Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A16E8F103146B2850335023A70A6D39874766368DBDA5F048D55972B98FD8367/0/34352e3233312e38302e302f32322d3234203d3e203237383433.roa
File: 34352e3233312e38302e302f32322d3234203d3e203237383433.roa (raw, json)
Hash identifier: eUuqlmChWsK5YXsIMDYii8hw2Teyxn9ukvBCXCSWgnY=
Subject key identifier: 59:28:09:A4:A7:A4:9D:4F:6F:34:19:27:F6:91:82:9C:68:1E:41:E7
Certificate issuer: /CN=9F08D38D4571C09A83B45ACFD10AEB7826CE8F84
Certificate serial: 6366E4AE27681F2C5ECB2B46FDB38EAA580D71C1
Authority key identifier: 9F:08:D3:8D:45:71:C0:9A:83:B4:5A:CF:D1:0A:EB:78:26:CE:8F:84
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F08D38D4571C09A83B45ACFD10AEB7826CE8F84.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/A16E8F103146B2850335023A70A6D39874766368DBDA5F048D55972B98FD8367/0/34352e3233312e38302e302f32322d3234203d3e203237383433.roa
Signing time: Tue 04 Feb 2025 18:06:08 +0000
ROA not before: Tue 04 Feb 2025 18:01:08 +0000
ROA not after: Tue 03 Feb 2026 18:06:08 +0000
asID: 27843
IP address blocks: 45.231.80.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:66:e4:ae:27:68:1f:2c:5e:cb:2b:46:fd:b3:8e:aa:58:0d:71:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9F08D38D4571C09A83B45ACFD10AEB7826CE8F84
Validity
Not Before: Feb 4 18:01:08 2025 GMT
Not After : Feb 3 18:06:08 2026 GMT
Subject: CN=592809A4A7A49D4F6F341927F691829C681E41E7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e9:b2:6a:d3:15:1f:20:44:36:da:21:bd:37:
94:b5:bf:3a:6d:19:0a:39:ff:6e:69:3c:a1:01:a2:
fb:a7:0b:b6:0a:9c:55:7e:a2:31:dd:b0:96:5a:2c:
5e:8b:aa:b4:cd:9f:a1:9b:42:ac:8d:4b:ff:01:d2:
fb:98:4a:0c:dc:10:df:ca:9f:25:7d:fc:09:3f:86:
1e:f1:be:bd:49:cc:06:df:61:60:63:4d:a4:94:38:
2b:de:66:1e:d8:ed:51:01:44:5e:28:48:68:df:c2:
2c:d1:a2:2a:97:c3:0b:e4:de:ee:0b:10:d2:86:cf:
fc:06:7e:b6:72:19:26:2a:8f:e1:ad:05:4d:f6:96:
be:40:fd:1c:97:9b:94:9e:b9:d1:a9:72:b6:7b:01:
e0:64:36:86:e8:70:c9:94:e4:8f:42:12:18:87:e1:
00:75:1c:d0:4f:b6:29:60:7c:62:43:70:df:ed:22:
fe:73:23:97:c1:21:c5:45:d7:8c:00:ce:b1:98:83:
fc:cd:fe:e5:35:8d:5e:9b:47:8e:f7:85:16:cf:af:
c9:55:62:02:4b:d3:32:ff:48:47:cb:55:ed:6d:81:
ff:e2:57:9e:0c:d2:10:fa:54:c8:1b:fa:14:62:ec:
95:d2:29:16:ef:7a:72:f0:6a:c1:71:b4:3b:3f:df:
48:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:28:09:A4:A7:A4:9D:4F:6F:34:19:27:F6:91:82:9C:68:1E:41:E7
X509v3 Authority Key Identifier:
keyid:9F:08:D3:8D:45:71:C0:9A:83:B4:5A:CF:D1:0A:EB:78:26:CE:8F:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/A16E8F103146B2850335023A70A6D39874766368DBDA5F048D55972B98FD8367/0/9F08D38D4571C09A83B45ACFD10AEB7826CE8F84.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F08D38D4571C09A83B45ACFD10AEB7826CE8F84.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A16E8F103146B2850335023A70A6D39874766368DBDA5F048D55972B98FD8367/0/34352e3233312e38302e302f32322d3234203d3e203237383433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.231.80.0/22
Signature Algorithm: sha256WithRSAEncryption
21:b3:e1:fe:96:83:c8:19:f6:4a:54:cb:48:0b:67:fe:89:20:
20:1d:d1:53:83:53:60:95:9d:da:6e:54:fc:18:fa:14:f5:93:
fd:b2:fe:2e:43:28:3a:a1:bf:13:0c:21:e2:02:13:0d:7d:15:
d0:ed:07:85:60:35:24:21:83:72:48:c2:a9:ba:ba:79:ad:a4:
fe:fc:20:7d:58:1f:16:26:a1:6d:5e:49:b3:9e:b3:ea:22:3a:
f4:6e:42:6e:c1:18:6c:ef:82:56:ff:a0:15:33:f1:4a:47:73:
38:fc:8b:23:2e:70:a7:3a:ed:9f:2c:57:63:66:59:c8:20:7f:
9a:05:07:1f:7e:12:ab:cf:f0:6e:4a:66:06:3a:16:ad:eb:4d:
80:c8:5d:65:43:4a:84:ad:0a:99:30:a4:1a:fb:bf:cf:b7:fe:
b8:d9:0a:41:b6:6b:7c:67:93:23:d1:71:d5:8a:a2:46:c5:d0:
0a:39:5d:43:6b:a4:99:01:10:f4:27:c6:34:4f:df:e0:a5:14:
14:fc:c2:d3:ba:10:12:a1:5d:55:88:f1:51:02:cc:48:90:52:
0b:82:e3:4d:11:4f:00:c8:a6:31:1a:3d:cb:5c:42:ca:86:57:
cd:cc:da:6b:de:91:66:ec:97:6a:6d:33:49:4e:0a:72:97:45:
58:60:63:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:40:47 2025 by rpki-client