Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/376F6627568BCBB4E21C3E5832A3FA2E8C58C9A0E6E4F3FB10EC5AAEC404592E/0/34352e372e3233392e302f32342d3234203d3e203237383834.roa
File: 34352e372e3233392e302f32342d3234203d3e203237383834.roa (raw, json)
Hash identifier: XWszkzO+6/FVHgFxlCWnIag80Wg7RyZX7weZc0fS+vE=
Subject key identifier: 27:05:23:4B:8B:3E:D3:2E:1E:F9:6D:1E:2B:0F:91:B8:8B:B0:FF:D9
Certificate issuer: /CN=FEF6C9FB84C09AE8D6288A94909900981E3BB95B
Certificate serial: 75F730D61A504991403387A85A66815924BC84DE
Authority key identifier: FE:F6:C9:FB:84:C0:9A:E8:D6:28:8A:94:90:99:00:98:1E:3B:B9:5B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FEF6C9FB84C09AE8D6288A94909900981E3BB95B.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/376F6627568BCBB4E21C3E5832A3FA2E8C58C9A0E6E4F3FB10EC5AAEC404592E/0/34352e372e3233392e302f32342d3234203d3e203237383834.roa
Signing time: Wed 14 Aug 2024 01:25:00 +0000
ROA not before: Wed 14 Aug 2024 01:20:00 +0000
ROA not after: Wed 13 Aug 2025 01:25:00 +0000
asID: 27884
IP address blocks: 45.7.239.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:f7:30:d6:1a:50:49:91:40:33:87:a8:5a:66:81:59:24:bc:84:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FEF6C9FB84C09AE8D6288A94909900981E3BB95B
Validity
Not Before: Aug 14 01:20:00 2024 GMT
Not After : Aug 13 01:25:00 2025 GMT
Subject: CN=2705234B8B3ED32E1EF96D1E2B0F91B88BB0FFD9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:97:5c:90:29:07:a4:07:02:64:66:65:4b:e2:
7a:4b:7c:25:47:72:d9:99:53:74:d0:4b:74:1c:33:
7e:35:98:c0:76:f0:99:82:6a:68:85:fa:6f:10:61:
a6:49:7b:67:7b:e8:6c:b7:9f:4e:8e:5c:66:2b:d9:
66:e0:27:81:5d:ab:58:13:0a:10:26:45:32:50:47:
1a:a2:0f:50:74:4d:a4:32:d4:28:ab:c9:81:9f:8c:
69:02:4a:36:3b:67:48:22:e7:c1:c8:d7:43:81:41:
79:6c:f7:f9:3e:7c:4e:8c:2e:7e:12:49:bb:9b:dd:
85:da:be:22:00:25:ed:f1:76:89:b1:d3:14:51:f4:
f6:14:f6:db:59:f6:c1:fb:4f:cd:b3:d5:68:12:a7:
f2:85:14:1f:bf:9b:8b:e2:50:e9:d7:58:b2:e1:a4:
f3:0b:12:21:d6:2c:ef:60:3c:7b:73:3b:f7:92:4a:
5e:c6:a6:9d:03:98:f7:d9:66:83:74:ad:aa:93:c6:
ac:21:19:08:fb:eb:d7:34:51:72:6f:47:38:fd:05:
1e:35:43:25:12:18:56:69:55:a8:1b:9e:9b:7d:80:
28:96:9a:e2:1a:36:44:21:04:c8:6c:2e:65:5f:36:
39:f1:b3:dc:14:c6:c1:47:b0:09:f4:da:19:a2:af:
b2:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:05:23:4B:8B:3E:D3:2E:1E:F9:6D:1E:2B:0F:91:B8:8B:B0:FF:D9
X509v3 Authority Key Identifier:
keyid:FE:F6:C9:FB:84:C0:9A:E8:D6:28:8A:94:90:99:00:98:1E:3B:B9:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/376F6627568BCBB4E21C3E5832A3FA2E8C58C9A0E6E4F3FB10EC5AAEC404592E/0/FEF6C9FB84C09AE8D6288A94909900981E3BB95B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FEF6C9FB84C09AE8D6288A94909900981E3BB95B.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/376F6627568BCBB4E21C3E5832A3FA2E8C58C9A0E6E4F3FB10EC5AAEC404592E/0/34352e372e3233392e302f32342d3234203d3e203237383834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.7.239.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:99:19:ab:1d:97:d4:ab:72:aa:b3:ba:6c:ca:9a:75:89:0d:
4b:78:cd:8f:80:5e:a3:57:d1:32:79:0f:fc:64:a4:2e:cc:69:
61:76:bb:98:69:f9:94:ce:76:1a:c3:f5:b8:52:e8:22:c0:29:
0e:5f:8a:96:b1:b8:93:66:3a:ac:3b:c0:7b:8f:c6:9d:55:84:
b4:aa:e9:b2:27:ec:d1:e7:41:6b:70:91:ee:f4:13:bb:92:ae:
3a:8a:6e:ad:86:36:10:d8:6a:53:a5:f7:e7:fa:8f:76:f7:9a:
92:33:d8:29:cd:6e:6e:d4:ce:d5:42:ec:b2:ed:0d:6a:b2:21:
42:75:8d:f3:f8:f5:69:4c:cc:31:1d:c1:9e:ad:41:0c:54:8d:
37:96:45:79:01:b1:37:1c:e4:db:f2:a1:0f:a8:24:51:e5:51:
8f:7e:58:0e:bb:a5:6b:0a:d2:f4:19:ff:c2:41:b3:54:02:0e:
7d:2b:3a:2d:a7:52:e5:e5:86:45:bc:16:16:3f:61:95:42:a0:
49:59:ae:c7:65:c4:74:d0:8f:94:27:69:f7:ef:66:8e:3d:f6:
b3:2a:3e:12:6e:66:1a:11:1e:f6:e1:da:5c:6a:67:90:58:4f:
d6:95:6f:fc:7f:20:04:91:1e:76:7b:33:bb:65:09:5d:68:d7:
b9:1a:7e:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:04:59 2025 by rpki-client