Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0F6BAB412A90BA53A0FC1F3C54B2B1540FC2D10DE822A18FDE5EB086FA9A8A89/0/34352e3233392e36382e302f32322d3232203d3e203238353339.roa
File: 34352e3233392e36382e302f32322d3232203d3e203238353339.roa (raw, json)
Hash identifier: 046LG22BeaJCCI9FGOcjzCpnQRtzfAfQEIlYC2Oy0Bg=
Subject key identifier: A4:24:59:32:52:1C:4F:DA:05:44:15:A8:72:46:27:E2:1B:FC:F8:8A
Certificate issuer: /CN=D8C73AFFF65A3252BF36F686F6347E33163EC8EE
Certificate serial: 3F5355553F36025474EE67A81D1EE5E4F2E9FC5C
Authority key identifier: D8:C7:3A:FF:F6:5A:32:52:BF:36:F6:86:F6:34:7E:33:16:3E:C8:EE
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8C73AFFF65A3252BF36F686F6347E33163EC8EE.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0F6BAB412A90BA53A0FC1F3C54B2B1540FC2D10DE822A18FDE5EB086FA9A8A89/0/34352e3233392e36382e302f32322d3232203d3e203238353339.roa
Signing time: Tue 18 Jun 2024 01:25:00 +0000
ROA not before: Tue 18 Jun 2024 01:20:00 +0000
ROA not after: Tue 17 Jun 2025 01:25:00 +0000
asID: 28539
IP address blocks: 45.239.68.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:53:55:55:3f:36:02:54:74:ee:67:a8:1d:1e:e5:e4:f2:e9:fc:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D8C73AFFF65A3252BF36F686F6347E33163EC8EE
Validity
Not Before: Jun 18 01:20:00 2024 GMT
Not After : Jun 17 01:25:00 2025 GMT
Subject: CN=A4245932521C4FDA054415A8724627E21BFCF88A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:2d:f1:18:05:c8:01:4d:bb:b1:f6:0c:6b:62:
d6:fd:1a:79:86:8e:19:d6:84:75:c3:3b:26:96:cd:
51:90:91:f8:c9:8a:a9:59:f9:c0:63:af:ec:e5:ad:
8e:bd:e1:7e:04:00:3e:1f:be:82:35:5a:a7:e0:78:
2e:78:ad:49:8a:e9:b3:10:8f:43:88:7f:8b:cc:e3:
f5:78:90:f0:ea:36:46:32:6b:7c:a3:ed:a1:0d:c7:
21:9f:c4:de:14:b0:71:6b:91:38:03:f4:3b:fe:77:
e1:cd:a9:32:e5:86:0c:35:72:24:23:15:1f:e2:73:
0a:e1:9f:ec:5c:44:22:81:c9:25:ab:80:ad:73:99:
78:7b:ac:95:63:4e:67:eb:ad:a8:fa:99:7f:b6:a9:
35:89:b8:3a:70:11:ff:2d:3d:55:7a:83:24:a7:d5:
f4:28:de:08:0d:94:24:d5:ad:90:d0:54:07:a5:fb:
46:b5:62:21:a7:90:b7:f5:0c:30:db:65:15:85:22:
18:27:b7:0e:04:e1:ea:b6:f3:5b:8b:f2:26:97:ac:
80:e9:cc:62:34:7a:03:4b:0b:61:4c:d3:2f:52:38:
93:9c:c6:af:a6:2d:60:42:37:5a:bf:ad:5a:1c:0f:
89:e2:a1:a9:05:7e:0a:d9:c9:14:c4:26:14:91:c9:
12:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:24:59:32:52:1C:4F:DA:05:44:15:A8:72:46:27:E2:1B:FC:F8:8A
X509v3 Authority Key Identifier:
keyid:D8:C7:3A:FF:F6:5A:32:52:BF:36:F6:86:F6:34:7E:33:16:3E:C8:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/0F6BAB412A90BA53A0FC1F3C54B2B1540FC2D10DE822A18FDE5EB086FA9A8A89/0/D8C73AFFF65A3252BF36F686F6347E33163EC8EE.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8C73AFFF65A3252BF36F686F6347E33163EC8EE.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0F6BAB412A90BA53A0FC1F3C54B2B1540FC2D10DE822A18FDE5EB086FA9A8A89/0/34352e3233392e36382e302f32322d3232203d3e203238353339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.239.68.0/22
Signature Algorithm: sha256WithRSAEncryption
24:3a:f9:cc:ca:c2:42:71:f2:e1:de:3f:b5:5f:75:e9:9c:dc:
9b:cf:ca:e5:c5:33:97:15:ab:cf:97:0c:14:e1:04:f2:6d:a0:
aa:40:68:b2:6d:42:d2:d3:81:21:77:47:ab:2a:6c:22:93:d7:
a1:01:74:88:44:a5:dc:03:9b:50:8e:48:e0:a2:1e:10:b1:6f:
69:e1:68:ae:7b:c3:f2:5f:5f:d1:3b:01:cc:31:3a:d8:b4:87:
26:fe:eb:ca:f2:27:99:ac:08:05:d2:09:3e:d6:8b:aa:d3:22:
78:2d:e3:14:5f:b2:94:e0:cc:d7:61:b4:f8:39:03:fa:89:8e:
29:18:49:2e:9d:e3:ee:80:fc:3d:d8:30:c9:78:cc:c2:86:d5:
6c:5a:72:52:65:95:2e:f2:8a:5c:df:5e:a8:c2:55:9d:c6:d1:
c7:43:31:f3:df:1c:d9:be:ca:31:98:4c:30:8a:b5:2e:d2:40:
20:55:b3:be:c2:3c:d5:ef:27:ba:e7:47:49:53:ec:b3:e6:97:
a5:81:a6:3b:b7:5e:6e:24:66:8c:c0:f7:0e:d3:4f:19:03:f7:
d0:aa:d2:03:b5:11:b2:0f:9f:22:4d:b9:36:20:27:9c:7a:c2:
d2:ab:2f:a9:72:9c:f1:85:84:9b:3d:59:08:4c:48:be:8e:9d:
78:fe:5d:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 18 03:38:11 2024 by rpki-client on console-fra.rpki-client.org