Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E3BCD570957353FBE338DF0B293CE538800C1E3BE86B71E08640DD7C617EC6E6/0/34352e3138392e3138342e302f32322d3234203d3e20323639383734.roa
File: 34352e3138392e3138342e302f32322d3234203d3e20323639383734.roa (raw, json)
Hash identifier: R9dIQRLqCKi0FSvmQjzqqw2C/CvarbYVhfABbBYDCJ0=
Subject key identifier: 66:3D:29:6C:D2:4A:A6:B2:86:C6:11:41:35:B8:73:5F:6F:F2:94:BA
Certificate issuer: /CN=A7ED823CB6F767E5A4BC7203F538E97EF6F59F3A
Certificate serial: 7B3EDD3C5C52275F4CFA8C0212E1A3D5B399FCA2
Authority key identifier: A7:ED:82:3C:B6:F7:67:E5:A4:BC:72:03:F5:38:E9:7E:F6:F5:9F:3A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A7ED823CB6F767E5A4BC7203F538E97EF6F59F3A.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/E3BCD570957353FBE338DF0B293CE538800C1E3BE86B71E08640DD7C617EC6E6/0/34352e3138392e3138342e302f32322d3234203d3e20323639383734.roa
Signing time: Tue 04 Feb 2025 18:04:44 +0000
ROA not before: Tue 04 Feb 2025 17:59:44 +0000
ROA not after: Tue 03 Feb 2026 18:04:44 +0000
asID: 269874
IP address blocks: 45.189.184.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:3e:dd:3c:5c:52:27:5f:4c:fa:8c:02:12:e1:a3:d5:b3:99:fc:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A7ED823CB6F767E5A4BC7203F538E97EF6F59F3A
Validity
Not Before: Feb 4 17:59:44 2025 GMT
Not After : Feb 3 18:04:44 2026 GMT
Subject: CN=663D296CD24AA6B286C6114135B8735F6FF294BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:41:20:40:d0:b2:e2:8f:2d:ff:45:03:da:ba:
99:ca:4b:09:29:56:24:b9:28:a6:9e:33:16:f5:16:
f9:2d:d4:70:9e:69:49:b3:20:11:16:e2:3f:e5:cc:
2b:ab:a2:de:cb:24:95:81:5f:c9:b0:91:2b:2e:22:
01:10:35:7d:39:16:9b:8f:0f:b0:70:39:cb:6b:2c:
cc:45:8f:01:0d:6c:fa:88:36:f8:b0:ee:1d:e0:e0:
3f:b9:c8:90:86:ca:b7:0f:13:88:2b:f6:ed:08:9f:
f4:9f:6b:bb:14:47:c4:17:e9:87:74:5a:5a:62:1f:
c9:45:5e:4e:68:f3:ee:5f:f7:f7:d1:29:53:2f:04:
8b:35:13:c3:9d:56:f4:24:02:fe:c0:ae:56:6d:e7:
78:29:5c:19:a2:84:52:df:12:9f:2a:9b:e7:6d:93:
02:c3:3f:a5:5f:3b:7b:d7:64:9b:c2:2f:b9:94:7b:
b0:69:89:43:43:c7:c4:0c:af:5b:6e:b4:ec:cc:45:
08:4f:2d:d3:46:cf:30:08:e2:4b:66:84:cc:03:9f:
7c:5c:c2:d9:98:e4:57:13:70:03:a4:e6:d7:34:59:
56:79:1a:40:28:84:9b:0e:ae:bc:fe:45:c0:ca:a0:
44:2a:76:04:1d:c5:bf:c0:c4:b4:bd:6a:27:bf:61:
ff:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:3D:29:6C:D2:4A:A6:B2:86:C6:11:41:35:B8:73:5F:6F:F2:94:BA
X509v3 Authority Key Identifier:
keyid:A7:ED:82:3C:B6:F7:67:E5:A4:BC:72:03:F5:38:E9:7E:F6:F5:9F:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/E3BCD570957353FBE338DF0B293CE538800C1E3BE86B71E08640DD7C617EC6E6/0/A7ED823CB6F767E5A4BC7203F538E97EF6F59F3A.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A7ED823CB6F767E5A4BC7203F538E97EF6F59F3A.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E3BCD570957353FBE338DF0B293CE538800C1E3BE86B71E08640DD7C617EC6E6/0/34352e3138392e3138342e302f32322d3234203d3e20323639383734.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.189.184.0/22
Signature Algorithm: sha256WithRSAEncryption
68:64:9b:76:05:8a:94:75:8f:6a:b2:9c:4a:53:44:fc:41:7a:
4d:cf:d6:e0:59:bc:6e:b5:de:0c:df:b8:14:65:39:11:81:69:
17:33:f7:e4:70:59:fc:18:3e:96:20:21:27:b0:47:7e:3b:8e:
26:a7:43:e9:4b:21:07:e6:1a:87:cb:57:b7:4d:97:84:d7:ed:
cd:ed:3f:80:0f:db:c8:33:1f:57:94:9c:fa:80:90:a1:63:3f:
cd:69:be:39:bd:4d:84:53:14:79:ed:52:c4:d5:4b:8f:b2:f1:
97:db:94:6d:7a:96:2d:f7:7e:6c:db:6f:a7:33:e5:3a:17:bf:
d4:74:fd:da:09:bb:02:ad:f4:6b:3e:3c:e5:ef:7c:eb:76:d9:
68:e3:00:0d:08:58:b7:5c:bf:97:f4:f0:fe:93:d7:e4:79:c6:
35:14:e0:5e:42:6d:e7:45:d4:83:1a:8f:20:8d:8c:3d:13:3a:
5f:5c:79:28:9e:f7:99:54:9b:36:c4:a6:6a:31:64:85:f4:75:
0d:d8:26:a0:ec:32:8e:d8:65:64:d4:95:70:d0:af:fb:06:47:
8a:06:0c:b0:81:1c:11:8e:29:02:de:4d:33:d3:81:1c:ed:d7:
80:6e:04:6a:d2:d9:81:be:49:67:15:89:53:4d:15:b1:1a:3f:
29:03:e2:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:31:20 2025 by rpki-client