Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/67C804332D2C88CDD58274B7AA5F0DFF5B0AD2156A4C399B572EF6942579448E/0/34352e3232342e3134322e302f32342d3234203d3e20323635383433.roa
File: 34352e3232342e3134322e302f32342d3234203d3e20323635383433.roa (raw, json)
Hash identifier: IQWUzpcxOe9ZYw73DRrZdzONOlND/Ch54AA0uFjLd9U=
Subject key identifier: 0E:C6:EE:7C:30:AE:38:CC:88:14:35:02:08:75:F3:E4:7B:8B:27:81
Certificate issuer: /CN=9AB130A96BF3302DC0486818E0523507034D3DA9
Certificate serial: 765418B20D1F3159BEF809DA723384D90CA00639
Authority key identifier: 9A:B1:30:A9:6B:F3:30:2D:C0:48:68:18:E0:52:35:07:03:4D:3D:A9
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9AB130A96BF3302DC0486818E0523507034D3DA9.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/67C804332D2C88CDD58274B7AA5F0DFF5B0AD2156A4C399B572EF6942579448E/0/34352e3232342e3134322e302f32342d3234203d3e20323635383433.roa
Signing time: Tue 04 Feb 2025 18:20:04 +0000
ROA not before: Tue 04 Feb 2025 18:15:04 +0000
ROA not after: Tue 03 Feb 2026 18:20:04 +0000
asID: 265843
IP address blocks: 45.224.142.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:54:18:b2:0d:1f:31:59:be:f8:09:da:72:33:84:d9:0c:a0:06:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9AB130A96BF3302DC0486818E0523507034D3DA9
Validity
Not Before: Feb 4 18:15:04 2025 GMT
Not After : Feb 3 18:20:04 2026 GMT
Subject: CN=0EC6EE7C30AE38CC881435020875F3E47B8B2781
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:88:30:9b:20:f0:b3:31:c7:15:57:98:2d:68:
82:55:4c:e2:2f:c0:fc:bf:b4:8a:5b:8f:06:f6:11:
70:c3:96:60:ad:71:dc:f3:19:1e:14:d0:aa:f3:c8:
40:8a:26:f4:b4:ee:39:99:35:13:1a:9f:1a:da:b0:
89:bd:d2:12:ad:f3:76:ee:4d:f8:a3:90:f4:b9:ff:
12:50:32:74:13:bd:c0:b7:f0:4a:4e:b3:6c:6b:ab:
50:42:b2:89:5c:41:32:22:fc:14:17:c2:ea:04:ce:
5e:6b:4f:e8:08:47:7d:70:f1:93:ee:ac:23:ad:8a:
94:c7:53:fe:37:8a:11:6e:ec:5d:b5:d2:99:af:a2:
5a:25:05:d0:ee:e1:27:17:52:0c:03:be:78:c3:16:
75:70:bf:70:17:aa:e7:52:c9:91:3b:3c:4a:04:39:
d3:28:f2:20:31:11:7e:fd:d9:8e:ca:a1:4b:77:89:
d5:bf:20:c5:43:91:67:5e:96:68:9e:5d:85:53:c1:
cd:d4:ce:ba:d3:cd:d5:a4:20:11:f3:e0:92:d4:87:
65:c0:a0:2a:58:67:c0:15:b3:dc:df:6c:d0:d5:ed:
ed:b1:34:9c:e4:8e:7e:98:99:c1:4e:33:a6:10:56:
a6:d9:a9:b9:c8:01:d4:a3:7d:7b:d6:13:e1:fa:36:
6c:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:C6:EE:7C:30:AE:38:CC:88:14:35:02:08:75:F3:E4:7B:8B:27:81
X509v3 Authority Key Identifier:
keyid:9A:B1:30:A9:6B:F3:30:2D:C0:48:68:18:E0:52:35:07:03:4D:3D:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/67C804332D2C88CDD58274B7AA5F0DFF5B0AD2156A4C399B572EF6942579448E/0/9AB130A96BF3302DC0486818E0523507034D3DA9.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9AB130A96BF3302DC0486818E0523507034D3DA9.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/67C804332D2C88CDD58274B7AA5F0DFF5B0AD2156A4C399B572EF6942579448E/0/34352e3232342e3134322e302f32342d3234203d3e20323635383433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.224.142.0/24
Signature Algorithm: sha256WithRSAEncryption
70:de:ad:59:7b:61:89:62:ee:0a:cf:8a:60:40:a1:37:15:ce:
24:5c:49:f2:5f:d8:05:82:7f:58:b5:4d:33:d2:3c:af:53:32:
4b:9d:d4:a7:09:10:a1:1a:04:fe:15:79:58:73:08:19:64:3e:
27:31:d6:8e:b6:41:74:07:4f:a7:eb:bf:7f:93:9c:2b:55:2b:
44:2b:a4:c7:5a:83:2d:3f:2c:15:58:44:d9:d1:09:a0:94:34:
16:4b:56:46:01:d4:be:5f:76:28:9e:7c:85:92:da:05:f2:ee:
45:12:df:c2:5a:0b:64:a0:61:99:28:21:c5:83:72:40:28:1f:
25:92:e3:12:62:e9:6e:7b:0b:4d:dc:d3:bc:07:ab:9b:cb:77:
c7:87:d6:19:0f:21:d3:53:d9:35:40:6b:54:1d:ed:79:3c:5c:
d4:71:77:58:72:d2:3c:73:ad:63:49:b4:ae:33:e2:60:cc:0d:
a1:d9:8a:7f:ae:47:8b:19:2a:09:9b:79:9d:c0:16:25:d5:c8:
b5:06:c7:cd:66:bd:dd:b0:a5:fc:7b:c3:51:3e:a7:d8:5f:53:
0e:43:5e:b1:a1:af:87:83:3a:88:e3:fc:1d:99:f1:f5:95:06:
b9:76:e5:bd:29:96:15:c3:c3:33:ca:f0:5b:2a:a1:68:df:e8:
6a:61:42:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:27:46 2025 by rpki-client