Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B491B7752D67EDA140D2FE5C0FD40BFB54A4241FC513A48C5615DDFEFBDD0BC1/0/34352e3233342e3232382e302f32322d3234203d3e20323636373835.roa
File: 34352e3233342e3232382e302f32322d3234203d3e20323636373835.roa (raw, json)
Hash identifier: sqTqeFQkceGitnQTCUxZiBvXHk9JTsBGFdd1c+9/J2M=
Subject key identifier: 98:71:80:2E:0A:AF:09:65:80:BB:6D:F0:A4:C5:8D:F0:DD:AA:2C:C5
Certificate issuer: /CN=EB5A24FCB6117913E5FFCA98D89C779BA42A7ED2
Certificate serial: 61824CC0D21C2A011F79BCAD90A6823247E1E05E
Authority key identifier: EB:5A:24:FC:B6:11:79:13:E5:FF:CA:98:D8:9C:77:9B:A4:2A:7E:D2
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EB5A24FCB6117913E5FFCA98D89C779BA42A7ED2.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/B491B7752D67EDA140D2FE5C0FD40BFB54A4241FC513A48C5615DDFEFBDD0BC1/0/34352e3233342e3232382e302f32322d3234203d3e20323636373835.roa
Signing time: Tue 04 Feb 2025 18:17:03 +0000
ROA not before: Tue 04 Feb 2025 18:12:03 +0000
ROA not after: Tue 03 Feb 2026 18:17:03 +0000
asID: 266785
IP address blocks: 45.234.228.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:82:4c:c0:d2:1c:2a:01:1f:79:bc:ad:90:a6:82:32:47:e1:e0:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB5A24FCB6117913E5FFCA98D89C779BA42A7ED2
Validity
Not Before: Feb 4 18:12:03 2025 GMT
Not After : Feb 3 18:17:03 2026 GMT
Subject: CN=9871802E0AAF096580BB6DF0A4C58DF0DDAA2CC5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:2b:f4:22:11:2f:7f:55:65:a6:5f:2e:f3:cb:
16:37:6d:b9:40:c9:cd:15:47:19:8e:c4:6c:4d:90:
05:e8:d3:4c:79:a0:45:aa:34:90:b9:94:a1:55:38:
8e:e4:74:d5:e9:58:95:7a:4b:f1:26:dd:42:ed:d9:
64:7a:a9:7b:4c:73:fa:39:9d:d0:a1:3c:51:47:de:
44:8c:cc:a9:cf:79:75:36:e7:86:09:ba:cf:2b:c9:
1a:ec:60:44:f8:14:f0:1c:5a:bd:03:67:77:4e:6f:
21:75:d1:46:ee:41:0d:97:28:65:99:95:c8:6c:5c:
c1:7a:80:81:dc:92:8c:8e:18:b3:48:b2:0d:02:99:
f5:bf:8e:52:b7:b6:be:97:e1:89:d3:a3:27:bb:26:
45:b8:d4:d6:db:ea:d0:25:8e:5d:90:af:24:cc:19:
45:89:8e:94:33:c6:f3:1c:6c:e3:d4:37:7e:b0:04:
23:4b:c3:05:df:9e:db:64:92:11:31:e0:87:cf:a4:
40:7d:ba:61:78:a9:fa:b6:e9:69:7a:bb:35:7a:ab:
d7:a4:82:d7:58:e9:00:62:1a:79:ec:bd:84:70:03:
57:be:32:01:2a:b3:0d:4c:83:2d:34:7e:e4:5e:87:
bf:17:d0:b5:6f:2d:a5:b5:12:40:f3:de:80:16:af:
20:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:71:80:2E:0A:AF:09:65:80:BB:6D:F0:A4:C5:8D:F0:DD:AA:2C:C5
X509v3 Authority Key Identifier:
keyid:EB:5A:24:FC:B6:11:79:13:E5:FF:CA:98:D8:9C:77:9B:A4:2A:7E:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/B491B7752D67EDA140D2FE5C0FD40BFB54A4241FC513A48C5615DDFEFBDD0BC1/0/EB5A24FCB6117913E5FFCA98D89C779BA42A7ED2.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EB5A24FCB6117913E5FFCA98D89C779BA42A7ED2.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B491B7752D67EDA140D2FE5C0FD40BFB54A4241FC513A48C5615DDFEFBDD0BC1/0/34352e3233342e3232382e302f32322d3234203d3e20323636373835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.234.228.0/22
Signature Algorithm: sha256WithRSAEncryption
88:ae:db:89:32:dd:89:29:1a:8a:04:1d:e4:8e:ae:87:ad:5e:
a2:6f:72:97:ee:a2:73:c0:83:96:f6:d4:b0:8d:63:b1:75:4c:
c2:ac:b0:d2:52:dd:81:5b:39:c5:58:18:6f:ba:a0:ad:24:b2:
64:6f:0e:10:14:35:31:33:0a:58:60:0f:8b:39:12:ad:07:72:
55:eb:55:a6:28:ad:87:81:4d:5d:97:4e:45:58:89:50:92:1a:
06:3d:8b:39:ca:09:6f:ae:44:3e:1d:40:50:51:b9:96:f3:66:
53:01:72:46:ec:44:b0:57:ac:b9:94:f6:f8:0d:7f:32:cc:91:
2f:2e:dd:c9:b3:0b:01:b3:da:ce:af:64:ef:38:32:b9:fa:17:
52:8e:41:8a:3e:5f:a8:fd:38:46:eb:21:0e:cb:c7:2b:9a:4c:
89:f9:a0:5f:29:ca:55:43:e0:71:5f:66:38:0c:a9:43:f0:8a:
7a:20:cb:79:d9:df:12:1a:aa:18:4e:e6:4e:d4:36:98:3b:f2:
00:64:01:ee:40:fb:39:ca:a5:4c:90:61:13:4c:e1:10:4c:60:
d5:5f:ae:9f:1c:12:8a:a9:16:2a:d1:b7:dc:04:8d:00:a1:03:
5e:82:10:d9:ed:ba:22:f9:9f:e5:9a:53:20:d7:8a:17:cb:40:
68:77:07:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:15:50 2025 by rpki-client