Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D074091ABD4AC0C45CE98A084B2572D23DA224081356C9D61467810DBB6180CD/0/34352e36382e32302e302f32342d3234203d3e20323732313336.roa
File: 34352e36382e32302e302f32342d3234203d3e20323732313336.roa (raw, json)
Hash identifier: 5FtOGZUAqZaeTeRbrCwtDPlKmnm9O936nVjBt+I0u3I=
Subject key identifier: 07:A3:37:09:48:72:39:28:94:1C:C6:D8:0E:89:9F:2B:44:2D:22:5B
Certificate issuer: /CN=03CA54765F0951D369734386CF982D71F5CB5403
Certificate serial: 6D4997321D2874C29BB92A92F6C47DF4C3A5F438
Authority key identifier: 03:CA:54:76:5F:09:51:D3:69:73:43:86:CF:98:2D:71:F5:CB:54:03
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/03CA54765F0951D369734386CF982D71F5CB5403.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D074091ABD4AC0C45CE98A084B2572D23DA224081356C9D61467810DBB6180CD/0/34352e36382e32302e302f32342d3234203d3e20323732313336.roa
Signing time: Tue 04 Feb 2025 18:46:38 +0000
ROA not before: Tue 04 Feb 2025 18:41:38 +0000
ROA not after: Tue 03 Feb 2026 18:46:38 +0000
asID: 272136
IP address blocks: 45.68.20.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:49:97:32:1d:28:74:c2:9b:b9:2a:92:f6:c4:7d:f4:c3:a5:f4:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03CA54765F0951D369734386CF982D71F5CB5403
Validity
Not Before: Feb 4 18:41:38 2025 GMT
Not After : Feb 3 18:46:38 2026 GMT
Subject: CN=07A3370948723928941CC6D80E899F2B442D225B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b7:4f:47:f3:b3:a8:fc:9d:5c:30:c1:43:db:
ed:11:03:3a:43:76:15:b0:35:25:c6:cc:da:b0:ef:
41:d2:b2:81:a5:6d:f3:bf:d1:1d:8f:6c:4b:ff:86:
9a:14:9a:8d:60:39:05:ce:f8:b8:44:89:71:da:95:
33:a1:56:57:11:9c:af:c2:b6:c8:f7:42:73:94:40:
4d:b3:ad:d8:81:00:0a:3c:0f:71:9c:23:a6:de:08:
75:e8:86:1f:8b:61:2d:6a:8a:b4:53:a5:08:3f:7f:
7b:79:5a:9b:19:dc:95:9b:1c:5d:b0:a1:d6:98:65:
73:2e:26:d5:5d:f9:ca:72:a1:88:63:2d:aa:78:77:
68:45:8b:ec:36:9c:2f:dc:8d:54:5c:b6:d9:e2:9c:
ea:11:a2:44:86:b5:9b:02:f4:d2:b4:20:00:5e:09:
4f:d8:f6:57:79:31:db:29:70:04:80:f8:db:fe:6d:
d6:d9:e1:31:50:36:d6:f3:f1:84:a1:cb:d4:07:57:
e1:e5:d7:c0:44:dd:15:76:e9:26:2a:5d:e4:ee:1a:
6c:b8:19:4a:ee:1c:1f:0a:5f:30:e3:a8:ac:26:85:
16:c5:5b:ab:cb:da:7b:33:7c:f9:25:02:dd:ce:38:
0e:e5:97:ad:56:ae:bb:fe:da:b6:07:e0:6b:cc:16:
2b:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:A3:37:09:48:72:39:28:94:1C:C6:D8:0E:89:9F:2B:44:2D:22:5B
X509v3 Authority Key Identifier:
keyid:03:CA:54:76:5F:09:51:D3:69:73:43:86:CF:98:2D:71:F5:CB:54:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/D074091ABD4AC0C45CE98A084B2572D23DA224081356C9D61467810DBB6180CD/0/03CA54765F0951D369734386CF982D71F5CB5403.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/03CA54765F0951D369734386CF982D71F5CB5403.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D074091ABD4AC0C45CE98A084B2572D23DA224081356C9D61467810DBB6180CD/0/34352e36382e32302e302f32342d3234203d3e20323732313336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.68.20.0/24
Signature Algorithm: sha256WithRSAEncryption
62:56:2d:6d:09:24:0b:75:8c:9a:dc:83:fa:d0:1a:2f:0c:13:
72:08:36:ee:fa:dc:72:c2:c6:32:11:87:df:0c:ab:65:d1:dc:
64:07:61:c2:81:72:32:4e:48:ab:80:77:7d:43:ce:93:e6:fc:
2e:4b:84:0d:7b:be:1b:0c:fc:8b:02:fb:ce:cb:47:ac:b6:5c:
c9:54:41:fc:03:53:54:f4:59:dd:45:22:09:b4:80:15:90:dc:
00:98:c0:1e:d7:21:ff:e1:d6:05:f2:c5:34:54:b2:30:1b:8b:
9f:0e:88:85:5d:ef:bf:d2:d4:a9:46:68:7d:a6:72:fe:79:39:
9b:1d:45:5a:69:93:58:6b:85:a3:34:11:74:a7:6f:4f:e2:da:
21:18:57:31:fe:b6:0f:04:f4:01:da:8a:2e:d4:60:a1:20:d3:
4b:94:bd:45:b5:76:b7:b9:6e:a1:f8:5f:b2:d8:a6:e0:41:d5:
15:ae:d1:36:11:4a:a3:ac:ad:e5:6c:7b:cc:28:ce:d6:e0:df:
07:82:22:b7:55:f5:a2:62:93:72:79:2e:34:cc:e6:61:12:30:
4c:33:cb:2d:d1:bb:0f:d8:27:01:1e:2a:e0:0f:ca:bd:6c:c3:
17:4a:bf:c9:b6:fc:f8:a7:c3:0c:45:bd:04:54:e2:d5:69:b3:
ff:90:51:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:59:59 2025 by rpki-client