Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8DB359FBDD12B1D4AF7A57066DD229D0586F8D259779E9AADCA7994B631E393C/0/34352e37302e382e302f32322d3234203d3e20323635383137.roa
File: 34352e37302e382e302f32322d3234203d3e20323635383137.roa (raw, json)
Hash identifier: qhpW+arYm9zprv3SwYinsKGOyh55WdYWHydkLbgP9+w=
Subject key identifier: 79:4D:38:A9:65:86:73:D4:B3:2E:AE:1C:BB:75:3F:6B:BF:B5:18:BF
Certificate issuer: /CN=B0CE0EB3B25D7DB2D3F823AA4E8D73CAD5ADCD7A
Certificate serial: 495411FB249DA41EB790DE433871F82CE29183F3
Authority key identifier: B0:CE:0E:B3:B2:5D:7D:B2:D3:F8:23:AA:4E:8D:73:CA:D5:AD:CD:7A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B0CE0EB3B25D7DB2D3F823AA4E8D73CAD5ADCD7A.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8DB359FBDD12B1D4AF7A57066DD229D0586F8D259779E9AADCA7994B631E393C/0/34352e37302e382e302f32322d3234203d3e20323635383137.roa
Signing time: Tue 04 Feb 2025 18:03:42 +0000
ROA not before: Tue 04 Feb 2025 17:58:42 +0000
ROA not after: Tue 03 Feb 2026 18:03:42 +0000
asID: 265817
IP address blocks: 45.70.8.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:54:11:fb:24:9d:a4:1e:b7:90:de:43:38:71:f8:2c:e2:91:83:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B0CE0EB3B25D7DB2D3F823AA4E8D73CAD5ADCD7A
Validity
Not Before: Feb 4 17:58:42 2025 GMT
Not After : Feb 3 18:03:42 2026 GMT
Subject: CN=794D38A9658673D4B32EAE1CBB753F6BBFB518BF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:06:c4:66:a6:06:1c:d2:27:2d:c1:03:d4:fa:
68:e1:21:e2:ac:46:d7:c5:18:9b:83:23:83:51:cc:
11:7b:61:14:41:ab:66:2f:53:60:ca:69:56:62:b5:
3e:e4:ca:b1:88:61:1c:77:0d:cc:04:15:b9:f1:82:
3f:bc:0a:6f:3b:17:e5:8e:f2:34:35:f9:85:47:5c:
78:e5:08:ea:f7:6e:df:0b:0b:0c:f1:78:41:31:59:
4c:91:25:e4:5b:8f:10:09:5d:b1:7c:42:11:68:2f:
e4:07:74:e2:e8:c6:70:f9:95:29:a7:31:23:f5:98:
34:dd:b6:95:97:b1:ba:5f:48:f1:69:46:79:ae:2d:
d9:12:14:4f:96:d4:f7:bd:0e:8e:57:09:82:8d:29:
a2:7a:d7:c9:da:7c:e9:d6:d0:fa:8c:51:c8:18:e2:
ce:27:3e:00:25:d3:2c:e4:03:8c:fc:f3:41:9f:2d:
8e:27:29:cd:ee:e2:4b:d7:d9:51:c0:da:6c:3a:d3:
b7:3b:db:80:16:fd:9d:c7:3c:d2:c2:17:e8:e5:74:
ca:a8:84:fd:ac:2c:33:22:60:c3:02:fb:81:e7:ec:
e9:84:d1:fa:53:97:57:83:b9:9e:11:00:32:60:4e:
13:d7:31:10:c4:5b:d3:4a:a2:97:c2:77:6b:8d:74:
5a:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:4D:38:A9:65:86:73:D4:B3:2E:AE:1C:BB:75:3F:6B:BF:B5:18:BF
X509v3 Authority Key Identifier:
keyid:B0:CE:0E:B3:B2:5D:7D:B2:D3:F8:23:AA:4E:8D:73:CA:D5:AD:CD:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/8DB359FBDD12B1D4AF7A57066DD229D0586F8D259779E9AADCA7994B631E393C/0/B0CE0EB3B25D7DB2D3F823AA4E8D73CAD5ADCD7A.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B0CE0EB3B25D7DB2D3F823AA4E8D73CAD5ADCD7A.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8DB359FBDD12B1D4AF7A57066DD229D0586F8D259779E9AADCA7994B631E393C/0/34352e37302e382e302f32322d3234203d3e20323635383137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.70.8.0/22
Signature Algorithm: sha256WithRSAEncryption
30:a1:e4:45:8c:2e:5d:33:75:69:54:2e:07:5e:d3:d9:1d:16:
ca:29:b6:6a:b6:bf:97:b2:67:b3:6f:bd:62:36:18:b7:93:90:
fb:8e:ed:b6:6f:ff:db:01:a0:f4:42:f4:a9:6e:76:b2:00:bc:
f1:48:b9:cc:f6:ff:69:01:70:ce:de:72:c0:06:3f:35:c7:d1:
04:63:c4:cb:54:be:14:5a:45:f3:55:b2:9f:4b:5c:b3:b9:d3:
ea:1b:f2:e5:bd:8b:59:7a:44:17:e9:10:b2:4d:84:10:14:46:
02:9a:42:7f:bd:8b:87:6a:be:bd:b9:0e:c2:23:2e:54:2e:4d:
92:a7:47:f9:d9:ca:a9:29:e4:48:c3:48:6f:bd:23:5a:91:c8:
61:1f:c8:09:86:3d:46:a0:22:5f:8b:00:4b:aa:99:cd:43:8a:
f6:bd:af:32:e0:e0:41:78:14:3c:a6:b1:48:51:fe:ff:44:0c:
aa:d8:e0:98:4d:d4:89:90:7f:8a:8e:fd:96:b8:7c:85:94:74:
2a:aa:2f:eb:3b:8f:e8:2b:a6:14:22:0c:9f:48:1d:b3:e3:70:
79:f4:f2:a1:94:fd:24:32:b7:a5:33:0b:b7:dd:e9:06:82:d8:
dd:e3:0a:89:8e:bb:b5:4f:c9:4a:f1:c4:90:e3:95:21:74:4f:
06:05:6a:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:56:39 2025 by rpki-client