98:d7:a4:ca:f6:f7:6f:0e:3f:92:
bc:a1:84:1c:7e:6c:c6:66:69:38:df:12:c6:89:00:
a5:04:1f:eb:35:2b:de:da:b7:69:7e:a5:40:15:53:
36:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:AB:E9:CB:EB:7A:9F:58:69:66:2E:54:EA:09:DC:89:59:82:7D:24
X509v3 Authority Key Identifier:
keyid:2A:4F:D1:6B:51:87:4D:E8:DE:72:FA:FE:BF:D5:BB:89:98:8B:DC:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/47b26b4cc424b80b0e574677390a5e2698d3886d.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ffecd954-8a15-4c38-ad18-aaef8f175896/f441fcd2bd1827d7db8812532eea7fedd21c2fbf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/ffecd954-8a15-4c38-ad18-aaef8f175896/47b26b4cc424b80b0e574677390a5e2698d3886d.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.5.20.0-45.5.22.255
Signature Algorithm: sha256WithRSAEncryption
9e:b7:4f:c2:12:00:6e:e9:80:ae:18:b2:a3:2f:c6:10:03:74:
d3:a1:78:b5:70:f3:f9:62:9b:d4:f5:0b:20:f0:74:94:c0:7c:
04:7b:7a:f9:e0:22:32:8b:dc:25:18:bd:a6:f7:43:d7:93:59:
71:dd:35:38:a9:99:92:60:70:ea:11:a9:fb:bc:c1:3f:65:4a:
7a:a6:f8:d5:37:49:1e:31:23:ad:d8:7a:23:45:7f:0b:81:78:
32:a6:2f:b2:d2:81:24:4f:8c:6e:db:5f:78:e6:2d:dd:65:59:
9f:f8:d8:db:3c:46:f5:3e:ce:7c:6a:4f:59:d6:20:69:52:02:
c4:f6:16:5a:3e:8d:02:0c:1d:b9:15:67:9d:fd:d9:25:fb:40:
3c:d9:17:56:3f:0d:4b:39:41:a2:76:83:89:95:5c:07:59:e2:
54:6c:df:d1:51:44:03:6c:4c:47:7c:3e:ff:36:23:78:a6:e0:
6a:21:df:e9:71:7f:0f:8c:be:e2:e4:8b:77:b2:8c:e9:43:ce:
3d:8f:ad:ee:eb:ed:d6:00:48:5c:9b:fb:f7:c6:58:32:3d:1d:
28:b3:4c:23:6e:ea:fd:a1:79:25:52:aa:95:7a:9e:3c:84:7c:
aa:56:07:ae:cc:1a:d9:7b:b5:41:d2:09:04:fa:10:a4:c8:94:
27:2e:bc:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:54 2024 by rpki-client on console-ams.rpki-client.org