Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BDBF09B3CAE1A376B8986E8C71550097CDFFD30F14F2FD2790FF48D55E3D54C1/0/34352e37312e3138372e302f32342d3234203d3e203237393437.roa
File: 34352e37312e3138372e302f32342d3234203d3e203237393437.roa (raw, json)
Hash identifier: XNKttNsLXQS1g7hf8VxdfQz4m99+15PmXJN/IYQ+NKw=
Subject key identifier: 4C:BF:DF:83:EE:AF:46:9A:7E:1E:7A:21:D8:44:53:7E:D0:37:85:36
Certificate issuer: /CN=BE6B84F38BEBE6F35EC79CB835CAE0A3F921B355
Certificate serial: 6900C089F4E7A49EE767435797CBDD640F0477
Authority key identifier: BE:6B:84:F3:8B:EB:E6:F3:5E:C7:9C:B8:35:CA:E0:A3:F9:21:B3:55
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BE6B84F38BEBE6F35EC79CB835CAE0A3F921B355.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/BDBF09B3CAE1A376B8986E8C71550097CDFFD30F14F2FD2790FF48D55E3D54C1/0/34352e37312e3138372e302f32342d3234203d3e203237393437.roa
Signing time: Tue 04 Feb 2025 18:26:51 +0000
ROA not before: Tue 04 Feb 2025 18:21:51 +0000
ROA not after: Tue 03 Feb 2026 18:26:51 +0000
asID: 27947
IP address blocks: 45.71.187.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:00:c0:89:f4:e7:a4:9e:e7:67:43:57:97:cb:dd:64:0f:04:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BE6B84F38BEBE6F35EC79CB835CAE0A3F921B355
Validity
Not Before: Feb 4 18:21:51 2025 GMT
Not After : Feb 3 18:26:51 2026 GMT
Subject: CN=4CBFDF83EEAF469A7E1E7A21D844537ED0378536
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c4:81:7d:8b:d8:cd:dc:e1:e6:3f:02:65:4c:
04:75:ec:2c:f6:39:14:c4:71:f3:ef:81:8e:63:5c:
a4:e5:bf:12:9f:40:7e:6f:d0:75:de:db:80:87:10:
e6:8d:bc:9b:3e:d7:b7:51:ee:b1:56:1c:09:28:e1:
c2:1b:94:70:7c:b4:5c:ac:30:0b:7d:da:9a:e7:ef:
59:b3:0c:99:e4:97:8c:57:f5:d2:21:b4:45:7b:a2:
af:1f:eb:c5:0b:60:9c:a4:0f:47:00:a6:a4:76:67:
d3:70:2b:7a:63:9e:ad:4f:35:2b:1f:42:af:60:4c:
4c:37:ac:0c:82:00:5f:37:bf:10:bd:1b:89:24:0f:
09:04:ed:c3:fd:d7:5c:63:fa:04:5d:3a:6f:94:d4:
59:14:59:f4:82:24:05:6a:f0:fa:2d:75:aa:8e:e1:
41:2d:c9:98:d7:9e:0c:93:c5:eb:be:9e:d1:e9:83:
1d:c6:f5:39:af:de:e3:7b:e0:38:2c:fc:5b:db:1c:
a0:f7:67:22:77:5b:a5:06:c0:cf:84:f2:13:b5:00:
a2:4d:29:54:aa:15:c9:bd:81:f3:86:db:ac:87:e0:
b4:45:54:47:0a:88:20:5e:00:03:b3:3a:ea:de:a2:
fa:19:f4:2f:48:d5:aa:ee:08:80:de:b4:a8:97:95:
20:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:BF:DF:83:EE:AF:46:9A:7E:1E:7A:21:D8:44:53:7E:D0:37:85:36
X509v3 Authority Key Identifier:
keyid:BE:6B:84:F3:8B:EB:E6:F3:5E:C7:9C:B8:35:CA:E0:A3:F9:21:B3:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/BDBF09B3CAE1A376B8986E8C71550097CDFFD30F14F2FD2790FF48D55E3D54C1/0/BE6B84F38BEBE6F35EC79CB835CAE0A3F921B355.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BE6B84F38BEBE6F35EC79CB835CAE0A3F921B355.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BDBF09B3CAE1A376B8986E8C71550097CDFFD30F14F2FD2790FF48D55E3D54C1/0/34352e37312e3138372e302f32342d3234203d3e203237393437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.71.187.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:3c:d5:9b:22:25:e7:f4:ac:99:37:7c:49:3a:81:82:ed:33:
77:56:ea:14:ed:90:9b:34:9f:59:e4:ef:d5:80:fc:ae:49:78:
87:e5:eb:2f:c9:94:46:82:e5:20:b5:1f:69:0d:5b:cc:a6:0b:
96:1a:4e:d1:65:0d:96:9d:2c:99:aa:3f:a9:11:63:c2:7d:10:
73:9b:b4:25:1b:6a:b2:6b:a0:a0:ae:91:87:8f:75:5e:f2:b8:
e6:2a:a5:41:ac:a4:d6:ae:48:d2:0c:a2:b6:fa:c5:6a:94:f0:
87:ce:39:83:86:f5:3a:cb:ef:31:ad:d5:d9:7e:17:da:35:c2:
05:d3:b6:d0:83:fb:ad:38:0a:11:12:86:a2:24:58:57:af:bf:
39:df:41:d1:b4:3d:de:0f:26:d2:0e:e4:8a:a5:21:b5:54:76:
a4:5d:ea:00:80:87:9f:47:08:99:69:78:eb:ca:58:52:a4:6a:
9c:80:81:b8:fa:cb:64:ad:41:51:90:9d:e7:40:3d:03:9c:85:
71:61:21:c7:04:48:62:79:ed:ac:2c:d0:12:e1:3f:04:e3:b9:
1c:0d:6c:80:fb:1f:a3:fe:5b:22:d7:f4:7c:02:68:03:57:5f:
8f:4d:47:f6:c8:fc:84:e4:7a:65:ef:49:8e:1e:f1:9c:64:6c:
48:fa:fd:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:03:29 2025 by rpki-client