Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/69318625E29004EF60C160BBD28B633F4F0F0AE78E9DAD95BF88D69D9370CA37/0/34352e3136382e3139362e302f32322d3234203d3e203134373534.roa
File: 34352e3136382e3139362e302f32322d3234203d3e203134373534.roa (raw, json)
Hash identifier: E3ORjO0QNoVvFu94nHdA4IXQWdbCmESu4UZGezOOz3E=
Subject key identifier: 0B:51:D7:58:33:23:BE:F0:D1:01:FA:48:47:EB:77:27:D3:07:0B:09
Certificate issuer: /CN=5BA4CD8B65E4B3EDFA83BDF408BB532EA07C6DC2
Certificate serial: 365C92506796A1186A2997FB35A5775689CF409F
Authority key identifier: 5B:A4:CD:8B:65:E4:B3:ED:FA:83:BD:F4:08:BB:53:2E:A0:7C:6D:C2
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5BA4CD8B65E4B3EDFA83BDF408BB532EA07C6DC2.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/69318625E29004EF60C160BBD28B633F4F0F0AE78E9DAD95BF88D69D9370CA37/0/34352e3136382e3139362e302f32322d3234203d3e203134373534.roa
Signing time: Tue 04 Feb 2025 18:15:40 +0000
ROA not before: Tue 04 Feb 2025 18:10:40 +0000
ROA not after: Tue 03 Feb 2026 18:15:40 +0000
asID: 14754
IP address blocks: 45.168.196.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:5c:92:50:67:96:a1:18:6a:29:97:fb:35:a5:77:56:89:cf:40:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5BA4CD8B65E4B3EDFA83BDF408BB532EA07C6DC2
Validity
Not Before: Feb 4 18:10:40 2025 GMT
Not After : Feb 3 18:15:40 2026 GMT
Subject: CN=0B51D7583323BEF0D101FA4847EB7727D3070B09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:5d:3b:46:99:0b:ea:54:99:d6:7a:a1:a2:98:
a1:6c:ac:d3:33:ea:f8:8c:8c:90:e3:ac:ae:ad:bf:
15:82:d2:f3:92:49:fc:a3:b9:77:26:96:93:5f:df:
bd:a5:9e:37:5f:6a:c0:9c:55:a9:f5:f0:b1:89:d8:
b5:44:b6:af:d0:28:26:81:08:b6:8b:a4:bf:53:bd:
1c:df:a1:6a:7d:cb:3d:d6:1f:6a:f6:1f:9b:b4:51:
ae:ce:04:6c:ab:54:80:1a:e6:10:a3:67:1c:14:7d:
36:08:03:2a:ee:f0:36:cb:98:90:56:38:e9:56:bf:
cc:02:de:77:cb:82:4d:f5:b3:d3:1d:b9:51:43:72:
ab:c1:c1:a8:5b:bf:aa:7f:d8:84:75:a3:d4:b9:b2:
e7:56:8f:ba:6a:a0:fd:bb:a5:4c:b1:8b:6c:b2:43:
b3:95:86:85:97:fe:75:74:e2:11:ba:f9:ff:0a:3e:
38:6f:2e:32:d5:d3:ad:4b:c4:50:b1:55:92:d4:72:
dc:55:df:93:72:b7:86:36:31:55:c9:c2:eb:55:e2:
40:6c:7f:b8:6e:f1:32:09:35:03:16:9d:38:fe:45:
f8:ec:c6:4f:69:e5:9d:10:58:38:60:56:0a:e2:94:
7a:a2:8e:80:0b:03:31:4a:0b:01:f4:14:a8:6d:86:
9b:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:51:D7:58:33:23:BE:F0:D1:01:FA:48:47:EB:77:27:D3:07:0B:09
X509v3 Authority Key Identifier:
keyid:5B:A4:CD:8B:65:E4:B3:ED:FA:83:BD:F4:08:BB:53:2E:A0:7C:6D:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/69318625E29004EF60C160BBD28B633F4F0F0AE78E9DAD95BF88D69D9370CA37/0/5BA4CD8B65E4B3EDFA83BDF408BB532EA07C6DC2.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5BA4CD8B65E4B3EDFA83BDF408BB532EA07C6DC2.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/69318625E29004EF60C160BBD28B633F4F0F0AE78E9DAD95BF88D69D9370CA37/0/34352e3136382e3139362e302f32322d3234203d3e203134373534.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.168.196.0/22
Signature Algorithm: sha256WithRSAEncryption
23:48:22:78:9e:c5:3f:7a:91:be:5d:ec:3d:d7:22:31:be:7d:
b1:d3:c6:f1:45:b6:0c:67:9d:44:b7:f9:0d:81:2b:27:64:64:
58:c3:e4:c3:60:a7:36:5d:12:7a:d8:4e:c7:27:f2:4b:31:1a:
ce:46:88:b0:3c:38:92:42:09:c4:5e:b8:0b:2f:f9:a1:04:76:
35:e4:60:52:56:3a:b4:f8:84:9e:7c:c0:cf:dc:d2:96:45:04:
60:fb:ae:32:05:2f:56:01:bc:3c:1a:3e:8f:ce:05:3b:49:83:
3d:ba:63:24:ac:7e:4e:de:57:a3:2c:63:d5:b7:66:f7:7e:1b:
55:12:82:f5:e9:6a:83:f9:f5:87:64:dd:ae:6c:98:dd:62:12:
4a:64:35:78:6d:18:3c:20:9e:b6:37:60:d2:f9:20:0e:34:bf:
de:05:fd:97:33:f4:20:a5:bc:04:40:a6:f6:e0:7a:39:0d:90:
74:18:28:6b:c7:a8:e0:8a:09:db:30:ba:2a:be:4a:13:7e:d3:
da:da:89:9d:3f:53:7a:e7:13:9b:40:81:b5:7b:fe:7c:c9:ee:
46:f5:8a:52:bd:c6:dd:d3:3f:3c:ec:ba:22:0b:33:ad:30:2e:
6b:d8:c9:ef:5b:8e:c5:28:ab:32:b9:a4:89:57:07:64:9e:89:
bc:23:61:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:38:37 2025 by rpki-client