Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BC5A7EC6D7FE034F483F15190BD85B6799E360C983AD65849E0CFD077C3796A5/0/34352e3233392e34342e302f32342d3234203d3e20323636383538.roa
File: 34352e3233392e34342e302f32342d3234203d3e20323636383538.roa (raw, json)
Hash identifier: MU9GZUs6l/1tj/kktbj8IDRl3WqZn5d2DDNvLuUftEw=
Subject key identifier: 61:C5:59:AA:75:AE:AB:A8:04:01:18:CB:FA:C0:58:C4:F0:32:06:C0
Certificate issuer: /CN=8AB89BD2DCDAB7BDFF8F568C100B268CA22E6BC1
Certificate serial: 502C98BAD396F3E00A47C4C810D24D207DFCF314
Authority key identifier: 8A:B8:9B:D2:DC:DA:B7:BD:FF:8F:56:8C:10:0B:26:8C:A2:2E:6B:C1
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8AB89BD2DCDAB7BDFF8F568C100B268CA22E6BC1.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/BC5A7EC6D7FE034F483F15190BD85B6799E360C983AD65849E0CFD077C3796A5/0/34352e3233392e34342e302f32342d3234203d3e20323636383538.roa
Signing time: Tue 04 Feb 2025 18:23:12 +0000
ROA not before: Tue 04 Feb 2025 18:18:12 +0000
ROA not after: Tue 03 Feb 2026 18:23:12 +0000
asID: 266858
IP address blocks: 45.239.44.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:2c:98:ba:d3:96:f3:e0:0a:47:c4:c8:10:d2:4d:20:7d:fc:f3:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8AB89BD2DCDAB7BDFF8F568C100B268CA22E6BC1
Validity
Not Before: Feb 4 18:18:12 2025 GMT
Not After : Feb 3 18:23:12 2026 GMT
Subject: CN=61C559AA75AEABA8040118CBFAC058C4F03206C0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f2:a5:0f:c4:79:a1:6d:c5:ae:9e:16:96:83:
af:e3:e3:4a:29:90:1f:8c:1d:f6:38:0d:ac:1b:5a:
d4:ff:cf:59:8e:76:d8:94:de:55:32:08:aa:8f:9b:
c4:6b:3d:87:c6:41:47:c1:5f:04:93:35:49:57:2e:
7a:e2:ff:ad:10:35:dc:e6:20:1c:fb:93:d3:e1:06:
72:90:e8:89:c6:d3:69:e2:ce:8d:cd:7c:e4:38:2e:
59:31:88:35:af:b3:75:eb:1c:f1:20:69:f4:1a:e0:
37:b1:95:47:dd:d8:62:a8:57:7b:cd:b0:22:fc:26:
3b:8e:e4:95:c4:25:b6:38:9c:ec:11:d0:54:0a:80:
ed:3a:d6:c9:57:8b:3e:ad:57:1b:92:28:b2:d1:26:
cd:88:e7:21:83:b5:a6:bc:90:cc:cf:ea:9e:8a:9e:
ea:eb:cf:28:17:8b:48:7e:b7:5c:c8:c4:ab:0c:71:
b6:b3:67:64:94:61:81:63:8f:d0:d6:f8:b2:20:ac:
47:79:07:f5:65:7d:e3:95:3e:d0:8c:f3:ff:a8:b5:
c1:3d:53:0a:78:8a:e7:0f:7c:26:8e:b2:d8:a7:1e:
c2:ca:79:f0:7e:a9:3f:92:80:b7:59:4c:7e:72:93:
ea:4f:42:de:b2:18:9b:48:a8:c2:46:99:80:8e:7a:
83:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:C5:59:AA:75:AE:AB:A8:04:01:18:CB:FA:C0:58:C4:F0:32:06:C0
X509v3 Authority Key Identifier:
keyid:8A:B8:9B:D2:DC:DA:B7:BD:FF:8F:56:8C:10:0B:26:8C:A2:2E:6B:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/BC5A7EC6D7FE034F483F15190BD85B6799E360C983AD65849E0CFD077C3796A5/0/8AB89BD2DCDAB7BDFF8F568C100B268CA22E6BC1.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8AB89BD2DCDAB7BDFF8F568C100B268CA22E6BC1.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BC5A7EC6D7FE034F483F15190BD85B6799E360C983AD65849E0CFD077C3796A5/0/34352e3233392e34342e302f32342d3234203d3e20323636383538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.239.44.0/24
Signature Algorithm: sha256WithRSAEncryption
32:39:f2:dd:30:04:5d:6a:59:6e:6f:e6:97:6c:80:03:a6:fe:
4c:91:fb:32:db:1b:55:e9:6e:76:07:0e:b6:25:63:4f:75:46:
45:34:a7:06:32:4e:15:4e:45:93:9d:81:e5:4b:f6:58:d3:4d:
65:38:1a:f9:2f:6c:67:36:5c:fe:4a:0e:86:23:3b:27:b1:72:
2d:1f:7d:d5:bd:d2:bb:0c:1b:07:ab:15:db:7c:ca:88:d4:74:
ea:59:fd:25:1c:16:ee:f7:38:70:b7:f0:84:a0:bc:b2:64:d6:
39:9b:84:03:83:74:a1:5b:a5:2b:35:de:a3:d7:44:69:9a:60:
1f:24:00:a6:7f:61:ff:f6:87:13:fd:60:50:39:6e:78:7f:db:
12:d3:63:8d:0e:af:c9:6f:02:87:b5:96:95:45:0b:99:18:65:
ae:bd:f8:64:96:21:74:6c:2b:88:7e:76:d3:18:3c:ac:e7:99:
62:08:b2:1e:be:41:9e:db:8a:33:ff:9f:0d:ce:a9:67:99:bd:
bd:f3:33:0c:8b:60:c1:a2:3b:9d:a5:13:f8:f9:33:fc:f9:fd:
02:c2:d9:41:98:8e:19:b2:81:bf:41:3b:e6:ad:d5:a5:d4:81:
c9:70:8a:1d:87:96:0c:b4:9c:84:d6:a1:3c:5b:56:95:9e:91:
c8:ea:5b:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:22:19 2025 by rpki-client