Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D5F64129A3275E11FC5E33280C6B65D077E07295A2F49025888B3722B709E6FE/0/34352e3232342e3230332e302f32342d3234203d3e20323635383432.roa
File: 34352e3232342e3230332e302f32342d3234203d3e20323635383432.roa (raw, json)
Hash identifier: R/jMla9Sf/fYR+tZNDM9DDMl1Ojy3yLPRQPwU/wzA/g=
Subject key identifier: DE:B0:88:15:A8:B8:8E:D0:82:B6:7D:7F:42:E6:B8:D7:E8:67:B6:20
Certificate issuer: /CN=DE0E9C4841E7FD1E402786DBD8A1B35F69ADC5E1
Certificate serial: 41B16070D7B717854C6664024FA52895CCA3E866
Authority key identifier: DE:0E:9C:48:41:E7:FD:1E:40:27:86:DB:D8:A1:B3:5F:69:AD:C5:E1
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DE0E9C4841E7FD1E402786DBD8A1B35F69ADC5E1.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D5F64129A3275E11FC5E33280C6B65D077E07295A2F49025888B3722B709E6FE/0/34352e3232342e3230332e302f32342d3234203d3e20323635383432.roa
Signing time: Tue 04 Feb 2025 18:31:24 +0000
ROA not before: Tue 04 Feb 2025 18:26:24 +0000
ROA not after: Tue 03 Feb 2026 18:31:24 +0000
asID: 265842
IP address blocks: 45.224.203.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:b1:60:70:d7:b7:17:85:4c:66:64:02:4f:a5:28:95:cc:a3:e8:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DE0E9C4841E7FD1E402786DBD8A1B35F69ADC5E1
Validity
Not Before: Feb 4 18:26:24 2025 GMT
Not After : Feb 3 18:31:24 2026 GMT
Subject: CN=DEB08815A8B88ED082B67D7F42E6B8D7E867B620
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:2f:42:7e:f7:1b:30:45:dd:e4:f0:3b:fc:fb:
72:bb:08:f0:02:0f:83:61:08:e3:e5:8a:1a:c0:18:
1a:0f:40:9c:ff:b8:6c:c6:07:8f:35:ab:c7:18:3c:
e5:e9:92:6c:f0:f9:4b:a8:b4:55:56:81:38:3f:be:
01:42:cb:7a:f4:e7:d7:7f:6e:6c:86:fd:58:f8:72:
d1:25:f3:01:3e:34:4b:bc:ca:0d:30:c0:ef:a1:fb:
99:47:ac:53:6e:9f:9c:83:53:81:61:6a:0e:b5:f7:
35:37:3c:2f:66:76:e1:81:50:c2:ac:47:49:c6:51:
6d:54:f9:d6:f6:ee:02:7e:ac:ce:fa:a7:11:d5:73:
ee:7b:b1:e5:82:d5:19:d5:95:d6:ac:df:57:95:f4:
25:b5:d8:55:52:14:a5:b3:93:00:bd:88:78:a7:ed:
0f:37:f6:c7:6c:b9:ef:b1:e3:6c:db:f5:6b:72:b5:
98:33:48:f7:27:58:c0:73:e0:bb:32:30:34:fd:c8:
b7:67:33:25:d8:2c:91:12:12:a6:a7:3a:37:ea:d1:
c6:47:ef:19:26:6c:d3:e5:11:1e:5a:ae:25:3f:15:
07:06:10:3c:91:51:fa:bc:f5:12:27:b5:7f:c1:39:
3f:f6:a8:da:b7:e1:a6:1f:0d:68:99:b5:cb:8a:d4:
d6:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:B0:88:15:A8:B8:8E:D0:82:B6:7D:7F:42:E6:B8:D7:E8:67:B6:20
X509v3 Authority Key Identifier:
keyid:DE:0E:9C:48:41:E7:FD:1E:40:27:86:DB:D8:A1:B3:5F:69:AD:C5:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/D5F64129A3275E11FC5E33280C6B65D077E07295A2F49025888B3722B709E6FE/0/DE0E9C4841E7FD1E402786DBD8A1B35F69ADC5E1.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DE0E9C4841E7FD1E402786DBD8A1B35F69ADC5E1.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D5F64129A3275E11FC5E33280C6B65D077E07295A2F49025888B3722B709E6FE/0/34352e3232342e3230332e302f32342d3234203d3e20323635383432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.224.203.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:ae:0b:ec:cd:98:e8:7e:45:bf:20:35:db:52:ad:6b:6b:54:
cb:4e:20:2e:c5:07:29:09:d0:67:82:22:94:bc:82:f9:99:2f:
7f:cb:ed:92:f2:43:e4:fa:b6:09:86:b3:51:f5:84:b6:40:52:
39:2f:48:b2:f4:1c:d4:15:83:b2:3f:48:c0:87:3d:4e:5a:55:
46:f9:d5:bc:c1:f1:7e:83:a8:f6:61:71:a4:21:66:08:ff:b3:
b4:15:23:38:47:a2:e1:82:94:bd:53:a5:df:c6:89:f1:8b:f6:
2e:68:84:b2:e1:8d:24:cd:75:1f:2c:58:f1:74:f6:36:64:ca:
7d:44:0f:25:da:9f:17:d1:c2:95:4a:f5:e2:44:08:df:03:69:
ca:2d:a4:8f:34:f5:5c:ac:02:cd:27:21:37:17:ef:60:5a:b5:
55:42:0b:4d:81:f1:d7:de:a8:b1:50:53:60:a7:ac:61:13:7e:
d7:58:2f:d9:65:41:69:69:12:9a:45:c1:d0:26:41:a1:da:97:
d3:d2:17:36:17:fc:bf:a9:54:8c:8d:ed:67:76:59:68:59:a0:
73:8d:39:19:70:13:30:8f:62:c1:b3:43:a4:0a:dc:f5:16:21:
6f:83:42:78:4a:a1:d9:3e:0a:85:b3:7c:3d:77:1b:b7:bc:b9:
42:d2:d9:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:56:08 2025 by rpki-client