Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7E881F09924393A7B9D8997101B0AED377BBB8D61DD085719E3BA2F38E3737A9/0/34352e3136302e3230302e302f32342d3234203d3e20323636383834.roa
File: 34352e3136302e3230302e302f32342d3234203d3e20323636383834.roa (raw, json)
Hash identifier: VzKudr+ieFKJgOjwccj2C2am6TlsyHznqYbeTqVEoTI=
Subject key identifier: 17:87:98:29:FE:55:71:53:43:B9:2C:BE:13:00:E7:C9:11:D1:A6:34
Certificate issuer: /CN=87A91E98C90C25D18222E29A92C4DA9CA00DA421
Certificate serial: 21135DEF1EABE77FE4E36385A7D65ABCF9527F1F
Authority key identifier: 87:A9:1E:98:C9:0C:25:D1:82:22:E2:9A:92:C4:DA:9C:A0:0D:A4:21
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/87A91E98C90C25D18222E29A92C4DA9CA00DA421.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/7E881F09924393A7B9D8997101B0AED377BBB8D61DD085719E3BA2F38E3737A9/0/34352e3136302e3230302e302f32342d3234203d3e20323636383834.roa
Signing time: Tue 04 Feb 2025 18:27:27 +0000
ROA not before: Tue 04 Feb 2025 18:22:27 +0000
ROA not after: Tue 03 Feb 2026 18:27:27 +0000
asID: 266884
IP address blocks: 45.160.200.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:13:5d:ef:1e:ab:e7:7f:e4:e3:63:85:a7:d6:5a:bc:f9:52:7f:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87A91E98C90C25D18222E29A92C4DA9CA00DA421
Validity
Not Before: Feb 4 18:22:27 2025 GMT
Not After : Feb 3 18:27:27 2026 GMT
Subject: CN=17879829FE55715343B92CBE1300E7C911D1A634
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:86:2f:ec:e1:27:c3:78:d1:be:f3:41:b0:64:
9d:4e:8e:1f:29:e4:a6:bf:d7:c0:33:b2:48:4a:84:
40:17:41:0c:33:41:d6:22:78:f3:8f:71:e7:23:43:
ec:d0:84:41:28:32:3b:8d:c2:82:8c:bb:d2:5c:fa:
ca:5c:ea:06:4d:c5:5a:bb:71:66:e6:d0:31:16:ed:
66:e5:5a:bf:e7:e2:21:08:9f:cc:bb:84:12:55:3c:
2d:55:0d:bb:e8:56:ed:69:5e:9c:10:e1:b8:6a:a8:
11:be:b4:6e:08:43:a7:3c:ee:cc:a1:09:ea:59:c6:
60:b1:09:e9:1f:76:51:29:bc:02:e4:1d:43:ce:5a:
e1:15:58:8e:50:aa:03:a0:f4:05:a1:33:cd:58:27:
ae:5a:b2:f9:7f:6c:46:89:84:67:64:a4:29:a3:09:
fa:dd:f4:44:ff:34:0b:96:77:31:51:80:ba:28:17:
24:81:84:f1:01:aa:ae:99:1d:30:70:81:0b:4f:b5:
2c:34:a8:e3:bf:ad:1d:b7:f8:f5:8c:55:36:2d:ba:
1f:38:a3:d9:31:ec:18:12:86:4e:e6:0d:bf:fb:0c:
4b:e8:f8:aa:56:46:f3:83:45:b9:c5:df:8b:e1:bd:
a9:93:8b:dc:f2:5a:a8:e9:3a:19:9e:de:9f:7f:7f:
7c:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:87:98:29:FE:55:71:53:43:B9:2C:BE:13:00:E7:C9:11:D1:A6:34
X509v3 Authority Key Identifier:
keyid:87:A9:1E:98:C9:0C:25:D1:82:22:E2:9A:92:C4:DA:9C:A0:0D:A4:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/7E881F09924393A7B9D8997101B0AED377BBB8D61DD085719E3BA2F38E3737A9/0/87A91E98C90C25D18222E29A92C4DA9CA00DA421.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/87A91E98C90C25D18222E29A92C4DA9CA00DA421.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7E881F09924393A7B9D8997101B0AED377BBB8D61DD085719E3BA2F38E3737A9/0/34352e3136302e3230302e302f32342d3234203d3e20323636383834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.160.200.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:00:9b:ca:25:80:bf:0c:84:42:f6:8f:4e:69:9c:ac:c7:09:
f0:1e:66:0e:0d:69:35:51:d6:d0:3f:52:0b:e8:73:ec:df:42:
74:ec:6c:ac:65:fa:7b:2f:0b:4e:b4:3c:34:c6:e4:41:24:9f:
9d:41:57:c4:24:f0:51:ae:c0:0e:06:a7:7a:4b:ab:72:f3:b7:
d0:8a:59:c6:f5:51:3d:f1:59:b3:a8:a6:2b:7f:83:f8:16:ab:
fe:9e:ac:cc:e2:41:64:5e:51:bd:32:9d:05:88:a9:57:62:d6:
f9:9a:a8:ad:da:92:b2:61:56:86:64:7c:0e:60:b6:49:26:88:
48:bd:51:ea:20:34:25:25:74:2b:19:db:e4:0b:e2:f6:39:b2:
c3:fd:77:29:ce:dd:10:cf:d2:70:40:f4:9b:2c:67:d4:d6:dc:
17:6b:e9:12:28:43:e5:35:07:a5:f4:08:55:a9:29:07:67:0b:
24:00:31:76:6e:af:e0:3a:0b:4d:0a:2a:0c:e0:23:c1:41:59:
2c:75:fa:73:2d:32:a9:53:88:2d:7e:63:09:45:ff:3d:9b:f0:
c8:46:7c:0a:41:4f:d5:b5:27:2f:5e:24:5f:b9:f9:d5:37:68:
b4:0c:fd:f1:fd:2e:81:75:13:cf:5b:0b:0d:5c:22:a6:b8:75:
57:0d:b7:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:00:16 2025 by rpki-client