Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/742A7E7E1B3A5D5AF5651EA91DE5F7FC8125FBCDB237BF0D5BD1AC541D58389B/0/34352e3137372e36382e302f32322d3234203d3e203238313030.roa
File: 34352e3137372e36382e302f32322d3234203d3e203238313030.roa (raw, json)
Hash identifier: 5TgU4Ewh7kidRv+RW2vd5pQxuZHv6bsdKUyZKJTqPGY=
Subject key identifier: 12:D5:7D:8C:F4:41:88:01:FA:23:B3:12:31:3F:42:13:39:E1:63:75
Certificate issuer: /CN=A7CFF94DCCB1CF71C27C4C2F3A5B362B029C0723
Certificate serial: 075074A9DA5CE8B38FBD766A85E3263CE1C3A391
Authority key identifier: A7:CF:F9:4D:CC:B1:CF:71:C2:7C:4C:2F:3A:5B:36:2B:02:9C:07:23
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A7CFF94DCCB1CF71C27C4C2F3A5B362B029C0723.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/742A7E7E1B3A5D5AF5651EA91DE5F7FC8125FBCDB237BF0D5BD1AC541D58389B/0/34352e3137372e36382e302f32322d3234203d3e203238313030.roa
Signing time: Tue 04 Feb 2025 18:27:29 +0000
ROA not before: Tue 04 Feb 2025 18:22:29 +0000
ROA not after: Tue 03 Feb 2026 18:27:29 +0000
asID: 28100
IP address blocks: 45.177.68.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:50:74:a9:da:5c:e8:b3:8f:bd:76:6a:85:e3:26:3c:e1:c3:a3:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A7CFF94DCCB1CF71C27C4C2F3A5B362B029C0723
Validity
Not Before: Feb 4 18:22:29 2025 GMT
Not After : Feb 3 18:27:29 2026 GMT
Subject: CN=12D57D8CF4418801FA23B312313F421339E16375
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:01:98:33:5f:bb:c9:92:a3:35:51:4a:25:c9:
bf:de:e8:b9:b8:be:37:5b:a7:7a:1a:b7:d2:16:85:
25:08:0a:91:3e:09:79:2c:f8:8b:88:8d:e9:1c:cb:
94:ff:4e:d8:bd:ca:08:29:a6:9d:4c:8c:66:bc:0e:
5f:38:47:1a:69:ae:42:c3:76:6c:5a:03:19:73:ae:
60:0b:92:cd:d0:cc:b4:a2:e9:1c:f2:64:61:08:2a:
21:b1:bb:c3:06:2f:db:d0:76:7a:3b:a1:57:cd:1f:
69:af:f6:14:45:f0:29:ce:05:e2:d1:bd:cb:6e:f9:
e1:31:bb:14:ac:88:0e:c0:c6:69:02:10:a3:83:d0:
d4:0e:d0:93:da:61:9a:75:c5:5e:49:34:68:3c:5e:
6f:3d:69:66:bf:b6:0e:4b:83:67:ea:37:41:20:cf:
98:25:7d:3a:d2:4f:e9:ad:94:37:01:62:16:2d:d0:
a5:75:d7:c8:3f:ed:52:05:da:3b:f4:9c:9e:bf:4b:
30:f0:e7:39:d6:2c:66:6f:54:6f:03:cf:ae:0f:ad:
e0:ea:c1:7d:2d:c7:26:b3:dc:0b:b4:42:13:99:f5:
32:ac:9c:57:17:b4:cb:3e:84:e4:b7:97:81:6a:5a:
99:eb:2e:fc:6c:a5:68:59:0c:ab:6e:8c:91:68:ee:
93:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:D5:7D:8C:F4:41:88:01:FA:23:B3:12:31:3F:42:13:39:E1:63:75
X509v3 Authority Key Identifier:
keyid:A7:CF:F9:4D:CC:B1:CF:71:C2:7C:4C:2F:3A:5B:36:2B:02:9C:07:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/742A7E7E1B3A5D5AF5651EA91DE5F7FC8125FBCDB237BF0D5BD1AC541D58389B/0/A7CFF94DCCB1CF71C27C4C2F3A5B362B029C0723.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A7CFF94DCCB1CF71C27C4C2F3A5B362B029C0723.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/742A7E7E1B3A5D5AF5651EA91DE5F7FC8125FBCDB237BF0D5BD1AC541D58389B/0/34352e3137372e36382e302f32322d3234203d3e203238313030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.177.68.0/22
Signature Algorithm: sha256WithRSAEncryption
13:c4:6e:58:89:74:44:39:52:ed:90:29:90:1f:32:a9:37:f3:
4b:c5:49:d0:0b:b1:d0:f1:33:d4:c9:2d:84:fd:99:67:21:43:
91:f7:c6:04:b6:33:89:71:54:fa:08:d7:35:a9:91:98:cf:c5:
bc:3f:38:7c:fc:b7:e3:2b:51:9f:8f:73:b6:6a:cb:7b:92:75:
50:73:35:5b:46:68:2d:a9:49:a0:b8:ce:4b:13:49:dd:f9:8e:
72:2b:ce:6a:79:d0:db:1e:1b:76:a9:81:aa:e4:dc:a9:cf:1d:
30:cc:96:0a:3b:5c:b5:45:2e:ad:61:26:ea:6b:87:9d:bf:59:
f2:f7:5a:41:73:dc:27:77:a3:60:8c:f3:d6:74:cf:af:69:2a:
6d:b2:32:3e:b6:61:74:2d:58:ba:a2:4d:8c:93:bc:00:a9:ec:
87:90:c4:a8:45:b9:6f:a7:13:b3:0a:2a:b2:e9:2a:67:87:70:
b4:d9:08:84:7b:96:51:93:04:e8:54:bc:4e:ed:11:94:8e:4f:
19:f0:d7:6a:3f:b9:23:6c:ca:97:d1:ba:6f:2f:db:29:63:25:
14:85:6c:5d:bb:62:71:35:9e:0d:60:2b:2b:12:2a:54:8e:eb:
11:c2:dd:10:2e:f2:8b:1b:d9:3d:aa:9e:ab:8a:fc:67:7f:fb:
5f:46:d5:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:02:42 2025 by rpki-client