Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3A683DB2EBE484C7A3536C34C158206B843D3CEF91146C49CF97FC4668FAD41C/0/34352e3232342e32322e302f32342d3234203d3e203237393437.roa
File: 34352e3232342e32322e302f32342d3234203d3e203237393437.roa (raw, json)
Hash identifier: PuszJUjNyl1TnOocBbOZYOVhiKgbujbR0G+ClMeug+U=
Subject key identifier: 91:8C:A4:F8:87:2B:41:08:66:F2:67:75:6B:04:0E:FE:7C:DA:0C:79
Certificate issuer: /CN=665E210B6EA50ABEA68925B6683D57E0A94D5CCF
Certificate serial: 74DCB383966D691419209BF546A86C6321BDBC0F
Authority key identifier: 66:5E:21:0B:6E:A5:0A:BE:A6:89:25:B6:68:3D:57:E0:A9:4D:5C:CF
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/665E210B6EA50ABEA68925B6683D57E0A94D5CCF.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3A683DB2EBE484C7A3536C34C158206B843D3CEF91146C49CF97FC4668FAD41C/0/34352e3232342e32322e302f32342d3234203d3e203237393437.roa
Signing time: Tue 04 Feb 2025 18:16:50 +0000
ROA not before: Tue 04 Feb 2025 18:11:50 +0000
ROA not after: Tue 03 Feb 2026 18:16:50 +0000
asID: 27947
IP address blocks: 45.224.22.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:dc:b3:83:96:6d:69:14:19:20:9b:f5:46:a8:6c:63:21:bd:bc:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=665E210B6EA50ABEA68925B6683D57E0A94D5CCF
Validity
Not Before: Feb 4 18:11:50 2025 GMT
Not After : Feb 3 18:16:50 2026 GMT
Subject: CN=918CA4F8872B410866F267756B040EFE7CDA0C79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:6d:bf:7b:80:79:ca:b3:ac:3c:43:dd:f9:56:
3a:c1:96:f4:45:4c:a1:51:80:cf:80:4b:04:cf:38:
6e:e8:92:f6:a7:b3:bf:2b:98:24:72:50:43:9c:92:
82:fb:22:14:a1:0a:9b:c7:1b:d5:16:ff:28:47:5c:
88:cb:af:8a:b9:f4:af:7f:da:4b:b1:79:f2:5b:10:
dd:c6:6b:81:94:f7:dd:26:59:00:45:91:26:a6:c6:
e7:2b:36:c6:bd:72:7b:10:bf:32:a8:f1:a3:9b:dc:
50:7a:db:42:8d:ef:0f:4e:9d:89:2d:7e:17:87:8c:
c3:51:46:61:07:9b:14:29:27:e3:00:71:f0:10:51:
85:a3:3f:19:0b:28:3e:d7:ff:54:aa:13:9a:60:11:
fd:f7:56:70:52:9b:ca:69:13:82:85:0c:d9:94:79:
b9:e1:5f:a1:37:7f:a2:15:0d:67:44:33:19:8a:d9:
10:e7:06:5c:d5:f2:64:55:f7:b1:ed:5d:6d:9e:b1:
3c:4c:17:24:24:89:2f:f3:bc:7f:08:16:72:92:68:
95:a7:22:4b:34:d4:a2:c0:d7:4c:9b:52:c9:23:d4:
b5:cd:62:9c:94:c4:14:45:62:09:d6:57:22:db:dc:
3f:5c:f9:1a:a2:52:1f:81:ed:ae:b6:1d:bb:a0:4e:
59:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:8C:A4:F8:87:2B:41:08:66:F2:67:75:6B:04:0E:FE:7C:DA:0C:79
X509v3 Authority Key Identifier:
keyid:66:5E:21:0B:6E:A5:0A:BE:A6:89:25:B6:68:3D:57:E0:A9:4D:5C:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/3A683DB2EBE484C7A3536C34C158206B843D3CEF91146C49CF97FC4668FAD41C/0/665E210B6EA50ABEA68925B6683D57E0A94D5CCF.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/665E210B6EA50ABEA68925B6683D57E0A94D5CCF.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3A683DB2EBE484C7A3536C34C158206B843D3CEF91146C49CF97FC4668FAD41C/0/34352e3232342e32322e302f32342d3234203d3e203237393437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.224.22.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:25:a7:d4:61:2a:a0:ba:7f:56:92:66:d7:5f:15:60:7a:39:
4f:c5:13:70:e0:e2:85:9b:1b:37:56:98:3b:08:42:5a:55:89:
53:05:b3:25:27:84:d8:98:f4:61:c2:60:ac:36:46:f6:25:9b:
d4:96:50:3c:d8:a8:d7:17:91:d0:3e:0a:8d:ff:a3:a6:08:93:
d4:cb:f1:56:d4:f3:0c:c4:f4:ec:77:08:68:f9:de:03:ad:cd:
65:33:84:3c:6e:84:35:7f:5f:e1:c9:96:3f:db:b1:eb:5f:85:
a5:20:9c:7d:86:47:0b:b3:51:f8:28:9e:25:1e:c7:9e:0b:cd:
4b:44:cf:26:46:4d:6b:bf:50:91:fc:44:af:1e:7c:05:a5:42:
00:57:41:89:3a:02:4d:e9:ef:56:fa:14:9d:78:1c:1c:d4:fc:
1c:58:05:12:83:9f:4d:1c:93:dc:81:54:72:ff:cf:9d:db:23:
51:55:c1:15:9a:9f:31:e7:99:b9:fd:04:97:82:ed:bc:4b:b4:
af:a4:23:59:66:cf:8a:d9:62:bf:3d:84:dc:e6:7b:15:e8:1c:
3e:3f:59:6b:f8:78:8e:ac:b3:1a:6d:20:85:d5:b5:d6:1b:02:
de:ab:75:e7:7e:65:df:4a:b2:a6:de:e1:39:d2:49:61:31:27:
a8:f9:86:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:55:24 2025 by rpki-client