Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/54BA96F85C9D105F886FEFB0DE3EFE1E716E43919570DDBB0411D73DC3D5E779/0/34352e3232382e36342e302f32332d3234203d3e20323636383836.roa
File: 34352e3232382e36342e302f32332d3234203d3e20323636383836.roa (raw, json)
Hash identifier: s67he6Z+P7oxpadZbp5Hg8Xnr7CmKghT4JaKlo+2vE8=
Subject key identifier: C5:0B:8B:9C:B1:AE:4F:A8:64:CA:B5:7F:2E:A3:D2:CB:24:15:10:CA
Certificate issuer: /CN=305D99240C1F7BDB2B10D08A965144A9CC144B54
Certificate serial: 59D660F55D32F71677E4B8DAC102AE0CE931593E
Authority key identifier: 30:5D:99:24:0C:1F:7B:DB:2B:10:D0:8A:96:51:44:A9:CC:14:4B:54
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/305D99240C1F7BDB2B10D08A965144A9CC144B54.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/54BA96F85C9D105F886FEFB0DE3EFE1E716E43919570DDBB0411D73DC3D5E779/0/34352e3232382e36342e302f32332d3234203d3e20323636383836.roa
Signing time: Tue 04 Feb 2025 20:03:47 +0000
ROA not before: Tue 04 Feb 2025 19:58:47 +0000
ROA not after: Tue 03 Feb 2026 20:03:47 +0000
asID: 266886
IP address blocks: 45.228.64.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:d6:60:f5:5d:32:f7:16:77:e4:b8:da:c1:02:ae:0c:e9:31:59:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=305D99240C1F7BDB2B10D08A965144A9CC144B54
Validity
Not Before: Feb 4 19:58:47 2025 GMT
Not After : Feb 3 20:03:47 2026 GMT
Subject: CN=C50B8B9CB1AE4FA864CAB57F2EA3D2CB241510CA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:ee:55:8c:19:40:78:79:8f:b9:ae:00:d8:99:
63:3d:4d:0b:6c:39:36:74:fa:21:18:f0:08:28:33:
af:b2:b8:33:30:e1:2e:97:71:58:b3:48:b1:d0:bb:
cf:31:78:d2:7d:51:70:51:d2:f9:56:4d:8e:c1:5d:
e4:9a:35:1a:4f:ec:fb:45:0e:be:03:62:e0:81:fa:
ef:53:7f:aa:2a:91:a2:8a:35:18:e3:73:75:bd:b6:
58:62:10:a3:e3:10:31:87:d9:36:5d:03:64:78:7a:
c8:60:c9:6b:89:35:1c:6e:17:21:45:cb:c3:e6:94:
84:47:ce:bf:5b:b5:63:39:3a:8d:3b:2b:e3:ab:e2:
73:f8:a7:fe:53:55:63:ec:38:d3:ed:b6:0d:39:98:
d5:0a:ab:79:ae:42:75:f1:c6:18:e8:80:c0:15:21:
55:fd:38:c7:e6:6d:a6:20:a5:99:11:0b:9c:3c:bd:
e1:ef:d6:9d:63:de:85:3b:92:59:d4:c0:0f:50:76:
10:e9:78:d0:45:3e:30:04:37:2d:76:aa:a3:b6:41:
1e:fd:2f:50:59:1d:9a:f7:cd:5c:6a:20:8a:e9:16:
2e:7a:8c:2c:96:5b:93:49:cd:8c:13:9b:88:3c:7d:
c2:a6:e3:fe:e5:41:2a:6b:98:ef:bb:55:cc:78:45:
58:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:0B:8B:9C:B1:AE:4F:A8:64:CA:B5:7F:2E:A3:D2:CB:24:15:10:CA
X509v3 Authority Key Identifier:
keyid:30:5D:99:24:0C:1F:7B:DB:2B:10:D0:8A:96:51:44:A9:CC:14:4B:54
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/54BA96F85C9D105F886FEFB0DE3EFE1E716E43919570DDBB0411D73DC3D5E779/0/305D99240C1F7BDB2B10D08A965144A9CC144B54.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/305D99240C1F7BDB2B10D08A965144A9CC144B54.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/54BA96F85C9D105F886FEFB0DE3EFE1E716E43919570DDBB0411D73DC3D5E779/0/34352e3232382e36342e302f32332d3234203d3e20323636383836.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.228.64.0/23
Signature Algorithm: sha256WithRSAEncryption
40:4c:c6:17:d9:9e:75:e8:3b:3d:e6:e3:cf:2c:9a:29:ad:9a:
15:58:51:9d:29:d9:ca:39:03:c9:eb:7b:41:8f:2a:6b:b9:3f:
16:45:d8:31:e6:f9:77:18:d0:56:8c:c7:54:e2:94:84:10:19:
0d:f1:fe:8e:b3:e1:50:81:ad:65:b2:b8:59:c1:45:e1:89:87:
de:6c:8b:5e:cf:bd:53:51:db:b6:f9:7b:0e:3c:e2:f0:d8:2a:
0a:cd:3a:7b:9f:71:69:67:67:3d:51:29:63:d2:ec:fe:d9:de:
91:ea:9c:b2:cf:c7:94:17:12:3f:c7:ce:6b:86:62:4a:5d:26:
da:4a:d5:45:4b:e2:61:b2:45:43:48:5e:c1:b8:81:87:a5:75:
d8:0f:f9:50:a8:e1:59:ea:d2:3b:b3:d8:94:19:aa:42:2c:ca:
67:65:b2:89:0f:25:80:4c:86:ad:9a:bb:08:1a:94:57:ae:76:
7d:fb:00:8f:2b:f2:44:a0:ee:d3:a1:c1:5d:c6:dc:b4:07:9c:
90:49:64:8d:4c:c9:0c:62:75:9b:f8:54:55:33:5b:9b:ce:d2:
ab:43:72:58:28:b1:e4:4c:7f:e6:14:53:ec:e6:cc:8a:06:2f:
23:58:f7:ac:fc:5c:d7:81:54:16:b7:29:07:d0:ba:3b:1e:94:
88:85:03:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:27:23 2025 by rpki-client