Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3DF10705730A1E4D8C493F2790B6F69D6C13A14D111E91284DF88FABABEA2E82/0/34352e3137382e37312e302f32342d3234203d3e20323634373538.roa
File: 34352e3137382e37312e302f32342d3234203d3e20323634373538.roa (raw, json)
Hash identifier: tbUewBPd2mteSucpaVAXbvRl8RyLJ7N6pcsjpR4zsok=
Subject key identifier: 7D:D2:31:00:D6:E4:B1:73:97:42:D8:F7:BD:F2:9B:19:56:CB:C2:C1
Certificate issuer: /CN=DB636261E4B370BE1ABAE7E5B50921E00A6D5979
Certificate serial: 497F8A4FE4BBCC1F8A954BB6A0E2E329E20EAAC9
Authority key identifier: DB:63:62:61:E4:B3:70:BE:1A:BA:E7:E5:B5:09:21:E0:0A:6D:59:79
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB636261E4B370BE1ABAE7E5B50921E00A6D5979.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3DF10705730A1E4D8C493F2790B6F69D6C13A14D111E91284DF88FABABEA2E82/0/34352e3137382e37312e302f32342d3234203d3e20323634373538.roa
Signing time: Tue 04 Feb 2025 18:33:55 +0000
ROA not before: Tue 04 Feb 2025 18:28:55 +0000
ROA not after: Tue 03 Feb 2026 18:33:55 +0000
asID: 264758
IP address blocks: 45.178.71.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:7f:8a:4f:e4:bb:cc:1f:8a:95:4b:b6:a0:e2:e3:29:e2:0e:aa:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DB636261E4B370BE1ABAE7E5B50921E00A6D5979
Validity
Not Before: Feb 4 18:28:55 2025 GMT
Not After : Feb 3 18:33:55 2026 GMT
Subject: CN=7DD23100D6E4B1739742D8F7BDF29B1956CBC2C1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:7d:eb:9f:8a:a1:d6:24:ed:10:31:c6:a9:e7:
12:d2:c7:1c:7e:3b:c9:2c:03:93:f6:50:ab:f5:b1:
27:5a:d0:5f:d1:23:1c:26:c3:66:72:1a:09:4f:92:
f7:09:a1:e9:a4:49:b7:3e:e3:0c:a5:0d:c9:cc:d9:
03:41:df:4b:d8:ce:c7:a0:5b:1d:97:f8:53:83:cf:
90:3b:2a:11:10:8d:5a:8b:2a:59:82:20:d4:4e:b8:
a0:7e:a0:15:07:d8:bf:2a:27:ca:fd:be:11:40:31:
1c:b1:95:34:cd:80:3d:9d:04:c5:0f:d8:f3:bb:dd:
29:05:e6:4a:15:df:f9:62:ac:ee:09:8e:41:36:6d:
dc:3a:89:04:5f:95:79:17:da:08:cb:0c:11:cb:58:
46:24:15:9c:2a:57:7b:65:e6:b2:b1:1f:cf:d4:90:
bd:c3:c1:61:a4:fc:90:e5:06:95:e3:f0:6c:84:d1:
05:3c:2e:ae:51:a3:41:16:c2:0b:be:cb:24:4f:2e:
18:e6:31:9e:17:a0:b3:26:03:f0:8c:d1:83:6a:09:
72:3f:4a:e0:5f:3e:9a:5b:4d:9f:9d:67:f5:e8:b1:
8c:98:0a:db:77:88:cb:89:f4:db:f0:cf:e9:2c:a6:
1e:d1:2a:41:12:74:85:24:3c:a8:e8:22:f9:a4:1e:
d0:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:D2:31:00:D6:E4:B1:73:97:42:D8:F7:BD:F2:9B:19:56:CB:C2:C1
X509v3 Authority Key Identifier:
keyid:DB:63:62:61:E4:B3:70:BE:1A:BA:E7:E5:B5:09:21:E0:0A:6D:59:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/3DF10705730A1E4D8C493F2790B6F69D6C13A14D111E91284DF88FABABEA2E82/0/DB636261E4B370BE1ABAE7E5B50921E00A6D5979.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB636261E4B370BE1ABAE7E5B50921E00A6D5979.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3DF10705730A1E4D8C493F2790B6F69D6C13A14D111E91284DF88FABABEA2E82/0/34352e3137382e37312e302f32342d3234203d3e20323634373538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.178.71.0/24
Signature Algorithm: sha256WithRSAEncryption
61:2d:62:d4:fd:5f:67:85:c1:e0:2f:5f:11:16:b3:b1:7a:2e:
73:6a:b7:9d:19:09:a3:23:cb:8d:b2:7c:37:c8:33:2f:aa:c8:
d2:4d:9c:ad:be:47:c4:99:07:d5:cc:f0:4c:9f:b0:79:87:6b:
d2:41:9b:33:c7:03:cc:fc:02:05:59:41:a2:5c:fd:0a:06:17:
74:03:5a:9c:57:dc:f1:b7:27:5e:06:2e:c6:50:3b:a1:64:ac:
70:ac:5b:47:96:35:74:d2:fd:a6:00:19:13:71:74:7b:51:c5:
a9:60:ef:3a:35:b5:67:fd:a2:16:97:94:51:06:2e:df:1a:ab:
1f:3f:40:68:8b:ef:6a:fc:c1:03:7f:3b:99:36:a4:28:ad:fe:
79:d2:13:fd:7e:59:ac:ac:1e:66:49:41:4c:6b:8d:be:be:98:
88:a5:7a:48:4b:11:6a:d2:8f:6d:cd:54:d1:07:b4:fa:63:07:
19:4f:5a:e8:7e:25:f9:4a:94:d8:ae:b1:47:b4:67:14:e3:7b:
40:40:1c:a6:29:2d:ae:e8:3b:96:f5:07:cb:fe:6a:a5:06:4e:
27:ec:dc:75:d4:aa:da:f3:ed:96:e7:44:40:b2:eb:c8:c9:45:
08:b8:c2:4e:4f:e8:5b:df:87:e6:05:44:6f:c9:48:d5:0b:5e:
f1:aa:fd:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:05:56 2025 by rpki-client