Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AA323EACD8EE65853EA64901C0708C7E0A6C4B49E832C9EFE0C726AC07655800/0/34352e3136342e32332e302f32342d3234203d3e203238343233.roa
File: 34352e3136342e32332e302f32342d3234203d3e203238343233.roa (raw, json)
Hash identifier: YyWmCsp0UJbZ4TVXBcJMApdIvA7n4vdYZzo0YPmZLuw=
Subject key identifier: 09:BE:56:05:30:7B:7B:1B:6D:20:17:92:6F:F0:68:B4:1E:5B:D8:A1
Certificate issuer: /CN=DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29
Certificate serial: 664905653CD26ACAEE6D11E32A67FD50CA0BC15F
Authority key identifier: DD:FB:95:E0:3A:29:4F:DC:FC:9F:3B:70:A2:6B:CF:74:C3:A4:CD:29
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/AA323EACD8EE65853EA64901C0708C7E0A6C4B49E832C9EFE0C726AC07655800/0/34352e3136342e32332e302f32342d3234203d3e203238343233.roa
Signing time: Sun 26 Jan 2025 01:40:00 +0000
ROA not before: Sun 26 Jan 2025 01:35:00 +0000
ROA not after: Sun 25 Jan 2026 01:40:00 +0000
asID: 28423
IP address blocks: 45.164.23.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:49:05:65:3c:d2:6a:ca:ee:6d:11:e3:2a:67:fd:50:ca:0b:c1:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29
Validity
Not Before: Jan 26 01:35:00 2025 GMT
Not After : Jan 25 01:40:00 2026 GMT
Subject: CN=09BE5605307B7B1B6D2017926FF068B41E5BD8A1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:bb:83:a8:31:58:d6:7e:f8:b8:b6:72:95:93:
82:2b:e0:7a:bc:7e:cf:9a:04:ae:e6:74:d4:ea:47:
7d:ba:f5:3c:47:fa:78:53:47:9f:98:19:a0:0b:47:
95:3e:e0:dd:8b:44:8e:95:16:3e:f4:5a:69:0e:db:
f1:48:10:24:09:70:15:0a:58:82:54:5d:32:32:89:
7f:12:2f:07:a1:33:0a:ff:34:5f:99:9d:ad:0a:e8:
c6:ed:ca:13:65:6f:23:25:45:e3:5f:7b:fb:81:76:
85:b1:fa:a0:3f:4f:29:9b:bd:ac:62:6f:9a:8d:57:
be:be:e1:d6:e6:a5:cd:89:07:3d:e3:b5:1d:d3:32:
8b:0b:7e:f6:1a:cc:b0:e8:53:ac:b1:e2:d7:7c:18:
42:97:84:1b:26:14:38:86:91:84:53:b6:3e:40:9b:
e1:8d:a1:f4:77:05:2a:83:84:bc:2e:0e:d2:45:8d:
e1:14:36:a4:cd:c0:92:cd:34:93:6e:24:36:b8:9f:
40:65:e5:60:5b:91:cc:62:88:98:77:b8:50:71:83:
72:c6:bb:1f:54:8d:72:02:4f:82:86:71:45:02:18:
f6:52:8d:e1:28:0a:05:9a:7a:54:a1:a2:01:7e:9b:
7d:2c:21:ce:28:e3:36:0b:72:d3:d3:dc:f0:f3:51:
2e:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:BE:56:05:30:7B:7B:1B:6D:20:17:92:6F:F0:68:B4:1E:5B:D8:A1
X509v3 Authority Key Identifier:
keyid:DD:FB:95:E0:3A:29:4F:DC:FC:9F:3B:70:A2:6B:CF:74:C3:A4:CD:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/AA323EACD8EE65853EA64901C0708C7E0A6C4B49E832C9EFE0C726AC07655800/0/DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AA323EACD8EE65853EA64901C0708C7E0A6C4B49E832C9EFE0C726AC07655800/0/34352e3136342e32332e302f32342d3234203d3e203238343233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.164.23.0/24
Signature Algorithm: sha256WithRSAEncryption
22:5b:5a:5e:a9:b2:26:43:f5:3c:21:e7:13:87:0a:98:1d:dc:
2f:5d:4a:a3:75:f4:19:8b:14:d5:0f:1f:f9:a4:b6:61:68:db:
e8:ca:0b:9c:cc:8b:59:e1:fd:74:17:19:26:b1:91:b2:e1:1a:
c5:ae:3a:a0:ea:13:a9:91:ba:51:1e:7b:60:e9:21:5d:dd:de:
98:1c:63:32:1f:10:68:12:56:ab:2c:a4:cc:77:00:ce:07:26:
9a:66:62:50:a5:b8:1d:27:30:42:d2:46:2f:9e:09:d1:d7:b6:
c3:f9:89:5d:41:79:d7:05:2a:8b:3f:cf:57:62:53:e0:2e:7b:
b2:20:64:44:b2:3a:17:ad:cf:54:6e:ca:e3:a8:2e:85:3b:a8:
c0:ef:48:6b:6a:ba:36:9a:63:08:c2:5d:b8:eb:fe:15:be:68:
b6:d7:14:37:aa:9a:b2:2b:43:a4:55:33:bc:1d:23:d5:59:1a:
2a:b1:17:83:2d:b9:32:f3:2d:14:0f:c1:8e:1a:d4:58:fd:dd:
4d:c1:5f:e3:c3:df:67:0a:c7:29:18:8c:f7:b3:16:a6:d4:55:
14:f3:dc:60:26:52:93:ab:a3:4c:b2:1c:6b:8f:2d:76:a3:a2:
6c:a9:11:3f:43:62:54:d7:a1:6d:0e:e2:e3:e8:f1:1e:fd:41:
c0:17:a4:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:08:04 2025 by rpki-client