Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DFF1B81EAB88ECD114088D99260FFAB48D680EDF516A43ADB29187AD25591E1B/0/34352e3233382e3137362e302f32342d3234203d3e203634313339.roa
File: 34352e3233382e3137362e302f32342d3234203d3e203634313339.roa (raw, json)
Hash identifier: tDbhmRPKzcA1vexp8Cf/ZAzIF5JPQhSC5hM/O3svroQ=
Subject key identifier: 41:E5:7A:D9:C5:28:CB:82:E6:5F:BD:2F:09:5F:9B:41:6D:C7:B9:C1
Certificate issuer: /CN=D81AA43DF031E03121B10374C05B52BBB17ACBEA
Certificate serial: 17DB754B8052EC7DC630D6583AB366AEC73D1B5F
Authority key identifier: D8:1A:A4:3D:F0:31:E0:31:21:B1:03:74:C0:5B:52:BB:B1:7A:CB:EA
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D81AA43DF031E03121B10374C05B52BBB17ACBEA.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/DFF1B81EAB88ECD114088D99260FFAB48D680EDF516A43ADB29187AD25591E1B/0/34352e3233382e3137362e302f32342d3234203d3e203634313339.roa
Signing time: Tue 04 Feb 2025 18:54:09 +0000
ROA not before: Tue 04 Feb 2025 18:49:09 +0000
ROA not after: Tue 03 Feb 2026 18:54:09 +0000
asID: 64139
IP address blocks: 45.238.176.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:db:75:4b:80:52:ec:7d:c6:30:d6:58:3a:b3:66:ae:c7:3d:1b:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D81AA43DF031E03121B10374C05B52BBB17ACBEA
Validity
Not Before: Feb 4 18:49:09 2025 GMT
Not After : Feb 3 18:54:09 2026 GMT
Subject: CN=41E57AD9C528CB82E65FBD2F095F9B416DC7B9C1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:32:b9:31:e3:db:40:df:dc:5d:22:0a:d6:2d:
64:a5:55:48:87:7d:fe:11:2d:e7:46:79:33:94:b1:
bd:bb:be:eb:ae:fb:9d:c5:42:57:5f:f5:12:00:3c:
70:e2:54:e6:ff:2e:81:22:61:fc:08:87:1f:a5:a0:
3a:9c:15:5e:17:ca:9d:d0:4d:05:e6:24:55:6c:58:
a0:83:62:9a:9b:63:5a:cf:4f:73:b1:7d:b7:d7:a3:
a3:32:ad:1f:25:b1:6a:31:e8:1b:c7:46:5a:2b:a7:
47:aa:f7:4c:f2:82:61:44:8a:d6:22:8c:11:8c:80:
54:9d:59:cf:cf:57:bb:3a:7e:2d:2e:df:1c:bc:1b:
e5:0b:30:4c:8a:e0:1b:b9:0e:bb:7b:7f:c3:48:d6:
56:07:63:82:95:af:c7:89:a2:11:a0:63:29:28:28:
85:83:27:f4:a4:0a:e8:e3:37:a2:59:ec:75:46:03:
40:c3:9c:ce:22:77:c5:46:d7:f1:94:00:fa:5e:1b:
78:cf:dc:3c:1b:5a:58:15:73:08:6e:23:ac:28:cc:
9a:1d:02:5c:d3:fd:30:8a:54:9d:e2:09:d8:e0:2f:
93:e3:ae:be:e7:33:fb:2f:98:52:7c:0c:8e:1f:d3:
89:7e:aa:ad:ce:3b:f1:7f:1d:0c:66:54:90:d1:f5:
5b:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:E5:7A:D9:C5:28:CB:82:E6:5F:BD:2F:09:5F:9B:41:6D:C7:B9:C1
X509v3 Authority Key Identifier:
keyid:D8:1A:A4:3D:F0:31:E0:31:21:B1:03:74:C0:5B:52:BB:B1:7A:CB:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/DFF1B81EAB88ECD114088D99260FFAB48D680EDF516A43ADB29187AD25591E1B/0/D81AA43DF031E03121B10374C05B52BBB17ACBEA.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D81AA43DF031E03121B10374C05B52BBB17ACBEA.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DFF1B81EAB88ECD114088D99260FFAB48D680EDF516A43ADB29187AD25591E1B/0/34352e3233382e3137362e302f32342d3234203d3e203634313339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.238.176.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:43:ff:e6:69:de:54:dc:0f:ab:b9:70:3c:40:3a:67:81:59:
2d:73:70:eb:5d:b1:4d:d8:ca:5d:5a:84:a2:6a:f5:a9:d8:f0:
aa:3e:46:dd:47:35:53:e8:11:f2:9d:b8:52:da:bc:83:69:68:
83:39:c6:32:ef:2e:94:f4:e6:0a:0c:3b:63:39:03:b9:f0:b0:
e8:97:4f:8b:c8:71:a0:2d:18:a2:93:02:99:f2:ea:09:32:8d:
34:16:f7:89:43:4c:3c:e2:db:4e:8c:ef:2f:1f:9a:a5:01:5e:
3b:60:2e:ac:01:d0:73:6e:88:66:b7:dd:8f:9f:5a:1a:e9:a1:
68:d1:20:0f:60:f8:d3:be:3b:32:1e:f5:a9:54:bf:36:c9:f5:
5a:3e:4a:ee:75:dd:98:6a:a5:2e:9d:7b:37:c8:cd:2d:47:04:
51:d5:21:0a:55:09:5a:ac:5d:1f:13:93:7e:55:32:02:05:53:
6b:ad:12:33:53:ef:18:ba:19:c7:08:c1:b0:4c:a3:e0:5e:89:
f6:9f:c5:e1:92:b8:2d:8c:19:50:0e:04:79:01:f3:00:32:7f:
68:c1:7e:16:97:ae:70:1b:a4:29:87:4a:16:60:30:ff:25:38:
0e:07:3b:80:db:75:21:76:15:32:c0:3c:a7:ee:5f:82:e3:6d:
7c:0b:a5:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:02:26 2025 by rpki-client