Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4AAD381D56BB1246F9A08210B02C7D0414BC98C8CD7F9A62687DF7BFCCA5F4AE/0/34352e3137312e3131382e302f32342d3234203d3e20323632313931.roa
File: 34352e3137312e3131382e302f32342d3234203d3e20323632313931.roa (raw, json)
Hash identifier: Ed+TINyonQnupa0zUhcJ76o7sv/DoNLs4QOtK5r729M=
Subject key identifier: 38:09:46:BE:AD:6D:19:EB:2F:A4:A9:91:93:5D:FD:29:30:7D:DE:D0
Certificate issuer: /CN=B3AA883DF802251B99A42D7F578AD8768A729025
Certificate serial: 2B277E3118FFC937644A8C8FB1FCC9BD892C6C58
Authority key identifier: B3:AA:88:3D:F8:02:25:1B:99:A4:2D:7F:57:8A:D8:76:8A:72:90:25
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B3AA883DF802251B99A42D7F578AD8768A729025.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4AAD381D56BB1246F9A08210B02C7D0414BC98C8CD7F9A62687DF7BFCCA5F4AE/0/34352e3137312e3131382e302f32342d3234203d3e20323632313931.roa
Signing time: Tue 04 Feb 2025 18:52:33 +0000
ROA not before: Tue 04 Feb 2025 18:47:33 +0000
ROA not after: Tue 03 Feb 2026 18:52:33 +0000
asID: 262191
IP address blocks: 45.171.118.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:27:7e:31:18:ff:c9:37:64:4a:8c:8f:b1:fc:c9:bd:89:2c:6c:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B3AA883DF802251B99A42D7F578AD8768A729025
Validity
Not Before: Feb 4 18:47:33 2025 GMT
Not After : Feb 3 18:52:33 2026 GMT
Subject: CN=380946BEAD6D19EB2FA4A991935DFD29307DDED0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:bf:83:88:76:1d:3b:dc:ff:c3:e2:ff:02:45:
ac:8a:63:ff:9c:17:52:68:56:7f:9d:00:0f:a1:5c:
08:26:fc:a9:5f:81:5b:7a:2a:3d:3e:e7:f5:e9:56:
95:99:14:9f:45:fc:c7:30:4e:14:6d:2c:a6:ac:6b:
f0:dc:b2:7f:2c:8d:ca:5b:79:5c:6f:7f:d1:06:46:
60:0e:d2:03:b1:c4:29:b2:65:01:2e:26:51:fa:89:
6f:56:76:8a:44:da:1f:c3:fe:38:31:dd:7e:b6:98:
df:44:46:62:64:03:3e:03:a8:31:63:50:9f:c6:c4:
29:6e:0a:b5:77:15:09:5f:32:ff:66:03:5a:cd:6c:
ea:a8:2d:54:e5:47:3e:f7:31:b2:38:d3:66:65:5e:
1d:c0:9a:52:ad:a7:79:ad:1b:00:e9:ce:53:ae:60:
e9:35:1d:c4:e6:fe:dc:93:79:1f:5c:fe:4c:d4:64:
4f:dd:9b:9c:52:91:20:69:42:97:35:d0:1e:1a:86:
12:95:44:99:bb:30:a0:84:97:81:a7:46:3d:e8:96:
60:26:c1:cf:88:fb:48:c3:82:d0:87:f9:0f:2a:a9:
5a:39:ea:21:4f:12:2e:2c:20:25:bf:11:a5:58:a3:
97:b8:bd:a6:a5:23:52:0c:39:41:a7:45:a3:aa:01:
75:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:09:46:BE:AD:6D:19:EB:2F:A4:A9:91:93:5D:FD:29:30:7D:DE:D0
X509v3 Authority Key Identifier:
keyid:B3:AA:88:3D:F8:02:25:1B:99:A4:2D:7F:57:8A:D8:76:8A:72:90:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/4AAD381D56BB1246F9A08210B02C7D0414BC98C8CD7F9A62687DF7BFCCA5F4AE/0/B3AA883DF802251B99A42D7F578AD8768A729025.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B3AA883DF802251B99A42D7F578AD8768A729025.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4AAD381D56BB1246F9A08210B02C7D0414BC98C8CD7F9A62687DF7BFCCA5F4AE/0/34352e3137312e3131382e302f32342d3234203d3e20323632313931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.171.118.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:74:61:b1:f6:c8:69:77:c6:9c:30:53:50:0e:4b:25:0d:02:
59:b9:63:57:52:08:76:42:6b:cb:f1:44:d4:c4:f8:d5:3a:a4:
4f:b9:d4:3f:f0:e8:05:fd:6f:bd:8a:67:f7:ea:44:b4:71:7e:
d5:4d:ef:4d:16:a7:fb:fb:7c:9f:84:0a:bc:2d:14:9b:60:39:
05:d1:8a:79:72:0f:96:52:38:bd:e8:33:24:43:75:a0:ab:f6:
24:79:46:2f:97:33:68:56:35:ce:8c:f0:7b:28:15:eb:4c:13:
54:e9:02:92:7b:07:eb:df:3f:2e:6c:be:5b:76:3a:b3:b0:2b:
15:a9:2b:a2:9f:25:f5:58:5c:9a:83:87:1c:74:89:ab:c9:de:
9d:6a:80:db:25:df:01:78:45:6e:8e:76:ef:ef:b5:0d:c7:65:
b8:89:0f:d2:c8:c0:f1:bd:29:06:88:af:ec:3f:b3:96:99:f8:
79:3a:76:2e:06:4e:22:09:47:07:17:68:c9:01:44:85:33:f8:
65:22:13:16:e2:56:3e:6d:cd:72:2b:9d:8c:ac:71:4f:df:8d:
c0:0c:5a:f4:4e:61:ef:95:e7:ba:41:00:aa:03:17:75:70:71:
3c:ac:ff:63:c3:ec:cd:75:80:1f:78:85:9d:17:af:00:30:a6:
09:f0:06:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:12:30 2025 by rpki-client