Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/650BDB31D3D319F884FA873E04804D3E0F3B378516BB92B51940DB57FBA3BCE8/0/34352e3233382e36302e302f32322d3234203d3e20323632323133.roa
File: 34352e3233382e36302e302f32322d3234203d3e20323632323133.roa (raw, json)
Hash identifier: mIG87BQNWWY/5mbA0aweBRd2vVhlRhyilNLqHL84374=
Subject key identifier: DC:5F:48:AA:FC:5A:CC:F8:C3:4E:03:CB:5C:A6:DF:71:80:D3:28:A3
Certificate issuer: /CN=1059E6A27D6124C0A7041840F9564D6388CB460D
Certificate serial: 1923D02E546BDC742A12B791392F126E62A3D97E
Authority key identifier: 10:59:E6:A2:7D:61:24:C0:A7:04:18:40:F9:56:4D:63:88:CB:46:0D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1059E6A27D6124C0A7041840F9564D6388CB460D.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/650BDB31D3D319F884FA873E04804D3E0F3B378516BB92B51940DB57FBA3BCE8/0/34352e3233382e36302e302f32322d3234203d3e20323632323133.roa
Signing time: Tue 04 Feb 2025 18:47:33 +0000
ROA not before: Tue 04 Feb 2025 18:42:33 +0000
ROA not after: Tue 03 Feb 2026 18:47:33 +0000
asID: 262213
IP address blocks: 45.238.60.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:23:d0:2e:54:6b:dc:74:2a:12:b7:91:39:2f:12:6e:62:a3:d9:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1059E6A27D6124C0A7041840F9564D6388CB460D
Validity
Not Before: Feb 4 18:42:33 2025 GMT
Not After : Feb 3 18:47:33 2026 GMT
Subject: CN=DC5F48AAFC5ACCF8C34E03CB5CA6DF7180D328A3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:1c:e9:a8:5b:d8:6f:54:58:4d:f5:e8:e0:4a:
c1:d1:fb:35:59:c4:18:0e:ed:b8:61:d0:42:7a:37:
ce:46:5b:65:86:5d:c1:66:e8:b4:b7:9d:f9:6c:9d:
a6:6d:79:3b:41:3c:fa:e6:8b:4e:48:da:d2:88:d0:
7f:bd:7a:c8:f5:5c:23:17:3a:b2:88:2b:b2:0e:0e:
5e:11:a7:38:37:69:48:e0:c4:5b:3d:85:d6:b8:63:
48:ee:12:fd:77:24:b4:d6:df:54:30:07:bb:99:72:
61:d0:2a:d2:13:11:09:6c:50:0f:41:84:71:d9:d8:
c3:52:eb:b6:88:3c:eb:6f:39:53:bd:83:7c:a5:6a:
5b:6e:2f:dd:ae:23:ab:00:90:83:2e:20:49:10:8e:
84:95:29:9a:84:57:ad:6f:e3:1c:55:e4:d0:0d:7b:
a0:85:41:6b:fd:bd:47:cd:93:29:29:ad:44:d6:19:
a5:eb:de:96:02:a6:48:1b:95:3c:5f:8d:14:1e:dd:
ed:31:de:8d:47:fd:6c:0d:35:b3:93:fb:ff:c9:6b:
04:5f:59:39:29:e6:8e:85:3b:62:88:f5:7b:0e:44:
95:db:f9:95:37:0e:82:14:18:b7:53:d1:71:eb:9e:
05:34:e9:35:75:7b:9d:28:8f:c5:0d:6e:99:a7:69:
b5:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:5F:48:AA:FC:5A:CC:F8:C3:4E:03:CB:5C:A6:DF:71:80:D3:28:A3
X509v3 Authority Key Identifier:
keyid:10:59:E6:A2:7D:61:24:C0:A7:04:18:40:F9:56:4D:63:88:CB:46:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/650BDB31D3D319F884FA873E04804D3E0F3B378516BB92B51940DB57FBA3BCE8/0/1059E6A27D6124C0A7041840F9564D6388CB460D.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1059E6A27D6124C0A7041840F9564D6388CB460D.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/650BDB31D3D319F884FA873E04804D3E0F3B378516BB92B51940DB57FBA3BCE8/0/34352e3233382e36302e302f32322d3234203d3e20323632323133.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.238.60.0/22
Signature Algorithm: sha256WithRSAEncryption
52:07:00:78:26:8b:7f:09:f5:48:21:fb:12:de:5d:28:9f:45:
30:f1:61:68:bf:dc:6d:61:10:fb:21:d1:5b:33:c5:3a:8f:2d:
50:73:91:6d:00:7a:0c:af:a9:98:ae:54:37:26:2f:dd:e4:e9:
6e:db:2d:1d:c5:77:f6:4c:77:70:58:c8:f8:83:21:80:f4:44:
23:b9:6e:66:7e:dc:3b:84:57:26:f6:a1:36:6c:73:85:c3:0d:
74:b0:a9:5c:b4:b4:de:38:75:76:e7:04:ce:24:3f:81:80:35:
af:d4:38:36:a7:4f:70:93:01:e5:34:e5:e5:71:70:22:e9:c1:
40:e8:99:6f:04:a8:7b:43:d1:dd:e2:e5:14:74:b9:36:8e:7b:
e7:20:27:2f:d7:f8:d6:7e:4d:3d:29:1b:15:18:f3:8f:6d:c3:
e6:da:94:3e:9a:92:9a:f3:7d:5e:09:99:f8:fb:a4:e6:50:0b:
ac:40:29:6c:a9:0d:06:99:81:c6:6c:47:55:62:f9:d5:54:8a:
80:d7:a9:b3:75:1d:e2:79:d8:db:36:00:09:b8:2f:c6:38:c1:
61:fb:e2:b5:51:1b:96:37:b7:76:b9:f0:5d:e7:e9:f5:49:ee:
a7:56:b9:0e:82:91:00:71:cd:3e:9c:48:fe:a1:94:26:c5:f1:
3d:62:96:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:21:18 2025 by rpki-client