Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7D0F8891D78DAA1F8C582A7D8BB5DD24295B24E567453B8F0E2BDDAB224D8CA5/0/34352e3137322e31362e302f32342d3234203d3e20323637373835.roa
File: 34352e3137322e31362e302f32342d3234203d3e20323637373835.roa (raw, json)
Hash identifier: 4f8mDzwp6xU+DGWU/JCI3+PpasTVoZy5ZiUnHDCih1I=
Subject key identifier: 21:59:03:4E:95:A0:DD:0F:1C:59:4E:59:79:FB:28:F3:4B:41:14:D8
Certificate issuer: /CN=C71137D78DD5CBCAB50F867000F510F0B3587F9A
Certificate serial: 45AFD9EF8EBD23AD7BC1AF39BA6644234890BBA4
Authority key identifier: C7:11:37:D7:8D:D5:CB:CA:B5:0F:86:70:00:F5:10:F0:B3:58:7F:9A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C71137D78DD5CBCAB50F867000F510F0B3587F9A.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/7D0F8891D78DAA1F8C582A7D8BB5DD24295B24E567453B8F0E2BDDAB224D8CA5/0/34352e3137322e31362e302f32342d3234203d3e20323637373835.roa
Signing time: Tue 04 Feb 2025 20:05:03 +0000
ROA not before: Tue 04 Feb 2025 20:00:03 +0000
ROA not after: Tue 03 Feb 2026 20:05:03 +0000
asID: 267785
IP address blocks: 45.172.16.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:af:d9:ef:8e:bd:23:ad:7b:c1:af:39:ba:66:44:23:48:90:bb:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C71137D78DD5CBCAB50F867000F510F0B3587F9A
Validity
Not Before: Feb 4 20:00:03 2025 GMT
Not After : Feb 3 20:05:03 2026 GMT
Subject: CN=2159034E95A0DD0F1C594E5979FB28F34B4114D8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e2:aa:7e:00:04:cb:f9:32:67:5e:66:03:1c:
67:26:90:98:c7:10:1b:3e:67:a1:41:81:2e:49:3c:
d4:96:ce:c6:c8:27:94:2a:07:bb:d0:5b:7a:86:55:
a9:1e:7c:60:e1:11:53:15:ae:d6:c1:d6:c0:06:b3:
bc:e9:75:a3:11:c1:f6:0b:84:df:a9:4d:68:67:cb:
cc:e6:96:be:89:f0:a9:77:52:56:39:85:10:32:a3:
fd:6b:45:e2:f7:eb:6e:6d:4a:d9:70:34:42:ea:6a:
9b:6e:e7:ad:48:ad:47:c4:99:a4:75:99:91:4c:d3:
d4:13:cf:05:f6:fb:e5:33:52:4b:4f:bb:31:23:e8:
d5:3b:7c:a7:f8:5e:37:97:00:04:0b:31:35:80:04:
2f:f5:82:96:75:47:98:2d:23:43:6b:4a:87:e8:5c:
f3:56:4f:2d:38:77:04:11:53:cf:dc:05:16:66:71:
a2:85:7a:b7:d3:d2:1e:99:23:60:8a:fa:89:88:42:
98:f6:de:21:cd:ba:e9:eb:60:6f:a3:f1:3c:27:4b:
40:16:39:c3:67:30:f1:e7:5d:0e:59:bf:0f:75:97:
4a:fb:d0:36:06:8f:df:2d:a7:96:37:11:98:a6:90:
48:b5:8f:82:c8:58:34:a5:37:53:29:d2:13:19:61:
f4:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:59:03:4E:95:A0:DD:0F:1C:59:4E:59:79:FB:28:F3:4B:41:14:D8
X509v3 Authority Key Identifier:
keyid:C7:11:37:D7:8D:D5:CB:CA:B5:0F:86:70:00:F5:10:F0:B3:58:7F:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/7D0F8891D78DAA1F8C582A7D8BB5DD24295B24E567453B8F0E2BDDAB224D8CA5/0/C71137D78DD5CBCAB50F867000F510F0B3587F9A.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C71137D78DD5CBCAB50F867000F510F0B3587F9A.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7D0F8891D78DAA1F8C582A7D8BB5DD24295B24E567453B8F0E2BDDAB224D8CA5/0/34352e3137322e31362e302f32342d3234203d3e20323637373835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.172.16.0/24
Signature Algorithm: sha256WithRSAEncryption
be:c5:93:9f:48:a1:de:4c:50:9f:6f:64:6c:d4:83:2f:1c:be:
8b:4c:e0:2b:3d:31:11:c8:d5:8d:53:f4:53:ec:46:5b:22:43:
b9:92:81:85:ae:40:12:b0:88:9f:bd:b3:53:24:3a:7a:6c:20:
37:03:c5:21:ce:9b:2b:c0:7b:1f:38:37:b2:0e:f7:b2:92:09:
d7:51:42:90:0a:50:af:4a:93:ea:77:7a:96:f9:03:1d:47:ef:
6d:39:1a:4e:91:49:d6:d4:bd:7a:38:d0:3e:00:eb:02:2c:cf:
73:6b:70:0a:07:47:1b:0c:63:31:96:a7:68:62:07:09:3d:41:
3b:8e:0a:8e:c0:7d:d8:62:e3:21:94:d5:76:fe:d3:18:b9:0d:
83:f4:49:57:46:9e:06:1d:46:f9:94:13:69:b4:43:33:94:5b:
9d:46:87:b0:3c:7e:e3:ac:c5:76:91:a8:d6:a6:9a:a2:59:7b:
41:96:8b:49:c3:94:de:ef:26:11:ac:01:e1:81:12:d4:b7:c7:
65:5c:84:79:6b:be:0d:7b:32:23:12:ea:20:3d:e6:db:86:82:
e5:c5:ba:a4:da:b3:83:dd:8a:77:7e:92:fc:d2:be:aa:e3:d7:
72:cf:0f:59:32:4f:bd:f2:49:c4:f2:1e:67:f8:ef:c5:a0:ed:
f9:5e:32:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:12:06 2025 by rpki-client