Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/517E31B11E9E1C7780B38638B236300BA0D24C0F749E8D819BC14D5DD686EC2A/0/34352e3137302e3235332e302f32342d3234203d3e203238343233.roa
File: 34352e3137302e3235332e302f32342d3234203d3e203238343233.roa (raw, json)
Hash identifier: +7hkpTWV+iDe3gdhIHHwTbeMIToN3Z+Y0D8+Bu7Eitg=
Subject key identifier: F3:7C:85:23:E8:7A:9D:BB:84:21:EC:35:DE:C4:D7:7B:07:3E:C6:8B
Certificate issuer: /CN=6A86E783E5047079A17A5B8082BB89DADBE252A6
Certificate serial: 757A7DAAD4A29AD99E7AEC648228E5FAC1693277
Authority key identifier: 6A:86:E7:83:E5:04:70:79:A1:7A:5B:80:82:BB:89:DA:DB:E2:52:A6
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A86E783E5047079A17A5B8082BB89DADBE252A6.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/517E31B11E9E1C7780B38638B236300BA0D24C0F749E8D819BC14D5DD686EC2A/0/34352e3137302e3235332e302f32342d3234203d3e203238343233.roa
Signing time: Sat 18 Jan 2025 20:45:01 +0000
ROA not before: Sat 18 Jan 2025 20:40:01 +0000
ROA not after: Sat 17 Jan 2026 20:45:01 +0000
asID: 28423
IP address blocks: 45.170.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:7a:7d:aa:d4:a2:9a:d9:9e:7a:ec:64:82:28:e5:fa:c1:69:32:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6A86E783E5047079A17A5B8082BB89DADBE252A6
Validity
Not Before: Jan 18 20:40:01 2025 GMT
Not After : Jan 17 20:45:01 2026 GMT
Subject: CN=F37C8523E87A9DBB8421EC35DEC4D77B073EC68B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:96:a4:9a:d6:2a:63:5e:97:fe:4a:3a:51:c2:
9e:5d:51:c1:17:74:8c:73:c4:be:eb:58:97:14:16:
49:71:d5:6f:ba:5d:fe:2f:f8:3e:7a:3c:5b:64:b5:
de:a8:66:b5:cb:b6:0c:07:9b:fd:1c:57:0a:33:a1:
32:af:bd:55:fc:7b:87:0f:53:88:02:36:32:94:8a:
fc:07:dd:1a:d2:2e:54:ad:0d:c2:f2:ac:99:d7:41:
99:6d:8a:1f:02:8c:cd:20:2b:e6:90:45:11:d2:cd:
10:86:ac:ca:76:2c:ba:d3:d8:ce:7b:5d:85:94:1c:
8d:a9:a2:d4:3f:96:69:da:34:16:3d:67:c0:ff:4f:
68:5f:7d:90:46:90:81:78:6a:d1:a4:f2:42:5a:be:
45:e9:4f:44:89:54:22:bd:25:ea:e3:70:1d:dc:8f:
c7:ce:aa:97:73:02:1e:cd:27:07:f2:b4:41:ae:e2:
db:e4:84:1f:66:d8:1e:56:5e:ae:dc:65:1b:1f:09:
09:98:c0:dc:f0:73:56:3f:1c:58:71:77:60:9b:a4:
79:c7:a4:f3:9d:2e:06:a7:3b:09:14:41:a9:4c:bd:
73:5c:62:f2:94:c3:63:6b:34:95:32:06:bb:76:7a:
1d:88:8d:8b:73:aa:6a:1d:71:83:72:78:64:21:77:
1a:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:7C:85:23:E8:7A:9D:BB:84:21:EC:35:DE:C4:D7:7B:07:3E:C6:8B
X509v3 Authority Key Identifier:
keyid:6A:86:E7:83:E5:04:70:79:A1:7A:5B:80:82:BB:89:DA:DB:E2:52:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/517E31B11E9E1C7780B38638B236300BA0D24C0F749E8D819BC14D5DD686EC2A/0/6A86E783E5047079A17A5B8082BB89DADBE252A6.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A86E783E5047079A17A5B8082BB89DADBE252A6.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/517E31B11E9E1C7780B38638B236300BA0D24C0F749E8D819BC14D5DD686EC2A/0/34352e3137302e3235332e302f32342d3234203d3e203238343233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.170.253.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:b4:8d:a7:4d:bf:0e:c3:9e:d1:c8:c4:86:75:7a:d2:ab:be:
ba:8f:ac:19:3b:ba:7e:e4:0c:ab:82:83:03:87:b8:a8:36:e6:
9f:d5:63:05:7b:58:dd:f5:73:21:11:63:70:29:fc:d0:ae:c4:
5e:09:a8:a9:25:0f:a4:0c:a0:0e:1b:12:36:44:8a:70:cf:cc:
e7:62:66:fd:e2:e1:31:fa:8e:88:b7:51:6d:cd:07:e9:d7:b3:
81:54:31:54:40:ce:db:f0:9b:0e:ae:6f:87:23:d6:bf:5a:03:
a9:dc:b9:11:35:68:e8:c5:6a:44:b9:58:b9:3a:55:cd:b4:ef:
b2:12:52:c1:86:72:f8:44:32:84:a5:00:bd:49:ce:79:33:1a:
a8:0e:9a:f6:30:1c:8f:6c:da:9c:7e:a5:e6:68:57:96:95:ca:
55:99:b1:5d:82:13:54:35:0f:ed:fc:4e:68:af:43:05:6a:69:
48:f0:f4:6e:fc:e6:3f:ec:48:31:dd:af:63:9d:34:75:bb:c5:
27:aa:3e:40:b3:8f:04:61:b0:d0:84:ea:12:b3:fe:f1:31:46:
0e:a6:ae:b7:61:c2:47:6e:b0:1a:08:06:54:c5:d7:80:01:53:
e7:d4:32:05:b5:c8:3f:15:8a:7d:1a:fc:34:e6:d9:64:bf:66:
21:9f:bc:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:54:08 2025 by rpki-client