Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B97F6E450D535A00402E0FE81687ED200B1C9EE6884C4CCB2FA342D14B3D069A/0/34352e3138392e3130392e302f32342d3234203d3e20323639383433.roa
File: 34352e3138392e3130392e302f32342d3234203d3e20323639383433.roa (raw, json)
Hash identifier: CScAk+5X9fbIZZ/K9GevWWPQWGMWQG6G6CY6uaCe/9E=
Subject key identifier: C7:25:02:B5:E4:C1:22:29:E6:AA:80:DC:C7:7B:B0:45:E1:DC:F6:25
Certificate issuer: /CN=E0013BE61C4781324203A7DB7D11674E5D707D02
Certificate serial: 7F108C7FE1087A4AAC3B46BCEE318B76A4FB6804
Authority key identifier: E0:01:3B:E6:1C:47:81:32:42:03:A7:DB:7D:11:67:4E:5D:70:7D:02
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E0013BE61C4781324203A7DB7D11674E5D707D02.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/B97F6E450D535A00402E0FE81687ED200B1C9EE6884C4CCB2FA342D14B3D069A/0/34352e3138392e3130392e302f32342d3234203d3e20323639383433.roa
Signing time: Wed 05 Feb 2025 17:10:01 +0000
ROA not before: Wed 05 Feb 2025 17:05:01 +0000
ROA not after: Wed 04 Feb 2026 17:10:01 +0000
asID: 269843
IP address blocks: 45.189.109.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:10:8c:7f:e1:08:7a:4a:ac:3b:46:bc:ee:31:8b:76:a4:fb:68:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E0013BE61C4781324203A7DB7D11674E5D707D02
Validity
Not Before: Feb 5 17:05:01 2025 GMT
Not After : Feb 4 17:10:01 2026 GMT
Subject: CN=C72502B5E4C12229E6AA80DCC77BB045E1DCF625
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:42:97:6f:58:02:c8:ba:36:8c:da:35:b8:a6:
b5:4c:a4:5d:af:8a:04:61:f0:f5:19:ca:a1:8a:f7:
92:e0:67:88:be:51:af:cf:ea:c9:07:41:1f:31:c9:
79:1b:ef:e6:53:60:0c:50:9d:02:92:90:a7:fe:12:
3d:fc:10:0c:cf:b1:94:cf:16:a7:f8:fd:85:13:fb:
f3:94:f7:f0:64:d4:ec:fb:32:d9:e5:7b:c7:b8:10:
9d:a1:36:61:6b:eb:d2:21:29:5a:c9:64:e0:c0:1f:
d9:bf:5f:19:c9:32:85:8f:9b:70:68:64:14:a0:cd:
68:19:f7:10:8b:45:96:df:c9:94:7c:5d:08:26:78:
93:0c:a2:e1:46:63:68:4d:54:7a:1a:20:0b:d3:9b:
a2:02:b5:5d:24:b2:a3:da:ec:6c:8e:04:b2:28:a4:
fa:fb:b9:db:ae:fe:ae:0c:2c:09:db:81:df:6f:46:
08:b4:91:ad:bd:c3:24:6f:3f:00:1c:6a:35:20:13:
5e:e2:ec:39:03:d7:d6:d8:f7:97:73:b1:88:9a:d3:
7b:35:27:d8:5d:6a:92:97:96:31:99:ce:15:a7:2b:
0d:89:db:79:a6:af:6d:b6:c2:91:64:9e:1d:c1:d0:
37:b5:07:ee:22:c6:4c:98:f0:82:ea:61:62:e7:c4:
7e:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:25:02:B5:E4:C1:22:29:E6:AA:80:DC:C7:7B:B0:45:E1:DC:F6:25
X509v3 Authority Key Identifier:
keyid:E0:01:3B:E6:1C:47:81:32:42:03:A7:DB:7D:11:67:4E:5D:70:7D:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/B97F6E450D535A00402E0FE81687ED200B1C9EE6884C4CCB2FA342D14B3D069A/0/E0013BE61C4781324203A7DB7D11674E5D707D02.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E0013BE61C4781324203A7DB7D11674E5D707D02.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B97F6E450D535A00402E0FE81687ED200B1C9EE6884C4CCB2FA342D14B3D069A/0/34352e3138392e3130392e302f32342d3234203d3e20323639383433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.189.109.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:e5:15:2a:76:8e:e9:57:95:0f:0d:a0:35:c0:ea:f6:b8:0b:
5e:be:29:e7:a4:b7:e1:2c:87:4c:50:57:bf:7c:53:57:c9:a6:
ed:2c:58:b8:ee:fc:da:37:e9:80:78:49:86:da:d6:c2:d6:97:
e4:8c:93:5e:1f:38:a5:ec:60:c9:b7:39:f7:50:2f:d6:8a:bf:
c7:86:eb:d1:85:f8:64:37:58:f9:50:34:d7:e5:22:2d:7e:da:
df:94:83:77:2b:c4:9d:4a:c6:b0:18:eb:93:30:2b:2b:14:1d:
17:2b:6f:66:cd:97:21:90:28:70:74:d0:4d:51:18:c3:ff:0d:
ac:ef:2a:c8:f4:a4:cf:22:76:d5:32:a8:39:f1:04:41:05:cb:
95:8d:97:62:f8:c1:9a:c0:e1:6d:84:53:1e:cb:f8:5d:4d:71:
3a:46:ff:1d:fa:57:74:f8:13:b0:d4:5f:40:a6:29:00:07:29:
e3:6e:90:24:f3:d9:be:4d:ea:be:6b:47:08:ca:39:1f:51:75:
d2:23:48:b8:20:58:b3:11:91:83:59:ae:a8:cb:8a:89:17:17:
c4:48:66:86:d0:05:ee:24:aa:9f:2c:ec:81:ae:e5:ce:2a:31:
fc:b1:4b:49:76:8a:3f:fb:18:bc:17:cf:df:02:6b:5c:ec:a0:
82:0d:e1:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:07:16 2025 by rpki-client