Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c53d6f63-91e1-44ed-afcd-1622060c784c/1bbdbcb35002f3844fa5e96df26e2a3b6dfa4b73.roa
File: 1bbdbcb35002f3844fa5e96df26e2a3b6dfa4b73.roa (raw, json)
Hash identifier: mCG2PRPEt6PrFVyf9e2JRtnQNz1wldGdtHH8u5nl0SU=
Subject key identifier: 0F:54:2D:24:3C:FB:D7:71:6E:9F:27:4D:8F:51:83:56:2A:BF:48:79
Certificate issuer: /CN=d91fe0c4e650a338e80b4066e31e49e8122cdeb1
Certificate serial: 287B58
Authority key identifier: EC:FB:32:23:27:26:26:BF:FC:62:56:D6:D8:D5:85:9F:FE:AB:E8:0B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d91fe0c4e650a338e80b4066e31e49e8122cdeb1.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/c53d6f63-91e1-44ed-afcd-1622060c784c/1bbdbcb35002f3844fa5e96df26e2a3b6dfa4b73.roa
Signing time: Thu 28 Mar 2024 17:09:22 +0000
ROA not before: Thu 28 Mar 2024 17:09:22 +0000
ROA not after: Sat 28 Mar 2026 17:09:22 +0000
asID: 52468
IP address blocks: 45.225.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2653016 (0x287b58)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d91fe0c4e650a338e80b4066e31e49e8122cdeb1
Validity
Not Before: Mar 28 17:09:22 2024 GMT
Not After : Mar 28 17:09:22 2026 GMT
Subject: CN=1bbdbcb35002f3844fa5e96df26e2a3b6dfa4b73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:bd:6e:ec:3c:86:e4:df:9f:a2:58:61:93:df:
ab:9c:91:5d:cf:b7:02:78:da:83:c5:83:cf:45:3c:
1f:4c:ee:c8:6d:b4:09:84:a8:60:1f:50:88:82:f1:
87:7b:5a:91:7a:7b:ef:32:f6:cb:26:41:b7:55:ed:
e7:74:96:ce:32:68:68:4f:d4:c2:e7:2b:88:43:ce:
09:ae:94:ff:92:40:d1:88:5b:c4:03:70:a6:ff:69:
99:b9:5a:fb:28:5d:e4:fb:62:5e:3f:b6:cf:25:8b:
cf:0b:fa:d4:72:de:72:92:86:fe:d1:5f:f2:5b:ce:
ad:47:ae:5e:13:9e:27:b1:82:1d:88:c0:43:f2:0c:
67:d6:03:75:40:34:f4:ab:ed:61:e6:58:66:00:fb:
b7:1c:ad:82:0b:57:31:f3:bb:3b:d2:7b:72:69:bc:
5f:dd:d5:d1:a0:20:6f:8a:e3:50:13:b3:42:a2:65:
cb:51:fe:ba:76:97:a0:8f:f2:2b:59:7c:cd:02:59:
e7:d7:ec:10:52:ce:ef:b4:6b:8e:51:2b:8d:34:59:
2a:e5:9f:37:f7:c2:a1:d4:74:77:0c:36:bd:52:89:
26:2f:13:a0:25:99:e3:5a:43:ce:19:e6:ac:a3:cc:
37:a3:fe:92:6a:1d:da:2a:2d:98:18:41:94:26:61:
d8:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:54:2D:24:3C:FB:D7:71:6E:9F:27:4D:8F:51:83:56:2A:BF:48:79
X509v3 Authority Key Identifier:
keyid:EC:FB:32:23:27:26:26:BF:FC:62:56:D6:D8:D5:85:9F:FE:AB:E8:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d91fe0c4e650a338e80b4066e31e49e8122cdeb1.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c53d6f63-91e1-44ed-afcd-1622060c784c/1bbdbcb35002f3844fa5e96df26e2a3b6dfa4b73.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/c53d6f63-91e1-44ed-afcd-1622060c784c/d91fe0c4e650a338e80b4066e31e49e8122cdeb1.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.225.104.0/22
Signature Algorithm: sha256WithRSAEncryption
15:1d:f2:5a:16:38:68:ba:f6:c9:e1:63:6c:21:43:4b:0e:ed:
47:44:e7:7e:f3:0b:fa:5a:de:52:80:a4:3b:85:cd:b9:60:a4:
0d:e7:69:65:ab:8d:07:e1:59:93:7e:19:ec:bb:b6:48:23:5b:
b4:9a:19:e8:54:32:03:60:bd:11:65:66:11:2f:b0:dd:89:c3:
91:59:eb:85:46:ac:4b:bc:b3:29:a9:6a:d9:d1:db:0a:82:cd:
b6:af:3b:f7:01:7f:77:df:45:e2:66:9a:1c:5f:6a:f2:c7:56:
94:da:df:5f:93:62:99:5e:d8:94:bf:d6:ed:7f:1d:05:2b:6e:
13:b9:d3:5a:6d:57:f4:29:89:73:23:dd:5c:1c:17:48:49:55:
0b:e1:f0:2c:61:8f:4f:6e:aa:cb:76:52:e4:06:24:ac:5f:e4:
bb:d9:48:9c:cc:fb:cb:63:74:5d:c5:9d:32:33:91:d9:bb:cd:
15:a3:75:7e:f1:7c:3e:14:7a:91:d0:8c:82:6e:e8:89:7a:de:
4a:31:98:20:65:06:2f:5d:9a:18:c0:b0:c4:44:93:b3:3a:7e:
67:91:c6:74:34:92:1f:2b:cb:b1:7f:ca:6f:4e:8a:c9:d6:8d:
08:39:82:4e:51:12:27:9f:33:e8:63:09:a9:93:6b:66:26:f4:
2c:7c:a9:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 01:32:35 2024 by rpki-client on console.sobornost.net