Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/989BCE6925D2E47C485897998703979101B6FBA495FBD089F0835A87C3829297/0/34352e37302e3137302e302f32342d3234203d3e20323635383333.roa
File: 34352e37302e3137302e302f32342d3234203d3e20323635383333.roa (raw, json)
Hash identifier: ERxuD8nCmfiCFYQiXO1B9LBwy9VqY8T0hAM1OaQqNzQ=
Subject key identifier: 06:F4:86:E9:8F:BF:82:4E:AC:28:C4:27:53:07:8F:44:15:17:35:5C
Certificate issuer: /CN=80F7A4CB2F28ED1CBB79FD29CE1377703761DFEB
Certificate serial: 40001FCFD489E2810AAAD40563359E1EC811E08F
Authority key identifier: 80:F7:A4:CB:2F:28:ED:1C:BB:79:FD:29:CE:13:77:70:37:61:DF:EB
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80F7A4CB2F28ED1CBB79FD29CE1377703761DFEB.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/989BCE6925D2E47C485897998703979101B6FBA495FBD089F0835A87C3829297/0/34352e37302e3137302e302f32342d3234203d3e20323635383333.roa
Signing time: Tue 04 Feb 2025 18:30:48 +0000
ROA not before: Tue 04 Feb 2025 18:25:48 +0000
ROA not after: Tue 03 Feb 2026 18:30:48 +0000
asID: 265833
IP address blocks: 45.70.170.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:00:1f:cf:d4:89:e2:81:0a:aa:d4:05:63:35:9e:1e:c8:11:e0:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80F7A4CB2F28ED1CBB79FD29CE1377703761DFEB
Validity
Not Before: Feb 4 18:25:48 2025 GMT
Not After : Feb 3 18:30:48 2026 GMT
Subject: CN=06F486E98FBF824EAC28C42753078F441517355C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:0f:ec:84:8a:08:8b:c1:bf:86:f8:54:7d:3d:
99:e0:b1:a0:ff:cd:80:4d:7c:02:17:6e:6b:91:f2:
81:de:0a:83:67:98:9e:3a:17:aa:22:62:40:8f:77:
76:28:07:6d:6c:c6:5d:09:d0:1c:cc:10:96:94:96:
01:00:a7:0b:b0:b7:11:0b:10:97:d4:d4:a3:63:82:
c0:20:8a:60:b3:bd:40:0b:f7:fa:de:b3:e2:85:10:
60:c9:cd:e1:b2:a1:b6:57:17:30:8f:d5:e2:e4:d2:
55:5c:20:67:bd:ef:cb:17:f2:de:79:a1:f1:69:ed:
bc:ae:30:83:87:ec:83:c0:8d:ac:ef:f5:19:4e:0f:
c7:94:c9:8d:6e:24:d5:17:b5:99:2c:a4:57:85:da:
81:37:6b:4c:54:71:ed:d6:1d:2d:2f:53:63:54:f2:
97:d9:81:9a:b9:a7:9b:71:3d:ec:fd:d5:25:98:dd:
a3:00:b7:ef:d5:33:3b:f4:66:a5:a2:66:0f:06:a5:
17:db:5a:b5:6e:de:61:4f:a6:c2:ba:c1:87:3b:3b:
83:a6:f1:05:91:05:ac:4b:e9:d3:b7:71:ae:6a:b0:
1b:fe:24:03:bb:74:8f:db:16:9a:5b:28:24:5a:54:
c1:0e:5e:be:ec:f6:29:4e:ff:63:95:48:24:6a:d0:
e6:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:F4:86:E9:8F:BF:82:4E:AC:28:C4:27:53:07:8F:44:15:17:35:5C
X509v3 Authority Key Identifier:
keyid:80:F7:A4:CB:2F:28:ED:1C:BB:79:FD:29:CE:13:77:70:37:61:DF:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/989BCE6925D2E47C485897998703979101B6FBA495FBD089F0835A87C3829297/0/80F7A4CB2F28ED1CBB79FD29CE1377703761DFEB.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80F7A4CB2F28ED1CBB79FD29CE1377703761DFEB.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/989BCE6925D2E47C485897998703979101B6FBA495FBD089F0835A87C3829297/0/34352e37302e3137302e302f32342d3234203d3e20323635383333.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.70.170.0/24
Signature Algorithm: sha256WithRSAEncryption
41:a8:ad:70:aa:d7:d7:8c:9f:fb:1d:58:84:3a:03:5a:12:4f:
72:5a:d9:dc:c0:7d:97:37:8b:16:60:00:bb:4f:59:a5:f6:d2:
e6:a9:b3:75:e5:c9:a3:72:69:65:c3:8f:37:0d:58:26:b0:ff:
f8:fc:8f:dc:07:09:14:80:65:b5:34:db:e6:6a:2a:25:c4:99:
29:b0:32:fe:ba:7c:c1:60:e6:1b:c5:ee:14:44:86:ae:0e:38:
64:9b:d7:1e:dc:67:1c:4c:f6:77:08:67:7b:30:23:2e:c7:fe:
56:ed:07:46:eb:23:23:8e:51:a4:f0:71:6f:23:68:78:30:ab:
94:4d:1e:8e:11:9d:35:4e:2d:66:dd:f3:ef:c4:4f:cb:a2:4c:
6d:e5:67:a4:b5:98:39:f5:85:87:9d:ca:4e:48:a6:c1:db:28:
d2:c3:e9:fc:ff:b1:a5:0b:dd:06:47:dc:17:90:a5:7b:d0:f0:
21:8c:b6:a7:ea:2d:2b:86:4a:fa:14:bd:c6:1e:c1:d0:71:19:
00:e7:3e:a0:32:ac:c0:48:b2:10:cc:c9:85:f3:09:cd:5e:af:
80:1d:c7:63:75:05:13:7f:5b:28:71:b3:4b:1e:9d:fa:13:85:
d1:0b:86:7b:a6:e7:93:4d:95:02:7b:17:7e:c3:7c:9a:d4:de:
1f:14:86:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:02:08 2025 by rpki-client