Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7098DDFA21B7D33CACF90BFB5F984261271C5E4866791FA00C23FA4C09158FA4/0/34352e3137342e3234382e302f32342d3234203d3e20323635353832.roa
File: 34352e3137342e3234382e302f32342d3234203d3e20323635353832.roa (raw, json)
Hash identifier: XVagGR6piYGJmfnnfd7Arscaq3lxCzxxzV+cmGicGFM=
Subject key identifier: 1C:D3:86:64:5F:E2:9D:0F:02:D9:02:E2:E3:DA:26:E7:3B:47:9A:A5
Certificate issuer: /CN=57A24B2E7F7BE98EACAFDE9392D1239AA1E92B5A
Certificate serial: 672C2B092C724B6E1AB43AD1AEAA5188EE132ADF
Authority key identifier: 57:A2:4B:2E:7F:7B:E9:8E:AC:AF:DE:93:92:D1:23:9A:A1:E9:2B:5A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/57A24B2E7F7BE98EACAFDE9392D1239AA1E92B5A.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/7098DDFA21B7D33CACF90BFB5F984261271C5E4866791FA00C23FA4C09158FA4/0/34352e3137342e3234382e302f32342d3234203d3e20323635353832.roa
Signing time: Tue 04 Feb 2025 18:42:05 +0000
ROA not before: Tue 04 Feb 2025 18:37:05 +0000
ROA not after: Tue 03 Feb 2026 18:42:05 +0000
asID: 265582
IP address blocks: 45.174.248.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:2c:2b:09:2c:72:4b:6e:1a:b4:3a:d1:ae:aa:51:88:ee:13:2a:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57A24B2E7F7BE98EACAFDE9392D1239AA1E92B5A
Validity
Not Before: Feb 4 18:37:05 2025 GMT
Not After : Feb 3 18:42:05 2026 GMT
Subject: CN=1CD386645FE29D0F02D902E2E3DA26E73B479AA5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:20:93:d4:2b:8d:5c:ae:5f:41:34:eb:1f:43:
bd:e6:f3:bb:b2:ba:f8:24:6a:a2:e4:5e:8d:4b:98:
03:00:0d:df:a1:f0:b1:11:f2:0f:76:27:f3:77:bb:
3f:31:c3:42:3e:a6:ba:82:73:8a:34:d3:64:a2:23:
76:15:b2:2e:e3:af:ae:d3:b3:f7:bc:fb:ff:e6:92:
34:98:ba:e6:29:ce:d4:82:56:19:21:8d:89:e7:7e:
0f:00:ed:98:f5:ea:b6:e0:04:de:22:af:20:1a:5e:
82:34:68:f0:a1:1f:99:28:c5:e3:17:23:3d:86:73:
07:dc:46:29:05:0a:34:62:62:ff:7a:63:db:f7:51:
c6:99:b7:cd:e2:14:63:16:a4:72:91:c6:a8:13:ec:
88:54:fe:d4:cd:0a:d6:87:ce:62:e9:86:f9:32:83:
2a:21:69:8b:c5:f3:34:64:1c:ab:01:c2:93:52:12:
18:ad:28:ea:6f:3b:9c:54:37:25:30:75:73:61:a6:
3c:39:37:63:ee:da:2b:24:83:81:09:16:0d:9e:4f:
37:b3:69:1a:00:f6:fe:7f:19:5d:34:ee:8c:b4:c5:
a5:e6:29:51:8d:8c:f7:0e:58:0f:ed:8b:56:6a:01:
8e:60:0a:3b:81:77:44:34:c0:84:b0:6c:cf:33:7e:
a9:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:D3:86:64:5F:E2:9D:0F:02:D9:02:E2:E3:DA:26:E7:3B:47:9A:A5
X509v3 Authority Key Identifier:
keyid:57:A2:4B:2E:7F:7B:E9:8E:AC:AF:DE:93:92:D1:23:9A:A1:E9:2B:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/7098DDFA21B7D33CACF90BFB5F984261271C5E4866791FA00C23FA4C09158FA4/0/57A24B2E7F7BE98EACAFDE9392D1239AA1E92B5A.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/57A24B2E7F7BE98EACAFDE9392D1239AA1E92B5A.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7098DDFA21B7D33CACF90BFB5F984261271C5E4866791FA00C23FA4C09158FA4/0/34352e3137342e3234382e302f32342d3234203d3e20323635353832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.174.248.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:61:b6:7a:9a:0f:32:69:0f:5d:ad:c4:d6:e7:cd:df:c0:79:
12:be:6f:f9:a3:2f:c7:81:35:f7:9d:ec:56:8a:dc:30:63:9d:
6d:cd:31:dc:f2:bb:dc:c4:42:80:a8:e8:c3:c7:e3:70:e5:c2:
93:e3:a1:7a:5f:0f:48:7b:de:51:3e:03:c5:2a:90:4d:4f:44:
fb:be:d4:dc:7f:30:20:fb:ae:b4:f5:06:79:66:5d:19:0f:f0:
b0:cb:6a:32:2a:a2:21:af:f2:ac:e8:0f:aa:fa:32:18:c6:90:
b6:ca:62:65:6e:a6:7b:71:19:6c:34:9e:37:60:87:25:26:7c:
56:14:85:05:3a:97:21:31:0c:6c:03:f0:6a:13:93:67:29:61:
b3:3b:e6:a9:97:d1:31:53:e7:8c:b6:5e:bb:40:83:93:1d:61:
f3:fb:1d:fc:ec:ee:a0:a1:59:68:46:b8:f3:bb:a5:13:0b:4b:
c5:5f:11:52:4f:3a:c0:21:22:cf:af:c4:48:fc:30:54:a0:c2:
a2:ea:28:32:43:f6:cb:65:24:88:0c:60:de:90:d4:cb:d3:15:
f8:5f:73:13:f1:13:49:5c:b6:96:18:77:06:90:49:50:a7:c4:
8e:98:ba:e0:3e:58:86:5a:52:6d:1a:92:21:78:cf:58:cb:d8:
70:8c:e9:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:59:20 2025 by rpki-client