Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ACEE0E37FDA187B0FC0FA712921B8CEA91F2C55BBCA0777ACE51DE6309CC5CB7/0/34352e3137362e3139342e302f32332d3234203d3e20323637383534.roa
File: 34352e3137362e3139342e302f32332d3234203d3e20323637383534.roa (raw, json)
Hash identifier: e1XJk9KVdwpU0aDbqvL/PuKcrJ+j0wkJJdIKVN24ml4=
Subject key identifier: 92:B6:F7:00:5A:19:7D:E4:B7:6B:7A:41:C2:57:97:63:0D:1A:73:53
Certificate issuer: /CN=5EBCF17E06528C616B6957551981653EE0748D3C
Certificate serial: 458F3DAEDEDE313E6785C1F7887F4A7AF304A9C4
Authority key identifier: 5E:BC:F1:7E:06:52:8C:61:6B:69:57:55:19:81:65:3E:E0:74:8D:3C
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5EBCF17E06528C616B6957551981653EE0748D3C.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/ACEE0E37FDA187B0FC0FA712921B8CEA91F2C55BBCA0777ACE51DE6309CC5CB7/0/34352e3137362e3139342e302f32332d3234203d3e20323637383534.roa
Signing time: Tue 04 Feb 2025 18:34:54 +0000
ROA not before: Tue 04 Feb 2025 18:29:54 +0000
ROA not after: Tue 03 Feb 2026 18:34:54 +0000
asID: 267854
IP address blocks: 45.176.194.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:8f:3d:ae:de:de:31:3e:67:85:c1:f7:88:7f:4a:7a:f3:04:a9:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5EBCF17E06528C616B6957551981653EE0748D3C
Validity
Not Before: Feb 4 18:29:54 2025 GMT
Not After : Feb 3 18:34:54 2026 GMT
Subject: CN=92B6F7005A197DE4B76B7A41C25797630D1A7353
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:bb:5e:e5:e6:f0:21:44:45:30:b5:8c:ae:79:
db:cd:b9:2e:ed:e7:db:d7:28:d3:33:ea:cc:4c:0d:
4b:03:c3:4d:0f:4d:ce:f7:1d:cb:b2:91:a3:e6:43:
d2:d0:ec:06:90:59:93:cd:0c:7b:fb:91:2a:bc:c8:
72:32:e7:bd:be:8a:e6:c7:96:b4:93:4c:83:40:c9:
4e:e7:c1:eb:1b:22:63:a0:d0:cc:fb:5e:7e:fc:fa:
13:61:a9:b5:fd:34:9b:56:00:b3:cb:59:2a:5f:c5:
93:21:bc:21:64:45:7d:9e:8a:04:b0:b2:07:ac:e8:
88:15:19:34:2f:97:7a:4c:a1:76:45:77:42:e2:ce:
b8:46:7c:81:f8:c1:cb:2d:ab:ff:cd:26:f1:47:3e:
9c:03:c5:00:35:6c:c8:0c:79:f7:85:9a:09:d9:a9:
a0:05:77:a5:66:5d:e0:93:19:fc:7a:b5:4c:97:6b:
16:eb:2d:8c:90:b6:2a:55:ac:6e:0e:26:fc:dd:3a:
d6:25:7e:fd:c7:ec:a5:0f:f3:c4:7d:8b:7e:15:9b:
3b:a2:17:98:76:fd:5a:34:63:b3:e6:a6:7e:76:d1:
76:e4:3e:c6:42:0a:77:2b:c5:59:04:e9:4f:e7:50:
cd:58:3c:8d:83:92:21:cb:5d:fa:b6:ee:d7:95:28:
af:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:B6:F7:00:5A:19:7D:E4:B7:6B:7A:41:C2:57:97:63:0D:1A:73:53
X509v3 Authority Key Identifier:
keyid:5E:BC:F1:7E:06:52:8C:61:6B:69:57:55:19:81:65:3E:E0:74:8D:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/ACEE0E37FDA187B0FC0FA712921B8CEA91F2C55BBCA0777ACE51DE6309CC5CB7/0/5EBCF17E06528C616B6957551981653EE0748D3C.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5EBCF17E06528C616B6957551981653EE0748D3C.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ACEE0E37FDA187B0FC0FA712921B8CEA91F2C55BBCA0777ACE51DE6309CC5CB7/0/34352e3137362e3139342e302f32332d3234203d3e20323637383534.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.176.194.0/23
Signature Algorithm: sha256WithRSAEncryption
63:43:a8:0f:de:ed:21:56:ca:c2:d4:4a:ef:b9:4e:1b:7c:89:
01:62:57:87:03:ef:c3:29:ac:df:60:8c:bc:ed:ee:37:74:31:
1d:74:0c:7b:59:50:1c:4a:79:da:2e:5b:ee:67:8f:2c:1e:c1:
ab:49:7d:0c:47:25:cd:b6:c8:b1:9a:80:92:6a:aa:4a:9b:31:
56:92:eb:a1:2f:e2:45:f0:b6:df:78:5a:4c:f3:c0:6a:a0:51:
e8:ba:d0:a2:8c:b5:28:26:69:27:9e:8c:a9:c7:89:02:85:65:
1b:5e:5d:88:27:8e:2c:05:ab:30:38:4e:3d:cc:ce:54:c2:39:
96:8c:ed:27:57:2d:f1:ad:4d:0b:bd:d7:85:e7:42:ca:3c:67:
20:b7:87:14:a3:03:0c:2e:25:1f:65:c4:ca:42:ff:4d:7b:47:
d5:b5:b3:42:25:ca:55:2d:a2:3e:73:e5:d5:9c:5e:04:ac:2f:
b9:81:52:2d:58:87:01:59:34:1e:4c:af:1e:9e:ff:2e:78:a6:
f5:11:a0:62:62:99:1e:f0:8d:69:86:07:4c:c0:19:27:d3:b6:
c8:82:5c:2d:5a:34:81:2f:cb:d2:d9:7f:5c:1c:95:c8:96:36:
73:50:17:34:b9:c7:ff:8e:be:ba:67:bc:a8:92:6e:e8:f6:48:
a2:da:ce:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:57:16 2025 by rpki-client