Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3A683DB2EBE484C7A3536C34C158206B843D3CEF91146C49CF97FC4668FAD41C/0/34352e3232342e32312e302f32342d3234203d3e203237393437.roa
File: 34352e3232342e32312e302f32342d3234203d3e203237393437.roa (raw, json)
Hash identifier: sKEWB27ab9tVmHqJBXpqdNxI3oNXU73C6ANaB3C9NEk=
Subject key identifier: 5E:0E:40:BA:FF:C1:29:D2:22:FE:67:07:97:C3:A1:2D:BD:D2:31:FA
Certificate issuer: /CN=665E210B6EA50ABEA68925B6683D57E0A94D5CCF
Certificate serial: 27A991A09B2B3B2E19CB052DBC238342D2ACE4FD
Authority key identifier: 66:5E:21:0B:6E:A5:0A:BE:A6:89:25:B6:68:3D:57:E0:A9:4D:5C:CF
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/665E210B6EA50ABEA68925B6683D57E0A94D5CCF.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3A683DB2EBE484C7A3536C34C158206B843D3CEF91146C49CF97FC4668FAD41C/0/34352e3232342e32312e302f32342d3234203d3e203237393437.roa
Signing time: Tue 04 Feb 2025 18:16:49 +0000
ROA not before: Tue 04 Feb 2025 18:11:49 +0000
ROA not after: Tue 03 Feb 2026 18:16:49 +0000
asID: 27947
IP address blocks: 45.224.21.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:a9:91:a0:9b:2b:3b:2e:19:cb:05:2d:bc:23:83:42:d2:ac:e4:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=665E210B6EA50ABEA68925B6683D57E0A94D5CCF
Validity
Not Before: Feb 4 18:11:49 2025 GMT
Not After : Feb 3 18:16:49 2026 GMT
Subject: CN=5E0E40BAFFC129D222FE670797C3A12DBDD231FA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:1f:25:ed:27:e8:75:95:ae:6a:cf:e9:bb:62:
1e:2b:f1:43:fc:59:0d:cc:1c:d3:0f:9b:47:cd:01:
e8:29:87:0d:3e:cf:5f:0c:88:9f:9c:f7:ef:76:67:
dc:92:eb:88:3a:43:d5:97:59:d2:56:70:86:c7:11:
86:f6:0d:9f:94:2c:ea:82:4f:be:82:8f:4b:45:b2:
9d:b0:53:b8:58:9c:ad:13:d4:fe:00:c1:79:d3:90:
31:99:f8:f2:16:f0:0c:2c:46:3c:fb:30:9e:9f:40:
a3:ed:0e:86:6b:75:a7:50:5d:ac:b9:f3:b2:7c:a7:
bb:b4:aa:fd:d4:ba:8c:3d:fc:08:d7:5a:f7:6d:2e:
c1:bd:65:e2:13:69:fe:eb:e6:46:24:2b:83:93:c3:
07:83:24:c5:76:52:2e:7a:eb:0e:ff:df:23:7d:e8:
cc:4e:90:c5:c3:e7:dc:36:64:39:0c:40:9c:ad:32:
c8:98:04:3b:b1:c2:c8:bc:cc:66:70:2d:19:92:43:
01:dd:9b:26:a6:6d:0b:bf:42:b8:da:48:20:6c:22:
6e:7a:d9:3e:6f:e4:2b:b6:39:29:c3:ae:24:33:a4:
c9:78:04:00:58:61:7a:a4:7b:e7:df:6c:cf:4c:16:
58:39:75:6b:86:c1:5f:42:f8:0a:28:1c:58:55:cc:
3a:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:0E:40:BA:FF:C1:29:D2:22:FE:67:07:97:C3:A1:2D:BD:D2:31:FA
X509v3 Authority Key Identifier:
keyid:66:5E:21:0B:6E:A5:0A:BE:A6:89:25:B6:68:3D:57:E0:A9:4D:5C:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/3A683DB2EBE484C7A3536C34C158206B843D3CEF91146C49CF97FC4668FAD41C/0/665E210B6EA50ABEA68925B6683D57E0A94D5CCF.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/665E210B6EA50ABEA68925B6683D57E0A94D5CCF.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3A683DB2EBE484C7A3536C34C158206B843D3CEF91146C49CF97FC4668FAD41C/0/34352e3232342e32312e302f32342d3234203d3e203237393437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.224.21.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:4d:f3:d6:41:34:8d:1b:85:9f:ca:87:f3:20:e2:4e:54:ac:
3b:b6:9d:e6:03:ca:71:9f:1a:00:2a:b0:9b:9c:3f:56:58:cb:
f5:32:a1:3b:f2:85:df:2d:dc:de:2e:42:ce:fa:99:60:97:1e:
b8:56:71:6f:26:34:7a:c3:12:3b:d2:aa:cf:a8:fd:63:94:f9:
04:4c:e7:42:99:8b:2f:b2:ab:af:97:94:76:ab:51:8b:41:34:
86:55:f4:5f:e4:81:4e:e5:b8:9f:66:e1:55:bd:06:2a:f2:18:
b9:4f:48:cb:c6:81:20:59:6e:2d:17:2a:5d:e2:7e:f7:f8:d7:
ec:c6:51:71:58:80:4e:43:39:68:09:18:bf:96:04:5f:ff:30:
23:4f:15:16:16:f6:48:a9:74:0d:3d:c9:d3:9c:fe:84:78:ca:
cf:12:c8:53:68:55:6e:c2:76:3a:b5:60:53:ee:bf:83:4a:5d:
d3:c8:84:c0:93:07:aa:c6:0e:32:45:f5:5f:e4:ab:7f:1b:e3:
e9:43:82:c0:e9:5e:5e:3a:07:d0:8d:1d:fb:51:cd:af:84:b4:
5c:21:89:af:34:1c:0c:c1:d7:bf:22:36:dc:c0:08:fd:9f:a8:
13:8d:e3:6b:43:05:36:93:dc:cb:5a:49:c7:74:8a:11:e0:4b:
08:36:24:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:56:36 2025 by rpki-client