Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6E53B5F8017E6E47294355D90CCBA0C224A15646DD97017F8FE0BBABD76E1AB9/0/34352e372e3234302e302f32322d3234203d3e203532343434.roa
File: 34352e372e3234302e302f32322d3234203d3e203532343434.roa (raw, json)
Hash identifier: Whyu8HjeYjmaiHjxKG1nNjPC2A1UqHFnHswAg59WUpM=
Subject key identifier: B2:2B:0D:70:1B:53:B0:A9:09:B9:8D:06:93:92:CB:52:85:79:21:5F
Certificate issuer: /CN=EC52A7B06C00A79A61CBF2C71232AF61D3DDAF52
Certificate serial: 34135E60BBFF2D5E8E5281F9034F3C1E772E2847
Authority key identifier: EC:52:A7:B0:6C:00:A7:9A:61:CB:F2:C7:12:32:AF:61:D3:DD:AF:52
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC52A7B06C00A79A61CBF2C71232AF61D3DDAF52.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/6E53B5F8017E6E47294355D90CCBA0C224A15646DD97017F8FE0BBABD76E1AB9/0/34352e372e3234302e302f32322d3234203d3e203532343434.roa
Signing time: Tue 04 Feb 2025 18:22:43 +0000
ROA not before: Tue 04 Feb 2025 18:17:43 +0000
ROA not after: Tue 03 Feb 2026 18:22:43 +0000
asID: 52444
IP address blocks: 45.7.240.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:13:5e:60:bb:ff:2d:5e:8e:52:81:f9:03:4f:3c:1e:77:2e:28:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EC52A7B06C00A79A61CBF2C71232AF61D3DDAF52
Validity
Not Before: Feb 4 18:17:43 2025 GMT
Not After : Feb 3 18:22:43 2026 GMT
Subject: CN=B22B0D701B53B0A909B98D069392CB528579215F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c9:e5:88:05:5e:a3:fa:25:ae:6a:47:58:7a:
a0:be:ca:6f:36:28:bd:af:81:01:0e:8e:64:04:04:
a6:68:ef:92:79:43:49:4a:cd:d2:99:cb:5f:71:3e:
2b:a2:ed:4a:94:2a:cd:cb:19:dd:31:f8:9f:5f:bc:
54:43:48:0b:1d:c8:42:5a:22:77:18:dd:ab:0f:96:
7b:15:88:dd:cd:39:23:05:da:59:c8:c0:b3:0d:e1:
74:20:28:bd:4c:3b:35:3e:09:d3:11:b0:b2:5f:bf:
33:cd:6a:5c:a0:5a:f1:58:96:3b:2a:56:97:0c:13:
98:5e:ae:fa:9b:cf:7c:43:cb:6f:c1:11:84:fe:05:
1d:ce:55:51:29:60:37:bd:ad:19:6b:00:2c:52:ae:
62:95:5f:57:5d:39:5a:84:8d:3e:a2:38:9c:a9:d9:
e5:3f:22:c5:d4:e5:ad:0a:21:3f:b7:56:0d:e0:62:
d4:c4:eb:8b:c3:f7:15:51:e3:e2:c2:09:94:15:7d:
d3:5f:6f:bc:06:a9:84:69:ed:14:ee:af:6b:2d:bf:
b8:33:e3:c8:42:db:82:8c:01:09:37:cb:8f:a9:9a:
e3:c5:15:9d:f2:c9:64:c9:a0:72:d4:f2:8b:dd:9e:
2f:9b:d6:53:0b:96:1c:b2:51:cb:2d:79:ac:12:b1:
44:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:2B:0D:70:1B:53:B0:A9:09:B9:8D:06:93:92:CB:52:85:79:21:5F
X509v3 Authority Key Identifier:
keyid:EC:52:A7:B0:6C:00:A7:9A:61:CB:F2:C7:12:32:AF:61:D3:DD:AF:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/6E53B5F8017E6E47294355D90CCBA0C224A15646DD97017F8FE0BBABD76E1AB9/0/EC52A7B06C00A79A61CBF2C71232AF61D3DDAF52.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC52A7B06C00A79A61CBF2C71232AF61D3DDAF52.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6E53B5F8017E6E47294355D90CCBA0C224A15646DD97017F8FE0BBABD76E1AB9/0/34352e372e3234302e302f32322d3234203d3e203532343434.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.7.240.0/22
Signature Algorithm: sha256WithRSAEncryption
08:c8:c7:a7:ac:37:35:70:2c:de:3f:6d:ab:51:0e:a1:e7:8c:
ae:69:7d:49:1b:6c:f3:3b:d9:c1:bf:a9:67:4f:04:84:66:79:
79:45:d8:4c:7c:80:3d:93:90:fa:82:d1:60:c0:77:2e:bd:51:
c5:24:b3:57:39:4b:0e:f1:5b:7c:35:58:68:64:28:1d:da:6c:
ff:28:78:05:f4:4c:9c:25:8d:75:6d:e8:27:f7:d0:19:72:c3:
47:da:38:d6:88:5a:15:7c:47:b1:ad:8f:90:79:64:57:40:b8:
aa:af:c9:0b:79:16:9c:88:2a:73:fa:ee:58:87:9a:1d:2f:e8:
2f:5d:a6:a8:e6:5e:19:cb:2e:f5:59:3a:25:97:0d:6f:df:27:
7a:80:5b:79:61:fd:e6:bd:38:9d:92:83:33:19:4a:8a:59:6c:
5b:67:a5:33:60:13:f7:d1:e1:e7:76:97:a8:8c:08:63:ca:62:
d7:29:d3:15:48:cd:89:f7:77:82:ec:c6:16:40:e6:65:db:d0:
8b:97:cb:fb:53:9e:5e:ff:60:4d:92:b2:8c:c8:34:bf:89:5b:
64:35:0b:d3:be:53:19:a2:09:59:09:71:e7:e7:77:62:b0:e8:
41:c9:f5:09:c7:05:94:47:f7:06:e1:1a:2b:87:6c:48:32:30:
fc:fb:21:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:31:09 2025 by rpki-client