Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/048FD601FAB1C192DDE27CD3AF21B7D17FFA0EB92648088807F42C070D4DB109/0/34352e3137362e3136342e302f32342d3234203d3e20323637383934.roa
File: 34352e3137362e3136342e302f32342d3234203d3e20323637383934.roa (raw, json)
Hash identifier: 9+CEip7yrZ/ZJlnbMHxsfdWRc7ICnlMUG/Qh/wVwc9M=
Subject key identifier: C6:EB:85:5E:94:6E:98:C2:52:C3:39:91:49:88:D0:C6:78:6D:D7:D2
Certificate issuer: /CN=AF5961CE89F38C3B4D8403327DF504436CE78585
Certificate serial: 0FA05846972682727EA54D25221A95CE70810B53
Authority key identifier: AF:59:61:CE:89:F3:8C:3B:4D:84:03:32:7D:F5:04:43:6C:E7:85:85
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF5961CE89F38C3B4D8403327DF504436CE78585.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/048FD601FAB1C192DDE27CD3AF21B7D17FFA0EB92648088807F42C070D4DB109/0/34352e3137362e3136342e302f32342d3234203d3e20323637383934.roa
Signing time: Tue 04 Feb 2025 19:59:39 +0000
ROA not before: Tue 04 Feb 2025 19:54:39 +0000
ROA not after: Tue 03 Feb 2026 19:59:39 +0000
asID: 267894
IP address blocks: 45.176.164.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:a0:58:46:97:26:82:72:7e:a5:4d:25:22:1a:95:ce:70:81:0b:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AF5961CE89F38C3B4D8403327DF504436CE78585
Validity
Not Before: Feb 4 19:54:39 2025 GMT
Not After : Feb 3 19:59:39 2026 GMT
Subject: CN=C6EB855E946E98C252C339914988D0C6786DD7D2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:1a:04:ff:f7:1d:e3:07:07:fe:ea:3c:6f:2e:
69:d2:c3:8c:35:40:2d:97:fe:7f:71:68:ed:9c:10:
be:8d:91:96:da:4d:53:91:d9:8a:68:0d:78:1f:dc:
7c:27:ae:03:1b:b3:09:6d:5c:ee:2e:c3:e0:0f:77:
fc:2f:eb:eb:5a:5d:79:b1:f5:85:0d:ad:cd:06:99:
4b:0c:ff:60:59:b5:91:70:03:5e:13:5a:34:9d:7d:
43:9f:a1:94:fe:06:16:cb:42:eb:da:ea:1a:3f:a2:
d5:e0:83:51:e9:58:03:16:d6:da:1b:1d:04:8b:99:
46:bf:5e:01:bf:7a:d6:d9:19:d3:1b:93:8f:60:64:
87:6c:6c:23:62:64:31:9b:66:42:f5:9f:ec:28:d9:
5d:c4:b1:10:f8:bd:1f:b5:2b:f4:41:f1:53:c0:1a:
6f:26:87:64:bf:e7:fd:e3:10:0e:d3:c3:30:f1:14:
45:bc:53:89:f8:58:28:ed:53:f4:e1:f2:2b:91:7f:
92:e9:5f:9b:bc:d4:a4:07:ee:83:25:e6:96:74:a7:
c6:09:a7:fb:7a:a5:ea:1d:39:db:fb:e8:3f:94:16:
39:a7:92:57:0f:e1:d3:5b:e7:ed:3e:b5:1e:d1:88:
1c:1b:fd:4f:e8:71:6d:cd:d2:30:cf:08:37:77:2f:
62:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:EB:85:5E:94:6E:98:C2:52:C3:39:91:49:88:D0:C6:78:6D:D7:D2
X509v3 Authority Key Identifier:
keyid:AF:59:61:CE:89:F3:8C:3B:4D:84:03:32:7D:F5:04:43:6C:E7:85:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/048FD601FAB1C192DDE27CD3AF21B7D17FFA0EB92648088807F42C070D4DB109/0/AF5961CE89F38C3B4D8403327DF504436CE78585.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF5961CE89F38C3B4D8403327DF504436CE78585.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/048FD601FAB1C192DDE27CD3AF21B7D17FFA0EB92648088807F42C070D4DB109/0/34352e3137362e3136342e302f32342d3234203d3e20323637383934.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.176.164.0/24
Signature Algorithm: sha256WithRSAEncryption
72:46:0a:6b:53:e3:9d:ba:2f:27:43:2a:d0:59:12:25:bb:b6:
ed:78:33:fe:12:d1:68:44:77:ef:46:ba:b9:4e:37:52:19:dd:
ff:20:d1:a7:ec:b1:66:80:f0:e0:ea:61:f2:c8:af:da:62:42:
d3:d4:f3:5b:ac:db:25:49:46:4e:64:f4:91:d5:d9:c9:41:18:
23:c1:c1:83:a2:94:84:75:a3:75:86:a6:e2:f6:5d:5a:cf:1c:
7c:b1:fe:1c:8b:d5:b2:81:24:90:67:c3:67:a1:e1:d0:45:71:
6e:65:cb:36:e6:95:84:29:29:f6:8f:65:33:b4:16:46:52:00:
78:fb:be:8a:38:8e:cf:f1:89:16:04:6c:f8:4a:e2:6f:a2:83:
e6:f2:46:e2:23:1e:0d:76:af:65:52:2b:7b:81:7b:67:2c:0c:
52:9b:67:34:b0:82:a3:c8:70:29:0d:97:9a:49:fc:db:47:d3:
ee:48:8b:77:8b:27:a3:00:87:54:11:60:b7:4b:18:be:33:0e:
ac:2a:4e:44:0a:7a:f8:79:05:80:52:b6:ed:9c:d8:b3:48:0e:
35:71:cf:0c:19:96:ae:e0:ff:7d:91:7c:2d:07:ee:7b:1e:d0:
92:8d:b1:36:5d:b3:2c:d2:a5:48:45:4e:b9:a7:6c:37:a6:42:
aa:e3:1c:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:59:43 2025 by rpki-client