Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC04E185702D3C0A5B877618487C0BC2BC2FDE4131C57806A2BB3439C7DE55E/0/34352e3137302e32392e302f32342d3234203d3e20323637373532.roa
File: 34352e3137302e32392e302f32342d3234203d3e20323637373532.roa (raw, json)
Hash identifier: kYAcMApg/ON/2l2flT0529uamdljA+Rlg7K9KOfaHSM=
Subject key identifier: D3:1B:E2:1E:52:2D:5C:05:3F:7B:9D:B3:4B:AC:FE:3D:22:90:15:87
Certificate issuer: /CN=FD07AFBCC3FFB625EEA674F938508F1BC3309E00
Certificate serial: 021A877E9CAA8D7D97BB35D79E25042C8CF39A12
Authority key identifier: FD:07:AF:BC:C3:FF:B6:25:EE:A6:74:F9:38:50:8F:1B:C3:30:9E:00
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FD07AFBCC3FFB625EEA674F938508F1BC3309E00.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/FDC04E185702D3C0A5B877618487C0BC2BC2FDE4131C57806A2BB3439C7DE55E/0/34352e3137302e32392e302f32342d3234203d3e20323637373532.roa
Signing time: Thu 28 Nov 2024 22:15:00 +0000
ROA not before: Thu 28 Nov 2024 22:10:00 +0000
ROA not after: Thu 27 Nov 2025 22:15:00 +0000
asID: 267752
IP address blocks: 45.170.29.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:1a:87:7e:9c:aa:8d:7d:97:bb:35:d7:9e:25:04:2c:8c:f3:9a:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FD07AFBCC3FFB625EEA674F938508F1BC3309E00
Validity
Not Before: Nov 28 22:10:00 2024 GMT
Not After : Nov 27 22:15:00 2025 GMT
Subject: CN=D31BE21E522D5C053F7B9DB34BACFE3D22901587
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:05:94:14:b9:19:03:07:95:d4:74:c2:88:d9:
df:68:7b:3d:9f:20:02:5b:d4:8c:98:6b:3a:94:7b:
f0:40:fd:59:e4:6e:ab:51:a2:72:58:37:18:32:ab:
d2:28:d4:a8:fc:ce:0d:af:57:6f:6e:d5:c1:00:78:
9a:8d:a5:81:63:4d:23:b0:0f:10:90:31:cd:d2:ea:
4a:e2:f1:f7:f8:0c:b3:14:7f:8a:0a:ed:d6:b9:30:
9f:3a:92:cb:ab:7a:bb:4a:e0:8b:f6:57:e9:f9:73:
36:a9:e5:0f:46:9f:74:59:3f:0a:34:d7:db:9f:d9:
6f:1f:8a:e3:a1:19:f4:08:42:6d:af:6f:b0:13:66:
dc:b9:47:89:0b:4a:bf:2b:11:7d:fe:db:bf:a9:cb:
56:cb:26:a2:f9:f1:af:64:03:5d:ca:24:d2:cb:80:
d3:18:d7:bb:a0:fa:c0:5d:4c:c7:c9:ea:e4:35:e2:
70:c3:ad:90:88:9e:0f:8a:f7:7c:20:06:44:73:96:
21:2d:e0:e4:7a:b1:2f:e7:2a:b0:85:95:99:98:b0:
39:29:31:43:c7:e1:51:ad:9c:13:1a:e8:d3:6d:9f:
94:9d:d3:22:03:1a:ba:86:86:e5:43:7a:be:64:af:
ec:b2:09:7d:73:70:c3:3a:51:24:5c:48:04:4d:ef:
21:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:1B:E2:1E:52:2D:5C:05:3F:7B:9D:B3:4B:AC:FE:3D:22:90:15:87
X509v3 Authority Key Identifier:
keyid:FD:07:AF:BC:C3:FF:B6:25:EE:A6:74:F9:38:50:8F:1B:C3:30:9E:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/FDC04E185702D3C0A5B877618487C0BC2BC2FDE4131C57806A2BB3439C7DE55E/0/FD07AFBCC3FFB625EEA674F938508F1BC3309E00.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FD07AFBCC3FFB625EEA674F938508F1BC3309E00.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC04E185702D3C0A5B877618487C0BC2BC2FDE4131C57806A2BB3439C7DE55E/0/34352e3137302e32392e302f32342d3234203d3e20323637373532.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.170.29.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:5f:a6:12:f5:05:ea:01:5f:27:83:cc:47:37:27:1e:a9:80:
fc:d3:92:12:1a:ef:96:88:a8:50:9b:25:37:0e:bd:39:8a:76:
95:29:e8:f3:0d:f9:11:ec:1c:98:30:a9:e6:c9:3b:0a:92:71:
7d:e7:e0:a8:97:4c:ab:c0:4a:f4:ba:d2:f6:b1:77:99:9e:dc:
c0:cf:4f:d3:8b:e6:58:d7:92:d9:eb:cd:7a:69:84:62:d4:0e:
cb:71:42:6d:24:2d:e7:90:d4:d1:88:d4:e2:a7:67:41:6a:23:
0f:24:55:5f:4f:be:7e:1a:2e:9b:8b:50:f0:46:cb:8c:0a:f5:
29:6c:ec:95:ed:f8:cc:57:97:73:61:56:82:63:79:3c:36:d6:
ee:3f:fe:40:b2:f2:eb:cf:a3:8d:7c:1b:9c:56:b6:a9:c7:43:
1d:13:aa:08:99:4c:ae:bf:d4:52:f2:46:18:8d:b8:04:41:07:
a2:c3:2b:f0:87:0d:8d:7d:3f:d6:72:7f:d4:db:86:36:22:97:
c0:75:06:75:34:d0:e8:7c:96:08:c6:f0:60:13:44:41:5b:0a:
b3:a7:78:7c:1a:21:b4:2c:41:6f:09:0f:80:e7:d4:6a:46:8b:
cf:af:2d:8e:92:c1:3c:ae:40:39:68:f0:a9:e6:2e:f7:dd:2f:
1c:ff:57:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:23:19 2025 by rpki-client