Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1AB3C11BF40253F9055107CF2AFC1F49E577BDB491CFD7B8A48F802FC5883B5D/0/34352e3137332e302e302f32322d3234203d3e203631343531.roa
File: 34352e3137332e302e302f32322d3234203d3e203631343531.roa (raw, json)
Hash identifier: D9vlnWmJr5EJmeD4rrPKti+o8KN+16OA58P6MUdpjyA=
Subject key identifier: 54:13:46:46:79:C8:AE:36:0E:1F:F8:E9:7E:07:99:57:73:46:ED:52
Certificate issuer: /CN=2D420DA52C4FED64C64081F978E8485CD8161A81
Certificate serial: 1A569306C47462E7A60BAAE1CBC880832E9F02C0
Authority key identifier: 2D:42:0D:A5:2C:4F:ED:64:C6:40:81:F9:78:E8:48:5C:D8:16:1A:81
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D420DA52C4FED64C64081F978E8485CD8161A81.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1AB3C11BF40253F9055107CF2AFC1F49E577BDB491CFD7B8A48F802FC5883B5D/0/34352e3137332e302e302f32322d3234203d3e203631343531.roa
Signing time: Tue 05 Mar 2024 18:21:25 +0000
ROA not before: Tue 05 Mar 2024 18:16:25 +0000
ROA not after: Tue 04 Mar 2025 18:21:25 +0000
asID: 61451
IP address blocks: 45.173.0.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:56:93:06:c4:74:62:e7:a6:0b:aa:e1:cb:c8:80:83:2e:9f:02:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2D420DA52C4FED64C64081F978E8485CD8161A81
Validity
Not Before: Mar 5 18:16:25 2024 GMT
Not After : Mar 4 18:21:25 2025 GMT
Subject: CN=5413464679C8AE360E1FF8E97E0799577346ED52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:98:d1:71:75:80:30:eb:16:20:b6:1f:3f:12:
64:cc:9e:fa:e8:cd:2e:37:a4:6c:dc:91:b4:81:e4:
d6:b6:a8:62:dc:49:09:0d:17:f4:47:36:ee:ae:63:
d5:25:06:4b:7a:9d:ca:c2:87:de:59:d8:ef:f0:1f:
8a:fe:ee:9a:42:a3:70:ca:f8:2c:d7:9d:6b:12:c3:
1d:b6:e6:b7:fc:df:c7:1e:7b:07:61:16:da:c2:5b:
81:65:b6:a4:54:95:85:77:6e:47:eb:52:e5:4c:3f:
0d:ee:26:eb:e3:a9:7a:65:23:c7:07:56:ff:20:1e:
ec:07:c6:0e:20:97:d9:73:3e:87:69:30:9f:19:be:
6c:d7:20:b6:ee:fe:e5:ae:97:2e:90:90:b6:cf:1c:
cf:65:1d:03:d5:96:17:60:e2:93:dd:8a:a2:49:70:
ff:78:f2:f1:8e:33:0c:19:3a:6c:e0:bf:e0:51:69:
ba:5b:44:85:51:ff:21:f9:32:65:76:88:ba:b9:21:
e9:dc:0f:c4:42:54:c0:d6:e0:68:7b:f7:81:94:87:
ce:01:d8:61:e7:d3:d6:91:e5:94:43:33:a4:35:b2:
a4:96:09:4f:eb:8d:c8:d8:12:47:17:6b:aa:5a:ec:
c4:3e:6f:7f:84:4d:46:89:b6:58:06:7f:ea:7e:de:
0f:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:13:46:46:79:C8:AE:36:0E:1F:F8:E9:7E:07:99:57:73:46:ED:52
X509v3 Authority Key Identifier:
keyid:2D:42:0D:A5:2C:4F:ED:64:C6:40:81:F9:78:E8:48:5C:D8:16:1A:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1AB3C11BF40253F9055107CF2AFC1F49E577BDB491CFD7B8A48F802FC5883B5D/0/2D420DA52C4FED64C64081F978E8485CD8161A81.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D420DA52C4FED64C64081F978E8485CD8161A81.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1AB3C11BF40253F9055107CF2AFC1F49E577BDB491CFD7B8A48F802FC5883B5D/0/34352e3137332e302e302f32322d3234203d3e203631343531.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.173.0.0/22
Signature Algorithm: sha256WithRSAEncryption
d1:39:c9:45:ff:93:c1:bd:b7:4c:8b:0b:f5:8c:fd:4f:4f:61:
97:ab:09:14:cd:2c:50:88:56:30:df:71:47:a6:94:e5:20:f7:
86:9b:c1:cb:9e:d2:1a:5e:2b:d1:b7:41:17:13:14:3d:d7:be:
e3:85:e6:e2:7d:e8:78:dd:a6:56:f0:11:98:99:f0:16:2c:40:
90:23:07:07:03:d7:82:6d:e4:23:02:fd:82:da:ca:3b:82:ad:
67:ca:3f:27:0f:bd:30:cd:9e:9c:fe:bc:4a:22:e5:96:30:86:
3e:5a:8d:ae:83:30:9d:ac:79:86:dc:0b:0c:fd:ff:e3:48:63:
e5:2a:0e:de:e9:5e:e6:e7:e4:41:e6:be:8c:d3:f6:b9:63:94:
fd:b7:b5:9a:67:38:b1:14:84:27:14:36:7b:c2:61:53:61:b6:
cd:ec:43:81:66:09:18:e4:cf:91:62:68:80:d2:76:a5:d2:f5:
e0:5a:84:a6:74:a5:da:66:20:e5:60:83:ac:40:86:40:95:8e:
1d:3b:ea:fc:f2:60:73:5b:da:17:7e:0f:d6:ab:0d:29:01:0a:
2e:ab:67:5d:7a:15:02:10:e8:9c:0b:b7:a4:6a:3e:07:ca:2a:
22:d8:35:47:70:0e:7a:05:fe:4b:31:bb:47:b6:fd:82:14:9f:
66:1b:01:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 21:38:45 2025 by rpki-client