Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/34171FFEFFD119D3640DAC769DB2DE3BE7308E74A2E551BE8917A5A8D241B031/0/34352e36352e3135312e302f32342d3234203d3e20323635373135.roa
File: 34352e36352e3135312e302f32342d3234203d3e20323635373135.roa (raw, json)
Hash identifier: 3NT/RMNInxXBSAieunFjxTYIzbWrwoXxHTK/KrNpLeY=
Subject key identifier: C5:E6:08:14:45:E9:FB:0B:FD:2B:26:18:A8:83:BE:BB:A2:92:A3:8A
Certificate issuer: /CN=5998B120B3E73E1A83319F353329C3ABD0E1E67C
Certificate serial: 332CABF63775BC40446AA89475A8359282511747
Authority key identifier: 59:98:B1:20:B3:E7:3E:1A:83:31:9F:35:33:29:C3:AB:D0:E1:E6:7C
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5998B120B3E73E1A83319F353329C3ABD0E1E67C.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/34171FFEFFD119D3640DAC769DB2DE3BE7308E74A2E551BE8917A5A8D241B031/0/34352e36352e3135312e302f32342d3234203d3e20323635373135.roa
Signing time: Tue 04 Feb 2025 18:44:53 +0000
ROA not before: Tue 04 Feb 2025 18:39:53 +0000
ROA not after: Tue 03 Feb 2026 18:44:53 +0000
asID: 265715
IP address blocks: 45.65.151.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:2c:ab:f6:37:75:bc:40:44:6a:a8:94:75:a8:35:92:82:51:17:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5998B120B3E73E1A83319F353329C3ABD0E1E67C
Validity
Not Before: Feb 4 18:39:53 2025 GMT
Not After : Feb 3 18:44:53 2026 GMT
Subject: CN=C5E6081445E9FB0BFD2B2618A883BEBBA292A38A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:e2:2c:4c:4f:4f:0d:ff:33:7a:c0:50:aa:77:
73:4b:7c:f9:5b:74:87:d9:87:64:52:f2:40:56:39:
60:8a:3f:ee:0a:30:f0:99:00:55:d8:eb:b6:37:04:
81:c0:44:ac:1f:6e:93:a7:4a:f5:54:bd:54:21:ed:
97:ca:24:02:fa:86:2d:ed:cc:19:d4:0b:f5:b5:dc:
e4:72:bf:6b:e8:32:5e:79:b6:13:20:b4:33:0f:7d:
59:cb:f5:f4:66:ae:ce:f3:82:13:1a:df:de:2a:d7:
b1:64:f7:62:b3:fc:12:9a:f2:02:50:d8:bc:49:26:
2e:b3:cf:55:e8:d7:6b:c2:e5:48:9b:d1:d2:24:ff:
9a:c3:f3:fd:d5:eb:83:a8:8d:4f:2c:c5:24:cb:66:
ed:f9:64:9e:87:aa:e3:af:1c:ae:56:17:a5:2b:75:
81:3a:2b:45:c4:1f:b5:d1:a6:a1:a0:eb:db:9d:01:
c2:fe:6b:64:72:5e:81:c1:7f:c6:80:58:87:b6:8b:
5a:03:08:83:7d:b1:31:c3:54:68:62:2e:2a:2d:2e:
0e:6c:33:2a:0e:72:0c:93:80:dd:30:37:1b:7b:9c:
e9:bf:a1:1b:e1:29:83:a9:19:d2:92:3f:fd:b0:80:
52:3d:00:76:09:af:d6:57:69:12:df:f9:b9:94:8b:
3f:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:E6:08:14:45:E9:FB:0B:FD:2B:26:18:A8:83:BE:BB:A2:92:A3:8A
X509v3 Authority Key Identifier:
keyid:59:98:B1:20:B3:E7:3E:1A:83:31:9F:35:33:29:C3:AB:D0:E1:E6:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/34171FFEFFD119D3640DAC769DB2DE3BE7308E74A2E551BE8917A5A8D241B031/0/5998B120B3E73E1A83319F353329C3ABD0E1E67C.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5998B120B3E73E1A83319F353329C3ABD0E1E67C.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/34171FFEFFD119D3640DAC769DB2DE3BE7308E74A2E551BE8917A5A8D241B031/0/34352e36352e3135312e302f32342d3234203d3e20323635373135.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.65.151.0/24
Signature Algorithm: sha256WithRSAEncryption
21:26:f0:18:b5:a0:c7:3c:f6:5c:1b:d3:23:f4:8b:48:d1:22:
c8:86:68:e7:35:bd:7c:9f:11:fb:7d:91:42:29:b0:1f:6b:c5:
1f:84:59:8b:5c:0c:ba:5b:6b:c3:c8:68:1a:d7:ba:fc:d1:c3:
61:61:1d:e3:b4:fe:25:7e:29:91:7b:93:f8:77:63:1f:19:c4:
36:66:9d:10:7e:b5:ac:ee:93:0a:fa:5d:4b:a3:52:7e:1d:a3:
03:31:0e:d7:2e:69:7f:08:37:63:bc:08:95:f0:43:14:d0:b1:
c9:35:62:06:18:f0:5b:9d:f5:e0:f5:d6:9e:1d:dd:ee:6e:31:
27:bc:f2:b7:b3:81:4e:e8:ef:92:d8:6b:5b:45:80:c2:49:21:
e5:83:f2:b4:51:29:d7:16:10:e5:9c:bd:29:86:63:c1:8f:f2:
e5:03:cb:1d:65:60:f2:ac:7e:ab:f9:d6:c6:3f:54:3e:e8:16:
70:75:b5:0b:87:52:15:06:11:e5:26:f9:ae:49:27:dd:77:33:
19:16:f7:ad:01:dd:8c:f1:a4:26:0a:be:c5:4a:b8:0f:27:22:
71:a3:45:2d:df:d4:34:69:67:c4:95:65:64:01:01:54:5e:d1:
50:65:17:ac:84:2e:71:98:14:33:f3:f9:32:65:68:bd:3c:47:
7b:23:81:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:13:55 2025 by rpki-client