Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/06BAD717C8E73AF657DE82F7866307886E7CAC807F2B4CE4A313CE68646EFF6E/0/34352e3233352e31332e302f32342d3234203d3e20323733393233.roa
File: 34352e3233352e31332e302f32342d3234203d3e20323733393233.roa (raw, json)
Hash identifier: BtKuoZdZIttYBqrNPO63p0UlaKEFsIz0Xu2UK93ghKo=
Subject key identifier: 2D:C5:0D:C6:D5:9F:5B:9B:66:0E:37:0B:DA:38:B8:64:0E:B4:5A:29
Certificate issuer: /CN=CBF31447B564264D0A347F323D8011AEBA5D1613
Certificate serial: 397DF9C15754B6F2D7D79C75AB53A5DF01F19FE9
Authority key identifier: CB:F3:14:47:B5:64:26:4D:0A:34:7F:32:3D:80:11:AE:BA:5D:16:13
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBF31447B564264D0A347F323D8011AEBA5D1613.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/06BAD717C8E73AF657DE82F7866307886E7CAC807F2B4CE4A313CE68646EFF6E/0/34352e3233352e31332e302f32342d3234203d3e20323733393233.roa
Signing time: Mon 06 Jan 2025 18:45:00 +0000
ROA not before: Mon 06 Jan 2025 18:40:00 +0000
ROA not after: Mon 05 Jan 2026 18:45:00 +0000
asID: 273923
IP address blocks: 45.235.13.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:7d:f9:c1:57:54:b6:f2:d7:d7:9c:75:ab:53:a5:df:01:f1:9f:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CBF31447B564264D0A347F323D8011AEBA5D1613
Validity
Not Before: Jan 6 18:40:00 2025 GMT
Not After : Jan 5 18:45:00 2026 GMT
Subject: CN=2DC50DC6D59F5B9B660E370BDA38B8640EB45A29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:8b:5a:08:64:91:83:32:cb:65:53:78:4d:25:
4e:55:3b:a9:e5:e7:78:bf:12:ec:ee:95:af:08:d5:
08:6f:a7:e5:ea:c5:a6:11:35:76:5f:e3:a3:c9:8d:
a3:d5:50:7b:56:08:f3:c2:0a:a7:eb:7d:71:f9:94:
58:7d:e8:15:35:ac:c6:83:60:d7:78:da:e8:5f:c1:
89:bb:9d:7d:a1:a1:19:c7:29:f7:f5:dd:11:dd:3f:
71:02:56:f4:d6:19:e7:7e:44:9d:84:74:05:08:3a:
a5:87:71:eb:fb:52:5b:63:fb:8c:fb:ad:95:66:17:
9b:66:4c:bb:5e:2e:9c:7c:35:9b:0f:23:6c:e1:b3:
50:38:e0:de:6a:ad:1f:39:fa:f6:ba:cb:38:0d:2b:
72:47:c8:61:8b:a7:77:da:b2:c0:64:6b:19:72:57:
31:a4:7a:52:62:08:7a:8d:e5:41:c4:47:03:77:e2:
87:dc:d9:05:12:43:3f:a2:0f:dc:05:80:b1:b2:67:
0f:f6:5d:9c:0d:4d:43:06:64:dc:ae:7f:89:86:52:
13:9f:0e:2d:8b:18:87:51:9c:da:03:c9:99:5a:a2:
9e:8d:69:ff:8d:cc:cd:e0:7d:68:55:29:33:35:29:
d3:d8:64:61:86:55:f1:4e:38:86:c8:3f:e6:66:5c:
eb:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:C5:0D:C6:D5:9F:5B:9B:66:0E:37:0B:DA:38:B8:64:0E:B4:5A:29
X509v3 Authority Key Identifier:
keyid:CB:F3:14:47:B5:64:26:4D:0A:34:7F:32:3D:80:11:AE:BA:5D:16:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/06BAD717C8E73AF657DE82F7866307886E7CAC807F2B4CE4A313CE68646EFF6E/0/CBF31447B564264D0A347F323D8011AEBA5D1613.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBF31447B564264D0A347F323D8011AEBA5D1613.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/06BAD717C8E73AF657DE82F7866307886E7CAC807F2B4CE4A313CE68646EFF6E/0/34352e3233352e31332e302f32342d3234203d3e20323733393233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.235.13.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:84:37:1f:da:2c:7b:24:63:fb:ac:c7:01:79:97:bd:2b:a9:
d8:5d:5e:c0:4e:40:41:39:19:a4:29:fc:b7:78:2b:31:9a:01:
73:61:97:58:35:1a:d6:6e:74:b9:c0:eb:2d:5f:e3:a0:36:7d:
fb:0b:06:b0:f5:d6:7b:69:3d:c7:f4:45:9e:51:2a:80:4b:b5:
87:f0:7d:89:b4:f2:80:43:ed:a3:cf:7c:6b:4b:cc:dd:93:8b:
79:7b:de:85:e2:b8:30:49:ea:f2:6d:78:20:e2:ec:72:87:21:
d5:da:c7:5c:e8:08:47:f9:a0:88:26:28:39:7e:70:56:a9:d7:
05:f2:d1:7c:d4:6a:3f:ed:ad:d2:ff:f3:b1:c3:8d:a3:4e:49:
17:92:0e:da:d6:e5:ad:07:45:36:da:db:25:b8:7c:02:23:4f:
50:73:3e:56:1f:d8:d1:e5:57:2d:24:dc:03:15:2e:98:f2:a4:
c7:00:1f:d6:0c:92:bc:ea:a5:52:4b:33:e0:d0:09:d5:f3:22:
cf:24:71:af:74:d9:5a:44:2b:cf:96:be:45:e5:4e:ec:7e:db:
8d:fd:cf:be:26:8c:ee:48:d1:88:c1:ad:e5:f0:73:de:2f:ed:
c9:dc:2a:2e:0a:7a:73:be:47:63:09:ef:6b:29:63:65:84:cb:
7d:c2:6a:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 00:04:45 2025 by rpki-client