Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/34352e3232392e34302e302f32342d3234203d3e203233323433.roa
File: 34352e3232392e34302e302f32342d3234203d3e203233323433.roa (raw, json)
Hash identifier: ymydKwd+zcZVi0Z4y4N8ozWs90CyP2P7GV4If3G6Hh4=
Subject key identifier: E7:72:BC:99:31:10:43:0F:56:B9:A2:2B:61:C8:D8:88:41:62:12:25
Certificate issuer: /CN=54E41C0DADB12465AFF5CF7A38930582E4499083
Certificate serial: 47E839D1A4FC6D39AD1120ADF10930781A4519DD
Authority key identifier: 54:E4:1C:0D:AD:B1:24:65:AF:F5:CF:7A:38:93:05:82:E4:49:90:83
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54E41C0DADB12465AFF5CF7A38930582E4499083.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/34352e3232392e34302e302f32342d3234203d3e203233323433.roa
Signing time: Tue 04 Feb 2025 18:06:36 +0000
ROA not before: Tue 04 Feb 2025 18:01:36 +0000
ROA not after: Tue 03 Feb 2026 18:06:36 +0000
asID: 23243
IP address blocks: 45.229.40.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:e8:39:d1:a4:fc:6d:39:ad:11:20:ad:f1:09:30:78:1a:45:19:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54E41C0DADB12465AFF5CF7A38930582E4499083
Validity
Not Before: Feb 4 18:01:36 2025 GMT
Not After : Feb 3 18:06:36 2026 GMT
Subject: CN=E772BC993110430F56B9A22B61C8D88841621225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:e8:f0:49:e5:05:30:df:41:ca:17:ab:f4:65:
23:f0:52:29:b0:ac:76:62:56:71:55:51:ef:93:a8:
5d:e8:39:93:a9:27:3d:0b:d6:2c:be:0f:d4:5f:55:
fe:63:8c:33:5f:22:4a:21:13:ec:06:3b:0e:0d:fc:
de:79:2e:f1:ee:9d:f2:be:6a:83:ba:ad:6c:4c:50:
8f:2b:7d:1a:d3:b0:e3:1a:0e:da:73:90:52:1f:34:
51:b1:49:b3:90:b7:36:21:c6:04:ca:bb:f7:be:17:
49:45:da:87:e1:4b:ca:f2:6b:65:72:36:37:01:4b:
07:9c:4a:50:ca:7b:ee:fe:cf:dc:ea:49:90:b4:a3:
e6:f7:e4:a4:d8:cd:1d:81:fa:d3:86:0e:46:90:b0:
47:2d:d7:a1:eb:9c:54:5c:f1:09:55:f9:18:26:62:
70:fb:49:fe:ec:0c:54:2c:67:c4:4f:ed:4a:40:fc:
2a:c5:ee:34:ae:78:d4:7e:f0:b6:85:8a:15:f8:11:
64:ca:d2:0e:84:a3:e4:3e:c5:be:c7:93:fe:64:1f:
54:0f:7f:be:13:7f:f8:d7:dc:b5:01:8f:92:8d:5c:
41:32:01:84:89:8b:98:53:29:e7:fa:c8:b7:34:47:
8d:48:bb:97:db:2b:05:a8:3f:68:c7:00:ed:07:6b:
7d:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:72:BC:99:31:10:43:0F:56:B9:A2:2B:61:C8:D8:88:41:62:12:25
X509v3 Authority Key Identifier:
keyid:54:E4:1C:0D:AD:B1:24:65:AF:F5:CF:7A:38:93:05:82:E4:49:90:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/54E41C0DADB12465AFF5CF7A38930582E4499083.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54E41C0DADB12465AFF5CF7A38930582E4499083.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/34352e3232392e34302e302f32342d3234203d3e203233323433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.229.40.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:9f:6b:bb:d5:4d:33:1d:38:4a:c6:3a:fc:b7:cf:6b:4e:87:
72:16:57:21:60:9c:32:c9:ff:92:28:89:95:9f:b5:fc:f0:b8:
a8:d7:1b:3e:7c:f1:41:b0:d6:f1:06:fc:d3:0b:0d:7c:06:db:
fb:56:3a:26:bb:4e:7d:2e:99:83:30:90:85:75:3a:dd:02:40:
fb:0b:ad:9c:0c:ef:db:1f:4e:76:64:82:1c:90:20:74:7c:20:
e6:73:4a:e6:cb:fc:06:2f:fb:53:aa:01:26:e5:16:17:9f:81:
d3:d1:b2:47:df:97:8c:0c:c1:16:a3:42:87:57:50:73:e7:18:
5a:a9:12:47:3b:38:31:47:2e:2a:75:8c:59:64:a7:56:38:32:
f7:20:e6:73:dd:8d:73:23:f3:b0:27:6a:c5:70:4d:20:39:ed:
5c:79:e5:f6:7e:91:a5:d9:a1:67:cc:ba:d8:34:1e:7b:50:89:
aa:09:60:90:15:2f:36:2e:2c:7d:b6:1a:48:52:b3:4f:be:99:
92:3b:2c:69:d1:89:f1:73:dd:63:f1:20:9b:d6:d7:31:0c:66:
62:07:06:c0:59:c4:1c:23:e4:16:c6:c6:73:ad:8f:3b:35:e2:
f9:98:d5:9f:84:05:cf:c4:c0:31:4b:2d:27:c7:10:6a:7f:ab:
d9:09:f8:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:12:28 2025 by rpki-client