Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2bbb4bba-9e09-435c-b8b6-e72cba0f507d/662c0cf8c69c9624ba2fc543023e52820e1c4e89.roa
File: 662c0cf8c69c9624ba2fc543023e52820e1c4e89.roa (raw, json)
Hash identifier: SmrC4jnOdE48XTyOaWj6/YEJLUJ4dOM/bNcX+VX4e0Q=
Subject key identifier: C0:8A:97:A1:36:91:43:35:07:03:EF:08:43:EA:37:80:2E:FC:D9:8F
Certificate issuer: /CN=55c0fb0d5531f91dd06c19ed8fa00f2687176d55
Certificate serial: 1F96A2
Authority key identifier: BA:80:9B:F0:B1:12:1D:91:3D:20:0B:4F:F8:8B:7C:71:84:C6:58:E3
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/55c0fb0d5531f91dd06c19ed8fa00f2687176d55.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/2bbb4bba-9e09-435c-b8b6-e72cba0f507d/662c0cf8c69c9624ba2fc543023e52820e1c4e89.roa
Signing time: Mon 08 May 2023 14:58:29 +0000
ROA not before: Sun 07 May 2023 14:58:29 +0000
ROA not after: Thu 08 May 2025 14:58:29 +0000
asID: 266728
IP address blocks: 45.229.87.0/24 maxlen: 24
2803:5320::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2070178 (0x1f96a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55c0fb0d5531f91dd06c19ed8fa00f2687176d55
Validity
Not Before: May 7 14:58:29 2023 GMT
Not After : May 8 14:58:29 2025 GMT
Subject: CN=662c0cf8c69c9624ba2fc543023e52820e1c4e89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:1a:45:e6:ff:03:92:41:37:ad:12:ae:0e:f9:
cd:e6:2e:8e:85:7e:4e:a2:2a:f2:79:6c:13:32:0d:
7d:b4:f9:df:6d:d5:cf:25:c9:25:02:16:0c:dd:e7:
94:9d:ea:c4:10:27:b7:e2:36:b3:6c:3f:2b:af:6e:
72:34:72:a8:ab:aa:e3:36:64:f9:14:4c:cd:41:78:
30:0a:a1:b2:07:31:e0:be:25:24:65:dc:fe:42:94:
8e:06:1a:bd:f0:71:b2:77:b3:60:9d:09:a3:41:0a:
af:ac:e4:ab:00:a3:ae:60:13:ea:f1:e6:6e:1f:e2:
7d:e9:6c:cd:62:59:e2:6d:8c:7f:e1:fa:a7:2b:fe:
a7:32:28:8e:df:da:d1:60:82:a8:ad:77:74:31:25:
54:69:7e:a6:bc:6b:0c:1a:b2:07:cb:fd:ad:20:f9:
7c:ac:ff:1c:27:a5:f0:d1:b2:f5:64:29:b0:9a:1a:
2a:9c:f2:da:c4:c9:ee:96:09:8d:86:0e:96:9e:a4:
c0:c2:53:33:86:34:e5:e2:07:89:5e:cd:10:83:35:
b8:57:df:70:66:a9:9c:2c:b0:82:4c:3e:c0:d7:cf:
cd:26:79:d8:a4:28:3d:c6:41:04:d7:5d:c4:0f:9f:
b0:90:42:45:c0:5d:2f:fa:d8:93:cb:87:42:d8:a4:
95:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:8A:97:A1:36:91:43:35:07:03:EF:08:43:EA:37:80:2E:FC:D9:8F
X509v3 Authority Key Identifier:
keyid:BA:80:9B:F0:B1:12:1D:91:3D:20:0B:4F:F8:8B:7C:71:84:C6:58:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/55c0fb0d5531f91dd06c19ed8fa00f2687176d55.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2bbb4bba-9e09-435c-b8b6-e72cba0f507d/662c0cf8c69c9624ba2fc543023e52820e1c4e89.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/2bbb4bba-9e09-435c-b8b6-e72cba0f507d/55c0fb0d5531f91dd06c19ed8fa00f2687176d55.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.229.87.0/24
IPv6:
2803:5320::/32
Signature Algorithm: sha256WithRSAEncryption
25:98:d5:5e:96:fb:ab:41:05:ba:ac:ad:f3:0e:10:e3:1b:8d:
48:da:3a:0a:77:6a:39:9a:70:b1:fd:6e:a0:dd:35:78:42:61:
35:aa:fb:b9:62:c1:7d:5b:41:75:d8:89:72:d8:9e:37:8c:28:
22:de:ac:77:a3:3c:ad:cd:1f:26:36:de:75:f2:a3:5e:ca:bd:
da:ad:f2:36:86:a5:3c:30:c1:8f:e7:da:f9:15:d6:48:96:f3:
d4:cf:a0:c0:e1:94:9c:48:03:dc:0f:d9:3a:24:d9:ef:29:08:
e3:05:10:c2:c1:89:03:b2:c3:71:02:81:c9:0b:62:bf:be:fa:
9a:c1:3f:89:8d:b7:8b:8e:43:f3:da:1f:aa:49:e4:2b:0e:2d:
a8:54:c9:60:2e:a5:e6:07:29:49:fa:8b:60:0b:26:0e:17:72:
e0:4e:23:df:82:ae:52:8e:36:ca:ec:4d:73:bc:d4:5c:f1:b0:
b7:21:b1:73:2f:e5:63:33:8d:4d:db:18:17:c4:7e:f9:f4:9e:
7a:ff:f7:f6:01:9f:6e:22:9a:f8:ad:2b:90:38:19:c0:f1:f3:
94:b3:6a:c5:3f:06:fb:3f:17:ae:46:07:fa:40:1c:b4:41:d6:
bf:ff:8d:47:cb:9f:3c:fb:10:cf:76:ec:df:d3:a7:07:9e:50:
61:b3:ab:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 15:26:17 2025 by rpki-client