Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F799DAC8FA9400E3C99DE217D3AD6DD339A4CA0412769AF70ABCA56EE5CEC2E9/0/34352e3233342e3135362e302f32342d3234203d3e203232383630.roa
File: 34352e3233342e3135362e302f32342d3234203d3e203232383630.roa (raw, json)
Hash identifier: 9OSk15zpgHGgjUD9iNSSe0YeurkS0jK4om/F6ToZXME=
Subject key identifier: E1:40:7D:56:BF:B4:FC:1B:71:08:60:01:C9:F0:36:8D:7A:21:A9:9F
Certificate issuer: /CN=E884A6788F567FA5F2EF3E8C0BA4B2B5E3DF37AB
Certificate serial: 229DD3F0343A577EF44232A0B44C487B0B808229
Authority key identifier: E8:84:A6:78:8F:56:7F:A5:F2:EF:3E:8C:0B:A4:B2:B5:E3:DF:37:AB
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E884A6788F567FA5F2EF3E8C0BA4B2B5E3DF37AB.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/F799DAC8FA9400E3C99DE217D3AD6DD339A4CA0412769AF70ABCA56EE5CEC2E9/0/34352e3233342e3135362e302f32342d3234203d3e203232383630.roa
Signing time: Wed 15 Jan 2025 21:15:00 +0000
ROA not before: Wed 15 Jan 2025 21:10:00 +0000
ROA not after: Wed 14 Jan 2026 21:15:00 +0000
asID: 22860
IP address blocks: 45.234.156.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:9d:d3:f0:34:3a:57:7e:f4:42:32:a0:b4:4c:48:7b:0b:80:82:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E884A6788F567FA5F2EF3E8C0BA4B2B5E3DF37AB
Validity
Not Before: Jan 15 21:10:00 2025 GMT
Not After : Jan 14 21:15:00 2026 GMT
Subject: CN=E1407D56BFB4FC1B71086001C9F0368D7A21A99F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:39:38:96:ac:ab:82:87:1c:a4:35:70:4d:51:
3d:f2:c7:45:7e:ba:ce:a7:65:d5:bf:d6:ff:80:ea:
c9:30:3e:a5:d2:6e:9c:4e:83:0e:6f:80:e7:06:32:
89:73:97:14:12:90:be:e4:99:14:c3:8f:5a:5f:f5:
e0:fb:07:96:a2:f4:a7:f5:d6:b3:b6:05:7e:5b:86:
3b:c8:a4:e6:da:f9:e6:87:44:b0:7c:82:2f:ae:e2:
80:67:81:b3:28:5b:7b:99:0b:21:14:b8:2e:ac:db:
f1:e4:67:f7:37:cc:3c:14:d7:a4:b4:95:b4:dc:ff:
25:57:dd:03:09:b6:75:04:e6:98:0e:6c:96:4a:ac:
55:6e:b7:26:55:cc:ab:a3:a2:29:15:cb:06:a5:c9:
a2:c3:4f:e8:e2:c9:83:00:e7:53:41:13:a5:50:40:
56:fd:71:66:fe:5c:0a:83:36:24:f4:56:30:0b:de:
ba:f9:2d:76:ca:e0:a9:7b:78:7d:83:3b:d4:fb:32:
ab:10:48:7a:8d:1e:67:f4:5e:5a:bf:40:15:10:27:
2b:24:18:c9:39:09:bc:5b:e4:57:9d:75:b8:65:8c:
95:99:12:6a:1c:18:35:8a:80:00:6c:a6:8b:5f:94:
cd:9b:a8:f9:0d:31:97:33:7d:57:aa:7f:82:1c:cb:
6a:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:40:7D:56:BF:B4:FC:1B:71:08:60:01:C9:F0:36:8D:7A:21:A9:9F
X509v3 Authority Key Identifier:
keyid:E8:84:A6:78:8F:56:7F:A5:F2:EF:3E:8C:0B:A4:B2:B5:E3:DF:37:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/F799DAC8FA9400E3C99DE217D3AD6DD339A4CA0412769AF70ABCA56EE5CEC2E9/0/E884A6788F567FA5F2EF3E8C0BA4B2B5E3DF37AB.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E884A6788F567FA5F2EF3E8C0BA4B2B5E3DF37AB.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F799DAC8FA9400E3C99DE217D3AD6DD339A4CA0412769AF70ABCA56EE5CEC2E9/0/34352e3233342e3135362e302f32342d3234203d3e203232383630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.234.156.0/24
Signature Algorithm: sha256WithRSAEncryption
35:4b:9a:c5:e5:69:5d:46:a6:c1:f9:a9:39:ef:c7:69:e9:f4:
80:f8:6b:03:e3:28:83:68:8e:0a:16:91:53:9d:a5:b8:34:fa:
78:bb:82:a4:ce:3c:1c:8a:ec:09:cf:23:4b:92:da:87:97:b6:
24:f7:ce:ec:0d:c3:01:3b:74:d7:91:16:1a:8f:05:ef:93:21:
84:30:ca:71:98:6f:2b:d7:44:f7:f3:f4:5a:2a:27:bd:98:6b:
0f:31:48:67:29:74:da:5d:b8:35:7f:ad:8b:f1:a3:73:18:a4:
de:a8:19:62:a5:8f:75:08:2b:9c:83:cf:9e:81:fa:53:05:7b:
be:a7:05:1d:de:10:d8:4c:5e:5e:8c:0e:6e:64:99:65:ec:08:
df:9d:ba:61:71:1e:93:72:60:c2:44:4c:47:1b:34:9f:d4:e9:
c6:59:97:ca:93:1a:bf:5b:51:68:67:45:18:3f:3a:86:d3:99:
bb:78:2b:fa:22:48:e5:01:3f:f1:a1:9e:c5:a0:56:81:a8:b7:
3b:89:0c:53:b8:51:89:53:82:ef:8e:5f:1f:bf:21:93:45:d2:
90:73:54:73:44:e5:73:c3:f0:ac:1b:b3:50:a5:ce:13:b2:eb:
de:ec:3f:32:89:13:5a:63:5d:45:af:e3:ca:19:12:43:3a:df:
05:ed:5c:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:39:54 2025 by rpki-client