Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3D9C74732942F64EDC7028E9D7B05FBE3B5F54C5A8BEC145299796788F683309/0/34352e3137342e3132392e302f32342d3234203d3e20323637383230.roa
File: 34352e3137342e3132392e302f32342d3234203d3e20323637383230.roa (raw, json)
Hash identifier: 0XCOQVmd5VW2XH12KWkx4KTlb9nY97UoYJI9T7LmcSg=
Subject key identifier: 67:FB:FE:CF:CF:63:EE:36:36:98:A1:2F:54:98:96:F6:13:61:60:90
Certificate issuer: /CN=2C105A8B66A79B278FD2A38A1572477F4D886617
Certificate serial: 37BFFDAEA8676A63808371E6B930D764AF1E963A
Authority key identifier: 2C:10:5A:8B:66:A7:9B:27:8F:D2:A3:8A:15:72:47:7F:4D:88:66:17
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C105A8B66A79B278FD2A38A1572477F4D886617.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3D9C74732942F64EDC7028E9D7B05FBE3B5F54C5A8BEC145299796788F683309/0/34352e3137342e3132392e302f32342d3234203d3e20323637383230.roa
Signing time: Tue 04 Feb 2025 20:05:47 +0000
ROA not before: Tue 04 Feb 2025 20:00:47 +0000
ROA not after: Tue 03 Feb 2026 20:05:47 +0000
asID: 267820
IP address blocks: 45.174.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:bf:fd:ae:a8:67:6a:63:80:83:71:e6:b9:30:d7:64:af:1e:96:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2C105A8B66A79B278FD2A38A1572477F4D886617
Validity
Not Before: Feb 4 20:00:47 2025 GMT
Not After : Feb 3 20:05:47 2026 GMT
Subject: CN=67FBFECFCF63EE363698A12F549896F613616090
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:7d:18:19:36:71:4f:8d:d0:8e:ab:7c:9b:a3:
a8:4f:11:ca:ab:12:a9:17:22:5b:47:6c:99:61:46:
04:51:da:df:5a:cc:b6:41:71:fa:ef:a3:9f:5a:53:
4d:40:6b:61:3b:9d:12:be:ee:3e:45:45:a7:42:d5:
a7:8c:5a:40:58:99:40:07:25:e1:0e:bc:01:51:1f:
9a:07:60:11:ea:58:a2:56:d4:d5:6f:9c:9c:3f:45:
e5:8f:68:db:2a:16:d0:74:81:7d:e4:c1:30:33:01:
27:dc:ac:e0:39:07:f6:9c:3b:ec:e7:0b:d7:09:60:
03:b2:e1:65:0b:5e:22:91:61:03:71:43:c1:5c:bb:
d3:4b:80:f9:b4:03:05:bb:f5:4e:e6:bb:f4:37:0a:
26:e8:37:90:4e:97:22:80:ca:1f:3d:2b:a6:3e:a7:
9b:cd:df:59:1e:ca:e0:b0:65:94:90:7f:df:4f:2c:
84:0a:d4:c4:25:98:ef:ed:24:dc:67:a6:f9:93:9b:
7f:fd:9e:8d:74:47:4b:cc:5a:45:6b:c2:bb:24:6c:
a1:2a:19:26:f3:11:e2:17:d6:8c:47:14:b2:a6:7c:
32:16:8b:5d:2e:4f:c3:63:fa:ce:ee:71:51:ae:49:
b5:19:be:f8:c9:dc:8b:4b:e1:58:d3:2e:fe:b0:e8:
1b:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:FB:FE:CF:CF:63:EE:36:36:98:A1:2F:54:98:96:F6:13:61:60:90
X509v3 Authority Key Identifier:
keyid:2C:10:5A:8B:66:A7:9B:27:8F:D2:A3:8A:15:72:47:7F:4D:88:66:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/3D9C74732942F64EDC7028E9D7B05FBE3B5F54C5A8BEC145299796788F683309/0/2C105A8B66A79B278FD2A38A1572477F4D886617.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C105A8B66A79B278FD2A38A1572477F4D886617.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3D9C74732942F64EDC7028E9D7B05FBE3B5F54C5A8BEC145299796788F683309/0/34352e3137342e3132392e302f32342d3234203d3e20323637383230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.174.129.0/24
Signature Algorithm: sha256WithRSAEncryption
71:24:1a:e1:82:a7:3b:39:3e:fa:57:21:10:ec:93:82:dd:9c:
85:4d:df:9b:b4:ec:0b:3d:99:36:2d:54:ae:f7:51:8c:22:be:
ad:5a:60:b5:c3:97:df:cc:b2:b7:5f:25:40:44:ea:d3:a4:59:
e6:ca:a5:70:9d:53:db:19:fd:2f:0c:0d:e6:4f:0d:b6:32:16:
74:75:41:dd:65:8c:56:08:6f:35:b9:d5:e4:06:9d:1d:4b:fa:
53:72:e3:63:2c:99:59:b7:c5:ac:3b:d7:56:96:bd:d1:57:5a:
42:51:83:bf:8d:f7:4e:77:cd:f8:59:cd:44:9c:8a:48:8e:8d:
d8:aa:4d:b7:05:01:9a:ac:de:36:7f:fb:50:c5:2e:2e:e8:0f:
72:11:ff:7a:e3:35:c9:84:67:b8:94:66:76:a5:de:08:11:48:
63:7e:a9:23:33:7e:50:d2:04:45:0f:4e:5d:c7:ef:bc:6e:f6:
01:81:65:b3:95:78:d8:ea:0b:9d:94:36:94:4d:49:50:4c:03:
6b:4d:bf:65:ac:9a:33:31:a5:c9:7d:f9:3e:d8:4f:7a:d8:ef:
e9:a0:b2:d8:46:3f:ba:61:fc:c4:8f:24:7e:2c:40:01:b8:95:
3f:38:70:cc:42:c0:d0:36:04:ff:3c:1a:ba:9a:14:a0:16:df:
56:ec:19:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:19:43 2025 by rpki-client