Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CD1DB9ED9F740B569671EA08376409CA7C9D760217CC109B95D7AD4D731C1271/0/34352e3138342e32302e302f32322d3234203d3e20323639373739.roa
File: 34352e3138342e32302e302f32322d3234203d3e20323639373739.roa (raw, json)
Hash identifier: 5eJ51KDzM11r4rFhRJX23rUzoirYpVZjamULoyKCWVw=
Subject key identifier: 3B:8D:7E:33:2A:C7:61:12:65:7F:97:CA:F6:FD:CB:62:B0:61:81:25
Certificate issuer: /CN=8FCCFBBE6DE0FDE4939CA30A509504E052D77675
Certificate serial: 61B46AD307323755A1CE09D53B4FD8487133CF3D
Authority key identifier: 8F:CC:FB:BE:6D:E0:FD:E4:93:9C:A3:0A:50:95:04:E0:52:D7:76:75
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8FCCFBBE6DE0FDE4939CA30A509504E052D77675.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/CD1DB9ED9F740B569671EA08376409CA7C9D760217CC109B95D7AD4D731C1271/0/34352e3138342e32302e302f32322d3234203d3e20323639373739.roa
Signing time: Tue 04 Feb 2025 18:56:14 +0000
ROA not before: Tue 04 Feb 2025 18:51:14 +0000
ROA not after: Tue 03 Feb 2026 18:56:14 +0000
asID: 269779
IP address blocks: 45.184.20.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:b4:6a:d3:07:32:37:55:a1:ce:09:d5:3b:4f:d8:48:71:33:cf:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8FCCFBBE6DE0FDE4939CA30A509504E052D77675
Validity
Not Before: Feb 4 18:51:14 2025 GMT
Not After : Feb 3 18:56:14 2026 GMT
Subject: CN=3B8D7E332AC76112657F97CAF6FDCB62B0618125
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:5f:15:da:13:79:aa:6a:a1:a1:ee:f0:c9:e7:
e0:06:af:3d:f0:0c:96:0e:80:67:b3:54:aa:4c:c4:
50:65:d9:d1:9f:11:eb:7a:f3:5a:20:ec:30:40:e1:
e0:e1:77:ea:07:2c:65:ea:17:27:c6:51:28:34:8f:
3a:c5:ec:dc:12:33:1d:3b:31:bf:f8:21:67:33:86:
b1:07:c8:64:73:a1:0d:31:01:df:ba:d6:2d:07:70:
19:e2:ee:26:39:72:5c:6b:f4:81:47:c2:b3:47:9a:
93:6b:c7:86:7a:8e:82:ae:f1:a1:2b:20:76:cc:59:
e0:15:af:92:50:d8:b4:0c:54:a7:1e:a0:10:8d:6b:
70:46:9b:b4:57:f7:82:3f:f6:20:b1:9f:23:00:b7:
a7:e4:ef:2f:cc:c2:ec:c2:37:45:d6:c3:07:80:75:
4a:00:ed:e8:2a:1e:47:e2:63:27:d3:54:9a:2f:ce:
36:78:6a:99:50:4c:d7:1e:0a:94:bf:be:91:5a:4c:
f9:9e:37:d5:19:40:47:bb:70:02:4f:d5:15:48:bb:
78:8d:66:27:0b:0c:c6:bc:fa:03:3f:53:63:7f:f3:
30:18:e0:4a:fa:f7:eb:f9:59:db:34:79:04:9c:c7:
ac:3e:19:6b:64:20:99:61:92:8b:e9:8f:7c:0c:a1:
2d:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:8D:7E:33:2A:C7:61:12:65:7F:97:CA:F6:FD:CB:62:B0:61:81:25
X509v3 Authority Key Identifier:
keyid:8F:CC:FB:BE:6D:E0:FD:E4:93:9C:A3:0A:50:95:04:E0:52:D7:76:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/CD1DB9ED9F740B569671EA08376409CA7C9D760217CC109B95D7AD4D731C1271/0/8FCCFBBE6DE0FDE4939CA30A509504E052D77675.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8FCCFBBE6DE0FDE4939CA30A509504E052D77675.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CD1DB9ED9F740B569671EA08376409CA7C9D760217CC109B95D7AD4D731C1271/0/34352e3138342e32302e302f32322d3234203d3e20323639373739.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.184.20.0/22
Signature Algorithm: sha256WithRSAEncryption
71:7b:01:6c:3b:f4:77:be:14:d1:a7:93:51:bd:ee:aa:ce:72:
a7:6b:8f:36:5b:e9:23:eb:54:0b:74:ab:33:6a:fc:f3:75:1f:
fa:98:4b:1c:5d:fd:4d:c9:f7:50:54:a0:1d:51:a2:aa:1e:9e:
de:d8:b8:7c:f7:30:03:ea:a9:ef:1b:e2:c1:06:37:10:e3:41:
46:4d:d5:7d:46:b7:0c:22:1d:a2:7f:06:ff:f5:b9:7a:10:03:
a7:83:d5:5e:cf:a0:ca:82:6b:60:45:ec:e5:91:e7:c1:b6:b4:
d4:44:1b:19:86:bb:88:e8:69:c7:66:e6:45:b7:51:24:a4:fd:
aa:aa:c5:f9:b8:72:52:56:81:90:1d:a4:99:a3:6e:13:45:08:
ea:75:eb:c5:cf:09:cc:32:b9:77:a3:e6:78:d5:b5:d6:84:e0:
8f:41:46:1a:f9:c4:90:d0:08:be:99:12:85:80:a1:d2:63:e2:
b1:2c:7e:fc:db:44:ee:4d:c6:6d:aa:be:b9:02:80:36:f5:6e:
d8:14:c8:51:01:72:79:86:a2:76:15:f0:04:2f:5f:54:53:a7:
e5:b5:42:95:b0:f9:e3:35:77:fa:bd:b0:90:04:01:80:28:13:
02:8e:9b:3a:25:7b:50:28:3b:5b:14:0c:8a:5d:5e:0c:c5:a3:
c3:31:9c:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:10:25 2025 by rpki-client