Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D828FDD3E53B748618165B66FE695F5547F56A73103C6573424452A5AB0A1B1C/0/34352e352e37312e302f32342d3234203d3e20323635363931.roa
File: 34352e352e37312e302f32342d3234203d3e20323635363931.roa (raw, json)
Hash identifier: TbcgGxoqQfaZvcWbvQirZU1TxW4HRotRtDIyCITGNJI=
Subject key identifier: A0:0A:BA:17:31:1D:BB:DB:54:68:4C:C2:29:B1:18:E8:21:BB:85:9A
Certificate issuer: /CN=E7A27C8F6CDCF649D79DE823E920014569787295
Certificate serial: 5A2EDD4F9A307E80ED6DDEF767FF2006A0898A96
Authority key identifier: E7:A2:7C:8F:6C:DC:F6:49:D7:9D:E8:23:E9:20:01:45:69:78:72:95
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E7A27C8F6CDCF649D79DE823E920014569787295.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D828FDD3E53B748618165B66FE695F5547F56A73103C6573424452A5AB0A1B1C/0/34352e352e37312e302f32342d3234203d3e20323635363931.roa
Signing time: Tue 04 Feb 2025 19:58:00 +0000
ROA not before: Tue 04 Feb 2025 19:53:00 +0000
ROA not after: Tue 03 Feb 2026 19:58:00 +0000
asID: 265691
IP address blocks: 45.5.71.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:2e:dd:4f:9a:30:7e:80:ed:6d:de:f7:67:ff:20:06:a0:89:8a:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E7A27C8F6CDCF649D79DE823E920014569787295
Validity
Not Before: Feb 4 19:53:00 2025 GMT
Not After : Feb 3 19:58:00 2026 GMT
Subject: CN=A00ABA17311DBBDB54684CC229B118E821BB859A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:15:78:a6:cb:4c:86:55:6a:ba:53:c9:b2:29:
23:ab:ea:e2:32:90:43:f7:28:05:7a:8b:b7:c3:29:
00:e2:bc:c4:21:a4:be:e9:c6:9e:29:e7:5f:50:59:
7f:eb:35:9b:60:6e:6c:3b:8d:73:67:69:94:73:06:
b0:c9:1b:a9:11:e3:21:ec:7e:d4:2f:b7:a1:9e:6f:
d4:2b:f0:e6:94:21:05:9c:df:83:96:59:ad:db:76:
64:8e:4e:05:ca:e2:2b:a8:10:20:8d:8b:71:d8:16:
88:04:82:5a:d0:60:1a:1d:6c:ba:9a:60:34:94:15:
c8:8c:9e:b3:93:55:84:16:66:7b:9a:87:ba:ce:a4:
06:2a:1d:be:3d:91:70:4d:d0:c5:dc:cd:26:f2:ef:
f7:7c:70:23:7a:ee:59:08:ac:78:94:38:fd:df:ab:
17:52:fb:88:6d:d4:70:36:1f:20:72:86:ec:f1:d8:
82:59:03:32:63:f3:64:48:71:97:42:1c:1e:6f:71:
c1:95:a8:9a:f4:54:f0:3f:fe:84:66:83:7a:e2:f6:
b6:ce:e4:e9:80:78:fc:69:82:20:ff:d6:60:87:13:
c1:b9:d6:61:82:86:03:4b:ce:a2:cc:31:9c:10:57:
01:f3:4f:78:6c:19:11:b2:19:a8:b4:ad:58:6a:9a:
5b:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:0A:BA:17:31:1D:BB:DB:54:68:4C:C2:29:B1:18:E8:21:BB:85:9A
X509v3 Authority Key Identifier:
keyid:E7:A2:7C:8F:6C:DC:F6:49:D7:9D:E8:23:E9:20:01:45:69:78:72:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/D828FDD3E53B748618165B66FE695F5547F56A73103C6573424452A5AB0A1B1C/0/E7A27C8F6CDCF649D79DE823E920014569787295.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E7A27C8F6CDCF649D79DE823E920014569787295.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D828FDD3E53B748618165B66FE695F5547F56A73103C6573424452A5AB0A1B1C/0/34352e352e37312e302f32342d3234203d3e20323635363931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.5.71.0/24
Signature Algorithm: sha256WithRSAEncryption
63:70:fb:74:3e:ee:0e:40:7a:ea:17:c2:10:d8:97:a6:15:3b:
49:c0:ce:0f:3b:ae:d2:ab:e1:bf:3a:1b:3b:33:bf:00:78:69:
20:dd:8e:b7:45:5f:a3:13:f5:5d:06:4d:f9:b7:5f:4f:d8:23:
0e:05:c1:4d:bc:64:5d:84:4b:51:35:5a:35:2b:6b:14:28:4a:
5e:0f:db:ad:a5:bb:73:2e:91:d5:b3:ff:36:bd:3b:f8:08:88:
f3:0f:22:3b:bc:ec:dc:8f:5d:bc:e6:8f:94:a5:fb:d6:20:d2:
63:b0:c9:5c:2b:ca:48:3c:0d:4e:80:33:d6:89:0d:e8:57:04:
3b:51:f9:04:a7:e5:b5:c2:cf:98:5d:42:92:a3:69:38:af:d5:
f9:fc:f3:e2:8d:84:48:42:af:8a:44:09:70:d7:14:7e:16:60:
f9:c6:40:ec:ac:51:8b:cb:5e:39:72:67:a2:ac:bb:61:20:d1:
f2:25:15:c0:fd:9d:f0:61:4b:78:16:cc:d5:b5:f2:0b:ee:eb:
ec:c6:7e:85:69:be:fa:54:b1:06:0a:57:2e:77:04:b5:2b:8d:
a5:85:1c:29:e6:0f:66:45:b7:87:b7:e5:81:58:c3:99:7c:9d:
4a:d7:fe:c8:3a:bc:e9:f6:bc:2c:dd:4e:08:94:d4:ea:23:4e:
0e:b1:f1:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:04:55 2025 by rpki-client