Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9F5116F7F1AEE03DA87D8555060B72F49006DF4FA78D4D0950FF7E6FCC3E5530/0/34352e3138362e32302e302f32342d3234203d3e20323639373938.roa
File: 34352e3138362e32302e302f32342d3234203d3e20323639373938.roa (raw, json)
Hash identifier: mxACttj5STv4ibFkfEA75hP7UwHdqi6u6nB28bwslCA=
Subject key identifier: CD:7E:A8:7A:7B:73:F4:EB:0F:89:05:89:6A:83:D5:8F:2C:7D:98:C7
Certificate issuer: /CN=EA7AF6DBEB469CDFD20B7B6B0928D4CCB47CD6ED
Certificate serial: 3184CA244544D496172BA8C7C6052A14699BAA43
Authority key identifier: EA:7A:F6:DB:EB:46:9C:DF:D2:0B:7B:6B:09:28:D4:CC:B4:7C:D6:ED
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EA7AF6DBEB469CDFD20B7B6B0928D4CCB47CD6ED.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9F5116F7F1AEE03DA87D8555060B72F49006DF4FA78D4D0950FF7E6FCC3E5530/0/34352e3138362e32302e302f32342d3234203d3e20323639373938.roa
Signing time: Tue 04 Feb 2025 18:36:52 +0000
ROA not before: Tue 04 Feb 2025 18:31:52 +0000
ROA not after: Tue 03 Feb 2026 18:36:52 +0000
asID: 269798
IP address blocks: 45.186.20.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:84:ca:24:45:44:d4:96:17:2b:a8:c7:c6:05:2a:14:69:9b:aa:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EA7AF6DBEB469CDFD20B7B6B0928D4CCB47CD6ED
Validity
Not Before: Feb 4 18:31:52 2025 GMT
Not After : Feb 3 18:36:52 2026 GMT
Subject: CN=CD7EA87A7B73F4EB0F8905896A83D58F2C7D98C7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e1:56:ca:e1:65:fa:ad:45:38:53:a9:03:64:
d6:71:28:86:a4:8b:15:dd:38:b7:7b:21:e5:b9:4e:
92:71:1d:9d:58:1a:47:a3:ce:79:12:6f:54:d0:e8:
5c:9f:34:a4:b8:11:27:0b:57:7b:34:9a:b0:7c:08:
32:b3:0b:af:9b:15:68:ce:02:b8:bc:c6:1d:02:02:
1e:b9:12:4f:ae:3b:89:78:1a:87:25:a0:48:25:d8:
c1:c5:fa:ed:78:86:a5:d7:10:8a:d8:07:55:90:91:
30:7b:a5:ba:4c:b3:d7:75:e0:eb:6e:ed:83:cf:15:
72:53:35:3c:f5:a6:a9:1d:4d:ca:8e:6e:cb:76:68:
8e:7a:b1:7a:49:1d:2a:6e:65:50:1d:ac:85:a4:d9:
78:c0:f1:ba:61:6f:cd:d2:e8:24:b2:45:d6:92:93:
dd:b7:54:2e:b8:22:72:9f:ab:78:86:5a:cf:d1:9b:
50:e3:16:c3:8c:da:30:d6:c4:8c:6b:3b:4c:9c:42:
f0:76:19:ce:ca:0d:75:4e:ff:4b:0d:a7:e3:51:35:
8e:39:c2:22:c9:89:a3:af:70:31:f4:8d:c7:6a:46:
1d:87:d2:c8:3a:8a:9e:66:24:64:b3:dc:fb:8a:9d:
be:08:69:46:23:ea:42:b0:9a:de:92:46:e4:d8:21:
d6:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:7E:A8:7A:7B:73:F4:EB:0F:89:05:89:6A:83:D5:8F:2C:7D:98:C7
X509v3 Authority Key Identifier:
keyid:EA:7A:F6:DB:EB:46:9C:DF:D2:0B:7B:6B:09:28:D4:CC:B4:7C:D6:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9F5116F7F1AEE03DA87D8555060B72F49006DF4FA78D4D0950FF7E6FCC3E5530/0/EA7AF6DBEB469CDFD20B7B6B0928D4CCB47CD6ED.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EA7AF6DBEB469CDFD20B7B6B0928D4CCB47CD6ED.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9F5116F7F1AEE03DA87D8555060B72F49006DF4FA78D4D0950FF7E6FCC3E5530/0/34352e3138362e32302e302f32342d3234203d3e20323639373938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.186.20.0/24
Signature Algorithm: sha256WithRSAEncryption
67:d6:a0:fe:fd:19:39:5a:2a:5a:fb:0b:e3:c5:d6:11:dc:62:
41:e8:35:40:c9:10:81:cf:75:f1:38:01:20:68:5d:f3:75:70:
d2:66:30:1b:da:6a:ef:b6:e7:67:9f:87:ee:6f:3f:59:dc:0b:
91:0c:c7:e9:c3:db:40:e0:08:f5:52:9c:1c:ba:e7:0d:eb:57:
ea:c8:5c:19:92:d4:e9:4b:90:d9:42:bb:6d:2a:aa:2e:7d:8f:
28:2a:c2:9e:7c:b6:93:b2:ba:0b:4c:90:2a:b5:c9:88:7c:29:
08:a0:dd:84:74:dd:fb:9a:c0:dc:7e:db:32:67:be:c8:b5:59:
46:3e:2c:36:eb:67:83:bf:ee:28:5e:12:f8:9b:27:f4:4c:67:
53:e9:19:7d:6b:35:47:5c:4f:6f:50:86:4c:e7:42:fe:47:86:
c7:e6:ed:47:10:b6:48:0b:46:7b:df:5d:0f:c3:cf:c8:ba:8a:
14:c2:6c:b1:59:50:a6:38:10:56:87:25:92:86:43:b4:a5:90:
e6:59:0e:12:f6:cd:ec:87:13:33:ab:ed:5d:1a:bd:c8:62:cf:
a2:f5:b1:fb:b8:3d:52:82:51:df:08:68:2b:9f:7d:41:ae:b2:
af:9f:93:ce:58:fc:6d:05:38:71:fd:19:ce:5d:c4:bc:f3:76:
da:cb:07:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:25:06 2025 by rpki-client