Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1C0AEE2C7AC9A39DD8D8F7179EE944251370AC413D1E17137327071564714E20/0/34352e37312e3138302e302f32342d3234203d3e2033383136.roa
File: 34352e37312e3138302e302f32342d3234203d3e2033383136.roa (raw, json)
Hash identifier: 55s5gIpWOahmNxzCErJlaH7Dbgv1ApEJP7bm8CrXEWo=
Subject key identifier: 3B:AF:22:19:3C:4F:63:DE:C8:53:DE:89:9C:CF:E8:83:C3:42:AC:F1
Certificate issuer: /CN=53B789249C8E4F6C0983C68CAB7B40E7DF627C35
Certificate serial: 44DD11B0348AB0A25460348A31DBA9ECC4E21116
Authority key identifier: 53:B7:89:24:9C:8E:4F:6C:09:83:C6:8C:AB:7B:40:E7:DF:62:7C:35
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/53B789249C8E4F6C0983C68CAB7B40E7DF627C35.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1C0AEE2C7AC9A39DD8D8F7179EE944251370AC413D1E17137327071564714E20/0/34352e37312e3138302e302f32342d3234203d3e2033383136.roa
Signing time: Tue 04 Feb 2025 18:52:07 +0000
ROA not before: Tue 04 Feb 2025 18:47:07 +0000
ROA not after: Tue 03 Feb 2026 18:52:07 +0000
asID: 3816
IP address blocks: 45.71.180.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:dd:11:b0:34:8a:b0:a2:54:60:34:8a:31:db:a9:ec:c4:e2:11:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53B789249C8E4F6C0983C68CAB7B40E7DF627C35
Validity
Not Before: Feb 4 18:47:07 2025 GMT
Not After : Feb 3 18:52:07 2026 GMT
Subject: CN=3BAF22193C4F63DEC853DE899CCFE883C342ACF1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:0d:c9:7e:40:33:f6:50:52:9b:a0:a1:0d:98:
71:87:a4:ea:36:05:18:50:a8:0b:cc:2e:82:4b:0b:
d6:98:a1:1e:b5:b7:b4:8f:bd:4b:b9:cd:96:58:07:
f6:22:30:82:5a:2c:64:a4:d3:1a:e5:3e:55:52:d6:
0f:76:6e:4f:6a:74:38:74:1f:58:39:5f:a2:d6:b0:
3f:da:ec:5a:bd:6a:85:09:db:a4:27:35:71:79:0c:
b6:f6:8f:c4:0a:e3:de:de:d1:91:1c:ac:ff:3d:54:
cd:0a:92:a0:6f:6a:76:33:7e:44:68:d7:88:9c:27:
fd:71:14:81:e0:6b:31:74:dc:8c:42:13:a8:7b:a6:
b6:73:95:8e:f5:2f:d8:47:30:2c:da:3b:cc:bb:81:
37:9e:51:95:c8:98:02:dc:94:2a:a8:43:60:ec:c7:
13:bd:d4:a7:02:dd:cd:ae:a1:d6:a2:74:8c:fe:5e:
fd:49:9d:14:13:86:3e:59:ca:e0:ff:c9:5a:46:1c:
47:06:26:29:10:f1:42:d7:30:3c:1c:f4:6f:70:05:
82:96:35:75:ae:56:b6:c7:b6:42:30:b5:0c:f2:b2:
91:62:f5:fa:00:ca:56:b1:36:51:48:b2:22:5c:c1:
92:e3:46:8e:5f:08:c2:9f:fb:a6:6e:72:29:1c:6c:
7c:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:AF:22:19:3C:4F:63:DE:C8:53:DE:89:9C:CF:E8:83:C3:42:AC:F1
X509v3 Authority Key Identifier:
keyid:53:B7:89:24:9C:8E:4F:6C:09:83:C6:8C:AB:7B:40:E7:DF:62:7C:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1C0AEE2C7AC9A39DD8D8F7179EE944251370AC413D1E17137327071564714E20/0/53B789249C8E4F6C0983C68CAB7B40E7DF627C35.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/53B789249C8E4F6C0983C68CAB7B40E7DF627C35.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1C0AEE2C7AC9A39DD8D8F7179EE944251370AC413D1E17137327071564714E20/0/34352e37312e3138302e302f32342d3234203d3e2033383136.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.71.180.0/24
Signature Algorithm: sha256WithRSAEncryption
23:99:8c:3a:d7:f7:42:cb:0b:7f:cd:8c:f4:a3:b3:3a:ed:4f:
c3:17:7a:fb:48:b0:f6:63:0a:03:ae:e9:3c:df:22:33:7d:cd:
20:86:c8:4c:6b:aa:73:37:79:64:7e:36:b3:2a:3f:2d:e7:b0:
21:82:47:15:d1:90:2f:8a:e5:93:e3:3d:f7:02:58:c5:1a:3b:
ba:6d:12:da:87:d7:99:61:f3:48:40:ca:58:ff:a3:3f:86:d6:
9c:91:6d:71:a0:a3:c4:14:14:a5:cd:a2:3a:83:24:a0:50:84:
48:d1:f5:65:55:a5:62:28:8e:80:bf:57:36:01:17:71:ef:ad:
06:d6:bf:4b:1f:7d:d9:8e:1b:be:c2:cc:28:7f:f8:a7:38:24:
c3:77:19:00:32:bd:7e:91:0d:ae:4d:1d:5e:56:75:95:52:fd:
76:67:22:0f:0f:86:bc:ea:8e:e1:20:dc:71:eb:ed:c3:d8:fd:
d8:d1:8a:ab:3f:de:a7:9a:2e:0e:b9:88:91:5c:be:a8:7d:e2:
d3:6c:63:b4:75:45:17:85:f5:2c:b7:54:12:49:4f:f8:0d:3c:
f6:fc:67:af:00:e0:19:ec:ef:4a:c3:0f:e7:4f:8d:08:40:bd:
b5:39:66:08:e2:65:5b:8f:43:c5:78:55:8f:f2:30:4a:5e:39:
9e:f7:ea:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:57:49 2025 by rpki-client