Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C7E416EF8B6CFB3F9AA5DA4999B1E5C751D4A1215AFC71B17175CE4CF2D2A06D/0/34352e3232372e3232352e302f32342d3234203d3e203532333238.roa
File: 34352e3232372e3232352e302f32342d3234203d3e203532333238.roa (raw, json)
Hash identifier: RMARksPSRn15Ms1RCakwsiyyEgPr6fGD6eEkXqTUd0w=
Subject key identifier: AC:02:CC:E7:E2:C3:CD:3B:95:72:57:5C:D0:81:06:44:3B:44:CE:E2
Certificate issuer: /CN=D0F632F506E9F43BFD1C89E7DC1560EB1774538B
Certificate serial: 2B2E412E9AC26FC9437D6599BE52DF03F74CE5C5
Authority key identifier: D0:F6:32:F5:06:E9:F4:3B:FD:1C:89:E7:DC:15:60:EB:17:74:53:8B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D0F632F506E9F43BFD1C89E7DC1560EB1774538B.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/C7E416EF8B6CFB3F9AA5DA4999B1E5C751D4A1215AFC71B17175CE4CF2D2A06D/0/34352e3232372e3232352e302f32342d3234203d3e203532333238.roa
Signing time: Tue 04 Feb 2025 18:08:04 +0000
ROA not before: Tue 04 Feb 2025 18:03:04 +0000
ROA not after: Tue 03 Feb 2026 18:08:04 +0000
asID: 52328
IP address blocks: 45.227.225.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:2e:41:2e:9a:c2:6f:c9:43:7d:65:99:be:52:df:03:f7:4c:e5:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D0F632F506E9F43BFD1C89E7DC1560EB1774538B
Validity
Not Before: Feb 4 18:03:04 2025 GMT
Not After : Feb 3 18:08:04 2026 GMT
Subject: CN=AC02CCE7E2C3CD3B9572575CD08106443B44CEE2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:7c:8a:22:59:32:76:19:d8:9d:ff:43:18:4d:
39:69:0c:53:c5:54:41:32:00:9e:16:ae:10:50:8b:
08:a1:ca:13:bc:93:af:31:44:c3:85:af:01:c6:a8:
6f:fc:30:8e:a2:e6:af:23:4f:15:36:59:bf:fd:69:
56:b8:a6:d6:94:0e:49:f7:3c:ee:c7:5f:5a:4f:51:
f4:2c:fa:c4:f8:de:88:a7:b7:89:c8:ed:fd:38:33:
93:06:46:46:0d:19:02:20:6d:82:0b:3f:6d:f1:1d:
39:44:9c:7a:88:b7:83:5b:f6:02:c5:f1:20:42:40:
cc:26:30:c1:ff:c0:e4:d0:55:a4:a1:ef:5b:1d:79:
0f:04:f6:8a:db:6b:cd:46:e7:84:3a:e4:c7:15:5b:
3c:eb:0d:b4:e9:2b:01:6f:57:b4:ad:4f:56:bc:93:
92:d4:68:43:8c:c0:bc:f9:0e:8d:7d:d7:7e:2c:6c:
c9:60:75:77:db:17:25:1d:8e:e3:82:2b:df:13:76:
46:a3:1c:42:75:57:e3:eb:8a:7b:b4:99:24:11:9a:
9a:7b:be:47:98:36:2d:d9:bd:3c:51:9a:30:9e:53:
7d:5d:1d:a2:01:3b:fc:d0:87:e6:b9:ae:35:73:29:
56:f4:b4:a2:70:56:75:66:93:2b:82:bf:8c:4d:3a:
51:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:02:CC:E7:E2:C3:CD:3B:95:72:57:5C:D0:81:06:44:3B:44:CE:E2
X509v3 Authority Key Identifier:
keyid:D0:F6:32:F5:06:E9:F4:3B:FD:1C:89:E7:DC:15:60:EB:17:74:53:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/C7E416EF8B6CFB3F9AA5DA4999B1E5C751D4A1215AFC71B17175CE4CF2D2A06D/0/D0F632F506E9F43BFD1C89E7DC1560EB1774538B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D0F632F506E9F43BFD1C89E7DC1560EB1774538B.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C7E416EF8B6CFB3F9AA5DA4999B1E5C751D4A1215AFC71B17175CE4CF2D2A06D/0/34352e3232372e3232352e302f32342d3234203d3e203532333238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.227.225.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:84:3c:d2:7e:82:29:f0:e3:04:2d:13:fd:c9:e7:df:77:c8:
39:2f:60:a5:3d:46:10:83:a7:78:33:34:80:6f:b8:b0:f6:45:
ee:66:da:b3:52:4e:14:71:32:bf:bf:0b:c2:0d:a7:cb:06:cf:
c7:bb:79:69:3e:6c:f9:e8:85:5d:3e:39:10:c1:81:76:c1:0c:
d5:96:e8:02:25:29:ef:07:96:44:10:78:3b:ce:d4:6c:da:c4:
ad:da:7a:fe:ab:8d:33:e4:11:5c:88:b0:e2:d9:d7:e5:cc:6d:
9e:49:2d:45:fb:bb:bc:eb:ff:a6:08:58:c5:57:e3:05:94:ca:
ef:fb:fe:88:65:65:41:5c:a2:b4:73:39:98:24:59:92:63:0a:
bf:1b:e1:91:be:7e:07:ea:22:7a:6a:3f:02:28:7b:c2:dd:45:
a6:cb:e6:76:0f:be:09:be:26:5f:41:4b:2e:de:f1:1c:c3:4c:
97:11:e8:3f:ce:79:04:36:c9:2b:65:ed:c3:e4:f1:bb:f5:b6:
33:2d:75:87:63:7a:11:19:2d:ce:57:d7:09:c2:8b:4a:02:dd:
a8:88:c4:2e:ff:1b:3d:c9:a5:29:bb:f5:cc:3e:aa:a7:1e:58:
b6:85:53:0f:8a:57:45:97:4d:fa:b3:c7:e0:d2:cf:e3:dd:9d:
f6:e7:e3:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:07:58 2025 by rpki-client