Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F44DC6830B20905E40EFF6D6630B7571AAE62A9298187D969A5F9A5EDEAC9105/0/34352e3136382e3137352e302f32342d3234203d3e20323639383736.roa
File: 34352e3136382e3137352e302f32342d3234203d3e20323639383736.roa (raw, json)
Hash identifier: oP81MfO4q2r0fr+ArWV0Mj+PrZ+hac+rVYFIykVYl6o=
Subject key identifier: 56:72:45:56:60:BF:0D:5D:9C:FB:45:72:EA:AD:18:63:4C:60:42:AA
Certificate issuer: /CN=33765A5A53AB5641AF9C73A1929D99EAB1234478
Certificate serial: 37A0CBDDF52F4B08D3D0840DA8E30F90EF543CD1
Authority key identifier: 33:76:5A:5A:53:AB:56:41:AF:9C:73:A1:92:9D:99:EA:B1:23:44:78
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/33765A5A53AB5641AF9C73A1929D99EAB1234478.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/F44DC6830B20905E40EFF6D6630B7571AAE62A9298187D969A5F9A5EDEAC9105/0/34352e3136382e3137352e302f32342d3234203d3e20323639383736.roa
Signing time: Tue 04 Feb 2025 18:39:59 +0000
ROA not before: Tue 04 Feb 2025 18:34:59 +0000
ROA not after: Tue 03 Feb 2026 18:39:59 +0000
asID: 269876
IP address blocks: 45.168.175.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:a0:cb:dd:f5:2f:4b:08:d3:d0:84:0d:a8:e3:0f:90:ef:54:3c:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33765A5A53AB5641AF9C73A1929D99EAB1234478
Validity
Not Before: Feb 4 18:34:59 2025 GMT
Not After : Feb 3 18:39:59 2026 GMT
Subject: CN=5672455660BF0D5D9CFB4572EAAD18634C6042AA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:05:ac:24:e4:a0:cf:ff:73:34:83:f0:97:db:
cb:b8:40:c6:1e:b9:fc:ab:3a:a2:ac:ef:33:4c:bd:
d7:26:c0:06:4b:fa:74:10:56:6d:fd:30:16:37:86:
f0:f5:97:13:4d:02:d8:8a:28:db:42:60:6f:2d:b4:
39:c1:d6:08:b8:fe:ed:21:67:93:8e:74:86:1b:f1:
f8:11:14:9d:21:e8:ea:2d:39:6a:56:40:72:0b:cd:
f8:70:f5:b7:94:d6:1e:19:71:a8:f4:41:04:9c:84:
f3:ac:92:da:88:15:cc:de:8b:6a:4f:93:ab:46:71:
c2:86:47:44:91:03:9e:a0:26:a7:4d:d2:e2:ce:de:
a8:bc:f4:1c:d0:47:f9:62:06:bf:5b:13:4b:4e:60:
a2:98:d3:81:d8:b8:a4:63:dc:c6:e5:4a:ed:bb:94:
bf:14:7b:cb:ba:a9:8f:30:f1:62:c1:16:cd:67:73:
a6:2b:1e:1e:ae:21:f1:51:e9:c8:37:43:4f:bf:1c:
18:26:dd:54:67:df:dd:65:1f:07:62:78:a3:5c:8a:
f0:2a:56:08:54:0c:d5:4a:28:97:b2:fe:34:e3:dc:
ed:74:88:df:f3:f5:59:42:e0:93:4d:db:dd:33:19:
e9:87:ba:b3:9f:ea:8a:30:e1:4a:3b:97:27:ff:08:
91:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:72:45:56:60:BF:0D:5D:9C:FB:45:72:EA:AD:18:63:4C:60:42:AA
X509v3 Authority Key Identifier:
keyid:33:76:5A:5A:53:AB:56:41:AF:9C:73:A1:92:9D:99:EA:B1:23:44:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/F44DC6830B20905E40EFF6D6630B7571AAE62A9298187D969A5F9A5EDEAC9105/0/33765A5A53AB5641AF9C73A1929D99EAB1234478.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/33765A5A53AB5641AF9C73A1929D99EAB1234478.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F44DC6830B20905E40EFF6D6630B7571AAE62A9298187D969A5F9A5EDEAC9105/0/34352e3136382e3137352e302f32342d3234203d3e20323639383736.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.168.175.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:23:cd:93:65:70:41:9c:9f:33:0b:a7:0f:c0:c6:1b:6f:df:
3d:7c:3d:33:20:00:52:29:2c:f8:03:f5:de:f3:91:23:e2:a8:
ca:0b:0f:7c:1b:83:b7:eb:54:2c:60:d3:f7:83:0b:03:32:9f:
56:f9:44:1c:69:98:95:48:37:7a:64:4f:77:6f:fa:29:9e:19:
1f:b2:10:7c:29:29:4b:76:2f:52:32:cf:b6:b2:56:47:da:29:
2f:22:04:d5:55:e1:dc:e9:81:52:8d:26:6f:99:f4:a6:33:8e:
48:37:ad:b5:b0:03:37:96:cc:4f:92:0b:79:fd:5b:1a:5d:b4:
65:ab:fc:7f:5a:c6:d8:62:c8:d8:66:21:df:75:f2:c6:2e:05:
54:01:27:50:1d:3a:17:37:ea:92:25:d3:3e:05:3b:e4:cb:13:
79:03:88:6c:4e:5b:52:a4:61:95:34:00:f7:3a:fd:c5:5b:02:
01:b9:ea:c7:7f:d8:9e:aa:1b:bb:28:9e:a8:f3:8b:43:bf:ec:
15:78:b4:84:f6:80:68:4f:16:0a:fb:3d:82:3c:3d:03:0c:ab:
38:11:f6:92:69:69:c4:82:f8:90:6d:42:b4:b1:15:84:42:38:
9f:a8:fe:73:7c:75:14:67:37:2c:4b:ea:da:58:31:fa:64:53:
42:b7:33:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:42:55 2025 by rpki-client