Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F3C7A9AA3F02FFF6B22D4B70A499C720A46B6717BB87139CAA8EFFCD3E2F024D/0/34352e352e3134382e302f32322d3234203d3e20323635373032.roa
File: 34352e352e3134382e302f32322d3234203d3e20323635373032.roa (raw, json)
Hash identifier: eXZRbOkfpwkYqMnVDrmPcMO9efYY08LoT//i0vHQJaQ=
Subject key identifier: F4:17:B8:D2:29:F8:D7:04:0D:F3:E6:A9:49:61:64:A1:D5:35:C1:30
Certificate issuer: /CN=5B7B05FE5B34A73FA971BA2BFE7E6D247019784B
Certificate serial: 59ED720D5EE3F8C94D75034D7FB4C9E3B6A540BB
Authority key identifier: 5B:7B:05:FE:5B:34:A7:3F:A9:71:BA:2B:FE:7E:6D:24:70:19:78:4B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5B7B05FE5B34A73FA971BA2BFE7E6D247019784B.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/F3C7A9AA3F02FFF6B22D4B70A499C720A46B6717BB87139CAA8EFFCD3E2F024D/0/34352e352e3134382e302f32322d3234203d3e20323635373032.roa
Signing time: Tue 04 Feb 2025 18:43:07 +0000
ROA not before: Tue 04 Feb 2025 18:38:07 +0000
ROA not after: Tue 03 Feb 2026 18:43:07 +0000
asID: 265702
IP address blocks: 45.5.148.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:ed:72:0d:5e:e3:f8:c9:4d:75:03:4d:7f:b4:c9:e3:b6:a5:40:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5B7B05FE5B34A73FA971BA2BFE7E6D247019784B
Validity
Not Before: Feb 4 18:38:07 2025 GMT
Not After : Feb 3 18:43:07 2026 GMT
Subject: CN=F417B8D229F8D7040DF3E6A9496164A1D535C130
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:63:f3:65:dc:67:61:df:3f:37:8b:11:9b:22:
4d:66:b4:3a:ee:d8:fe:db:f7:f6:b4:99:88:e8:5b:
06:77:be:31:8b:56:01:65:d4:84:ef:68:d7:56:e6:
1b:ee:22:6a:ba:cd:65:c8:09:92:52:85:ca:76:7c:
0c:36:27:80:18:7f:dc:c6:b8:3b:a2:57:e9:81:90:
9f:6d:66:20:40:af:ec:96:ee:8b:3b:91:37:66:99:
84:47:cc:9c:da:ac:f4:cc:52:f5:5a:c4:57:f5:34:
46:40:78:ff:02:d7:d7:b4:e8:e5:7f:18:26:5b:d4:
49:c0:c1:e8:e2:36:ae:e6:de:05:e9:e2:c3:64:2a:
d4:4d:0e:b7:e6:d6:e7:99:9a:24:89:fc:0a:57:72:
d7:8c:d1:24:77:37:7f:fc:05:d4:d2:c8:8f:b7:d9:
a8:02:70:b8:06:72:0f:2c:d5:b2:6d:09:01:7e:c7:
07:df:50:f7:55:eb:7c:c1:5a:41:71:6f:dd:30:cb:
d1:40:66:ce:53:22:d6:80:b3:1e:d9:50:11:e5:b7:
73:05:a9:db:72:4b:ed:04:79:ff:4e:0a:c5:b4:1c:
8f:b0:eb:53:6d:57:ad:a9:a7:13:e5:f6:41:48:03:
51:e4:62:d2:80:93:17:e8:33:68:ef:5b:e4:1c:0d:
f5:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:17:B8:D2:29:F8:D7:04:0D:F3:E6:A9:49:61:64:A1:D5:35:C1:30
X509v3 Authority Key Identifier:
keyid:5B:7B:05:FE:5B:34:A7:3F:A9:71:BA:2B:FE:7E:6D:24:70:19:78:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/F3C7A9AA3F02FFF6B22D4B70A499C720A46B6717BB87139CAA8EFFCD3E2F024D/0/5B7B05FE5B34A73FA971BA2BFE7E6D247019784B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5B7B05FE5B34A73FA971BA2BFE7E6D247019784B.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F3C7A9AA3F02FFF6B22D4B70A499C720A46B6717BB87139CAA8EFFCD3E2F024D/0/34352e352e3134382e302f32322d3234203d3e20323635373032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.5.148.0/22
Signature Algorithm: sha256WithRSAEncryption
2a:51:59:cc:69:4a:1c:74:fe:60:fd:88:c7:3e:a2:5c:a7:35:
6e:f5:00:09:52:e2:dd:a1:16:44:c4:61:24:76:c0:a3:5e:b3:
3f:e9:53:6a:c9:3a:ac:ef:b3:ac:f3:df:87:eb:c7:ff:d7:d9:
2a:5e:e9:24:16:c2:29:c3:d5:72:91:05:5e:dd:d7:4b:75:55:
cc:01:2c:07:47:20:a3:42:ff:e9:b2:d1:71:94:aa:b5:e3:5d:
03:81:63:29:b9:64:2f:a4:66:7e:2d:0f:ca:ee:c6:59:b7:c4:
e9:37:1a:88:87:1a:ab:fd:c4:17:96:f5:1d:01:2f:cc:cd:74:
03:d2:74:70:e3:90:09:b6:e3:8c:e6:e4:0f:f3:da:25:1a:72:
3f:8e:10:6f:5a:5a:ca:a8:24:40:4b:4a:f4:32:e2:10:03:8a:
29:fe:43:4e:e6:b2:bf:4f:46:74:e3:a6:90:8a:67:eb:3e:2c:
0f:0f:97:96:69:cb:44:d4:45:69:b7:70:41:0f:09:09:f0:4c:
19:13:17:0c:8f:e6:cb:25:89:4f:d1:9c:4a:e8:36:b9:46:4f:
0c:75:1c:b0:77:1e:6a:e9:d8:b9:37:d6:9a:7f:d3:54:8a:2e:
aa:fd:e9:b2:02:d7:ac:ce:2a:2b:c6:cb:d3:86:27:3d:fe:dd:
25:96:68:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:28:22 2025 by rpki-client