Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5908941AC14891934A6AB9537E6AC980A20D5FEB8F41AC8436184D5C68486FC8/0/34352e37312e3230302e302f32322d3234203d3e203532343638.roa
File: 34352e37312e3230302e302f32322d3234203d3e203532343638.roa (raw, json)
Hash identifier: 2PIbmilyEFnxrKbsaaNaDK/kTUMLXw8X8ofA+bxsHY8=
Subject key identifier: E0:2E:BE:02:72:B5:48:C9:B3:1B:06:AA:F7:63:CC:21:59:5D:CF:50
Certificate issuer: /CN=F0922EC2833EAD17A747DBA885C8FF32611CEA72
Certificate serial: 041BA66118CC5F01BE04F515B8E0D546741BB3DD
Authority key identifier: F0:92:2E:C2:83:3E:AD:17:A7:47:DB:A8:85:C8:FF:32:61:1C:EA:72
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F0922EC2833EAD17A747DBA885C8FF32611CEA72.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5908941AC14891934A6AB9537E6AC980A20D5FEB8F41AC8436184D5C68486FC8/0/34352e37312e3230302e302f32322d3234203d3e203532343638.roa
Signing time: Tue 04 Feb 2025 18:14:42 +0000
ROA not before: Tue 04 Feb 2025 18:09:42 +0000
ROA not after: Tue 03 Feb 2026 18:14:42 +0000
asID: 52468
IP address blocks: 45.71.200.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:1b:a6:61:18:cc:5f:01:be:04:f5:15:b8:e0:d5:46:74:1b:b3:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F0922EC2833EAD17A747DBA885C8FF32611CEA72
Validity
Not Before: Feb 4 18:09:42 2025 GMT
Not After : Feb 3 18:14:42 2026 GMT
Subject: CN=E02EBE0272B548C9B31B06AAF763CC21595DCF50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c8:a4:35:45:85:ba:86:e8:3f:fa:c7:0e:18:
8b:c7:02:7d:6f:f0:e4:ab:92:60:8b:e7:6f:da:ef:
cb:f7:f1:b8:36:b2:23:a5:0e:42:e8:c3:82:67:7a:
c5:22:85:ef:21:96:dd:9d:d8:7f:ba:96:0a:fa:40:
ae:6f:c2:24:b9:70:e6:b8:1d:01:df:06:f1:5e:11:
b6:70:6c:aa:37:78:4c:14:8e:d0:6d:bb:60:d3:02:
83:8e:c7:8a:04:b4:1a:56:d7:b4:c5:70:86:d2:d2:
3a:21:f2:b8:dc:1d:11:e6:1a:d2:82:89:ae:8c:e1:
be:da:0f:e6:8d:61:25:89:a8:fc:b3:66:87:71:62:
f2:8b:4b:98:c2:b6:9d:0b:76:67:a1:5a:f9:52:c5:
1d:06:39:91:62:ee:fd:16:26:ec:fc:32:17:b5:4f:
eb:b4:ab:fa:1f:59:54:85:c9:5d:08:ac:d1:41:46:
cc:6a:ec:ec:47:9e:ac:6a:96:3d:c5:04:64:39:57:
e8:de:00:74:48:4d:97:75:6f:9b:58:11:15:b2:6f:
48:bf:0f:39:86:24:15:d2:d3:56:28:a7:91:9e:8a:
08:7a:82:d3:42:fb:ee:bf:9c:26:2d:d9:92:80:99:
72:ad:16:a9:ae:93:af:b8:92:77:bb:41:39:01:ed:
88:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:2E:BE:02:72:B5:48:C9:B3:1B:06:AA:F7:63:CC:21:59:5D:CF:50
X509v3 Authority Key Identifier:
keyid:F0:92:2E:C2:83:3E:AD:17:A7:47:DB:A8:85:C8:FF:32:61:1C:EA:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/5908941AC14891934A6AB9537E6AC980A20D5FEB8F41AC8436184D5C68486FC8/0/F0922EC2833EAD17A747DBA885C8FF32611CEA72.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F0922EC2833EAD17A747DBA885C8FF32611CEA72.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5908941AC14891934A6AB9537E6AC980A20D5FEB8F41AC8436184D5C68486FC8/0/34352e37312e3230302e302f32322d3234203d3e203532343638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.71.200.0/22
Signature Algorithm: sha256WithRSAEncryption
03:ec:ad:f8:b4:8c:7a:7f:9d:15:5a:a5:34:a0:27:6a:19:84:
29:ae:8a:68:36:7e:88:85:b3:00:6b:01:9b:5d:45:42:7c:0f:
cc:68:14:f2:75:7b:08:a0:d7:9f:95:03:ec:f4:9e:46:07:37:
05:2d:c5:9d:24:dd:8d:78:57:3d:fa:f3:68:26:63:f8:63:a3:
13:7f:9e:59:ba:ee:be:c9:92:60:a1:cd:95:37:b8:1c:7d:2f:
bb:5d:e1:79:05:e0:e7:41:f0:c7:9c:b0:03:7e:19:04:98:87:
62:9d:cd:c4:f6:b0:1a:41:5e:e7:40:87:42:79:a0:1c:48:76:
62:a0:67:54:b4:2f:f7:91:6f:7e:ef:90:1d:5f:e3:70:f0:aa:
e2:8c:9c:5a:a8:70:02:92:fd:c1:69:49:35:3a:9a:4d:a2:8f:
8a:69:65:97:6b:39:69:08:17:1a:5f:e4:2c:50:7e:17:9f:bb:
68:4c:cf:5b:cc:7d:b0:f8:d1:34:07:d0:b1:b8:ac:74:3d:95:
c5:65:35:40:01:af:12:57:e9:22:10:40:4e:57:3f:53:3c:c1:
c5:af:a5:92:f7:30:e7:6a:4f:19:3f:8e:3c:32:76:19:f5:cd:
91:e9:87:f7:06:44:9a:ad:20:f7:98:cd:b1:f6:18:8d:e9:a4:
2b:43:d2:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:14:16 2025 by rpki-client