Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/23F08232BF502194E3A2E4011DB483DD7BF48C846574180F4EEB517EA9183F30/0/34352e3233382e31322e302f32342d3234203d3e20323636383337.roa
File: 34352e3233382e31322e302f32342d3234203d3e20323636383337.roa (raw, json)
Hash identifier: ZqjrylmRAMSD4SndX3439GaIBgZVzniOvF2jiqpQMzk=
Subject key identifier: 23:6E:32:B7:94:7B:75:BE:A3:B2:39:99:8D:B5:12:3B:C0:A3:14:4F
Certificate issuer: /CN=3A2C3DE39DEDBA5225EA7FEBC28933120AB9361B
Certificate serial: 2F11DB01161A552114E49AD3AB39FEA103C554DF
Authority key identifier: 3A:2C:3D:E3:9D:ED:BA:52:25:EA:7F:EB:C2:89:33:12:0A:B9:36:1B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A2C3DE39DEDBA5225EA7FEBC28933120AB9361B.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/23F08232BF502194E3A2E4011DB483DD7BF48C846574180F4EEB517EA9183F30/0/34352e3233382e31322e302f32342d3234203d3e20323636383337.roa
Signing time: Wed 21 Aug 2024 21:05:01 +0000
ROA not before: Wed 21 Aug 2024 21:00:01 +0000
ROA not after: Wed 20 Aug 2025 21:05:01 +0000
asID: 266837
IP address blocks: 45.238.12.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:11:db:01:16:1a:55:21:14:e4:9a:d3:ab:39:fe:a1:03:c5:54:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3A2C3DE39DEDBA5225EA7FEBC28933120AB9361B
Validity
Not Before: Aug 21 21:00:01 2024 GMT
Not After : Aug 20 21:05:01 2025 GMT
Subject: CN=236E32B7947B75BEA3B239998DB5123BC0A3144F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:2b:ed:36:48:d5:66:8c:8d:7c:08:8a:14:af:
8d:79:9c:34:ac:6f:6d:2c:64:e3:60:ea:cb:21:8a:
e7:11:99:b2:17:6a:4b:10:6a:fb:64:d0:b5:cf:74:
58:7a:ed:68:43:60:77:25:61:9f:2b:6d:bb:32:1b:
d3:a3:e5:e2:1d:a6:03:6c:53:1c:81:ae:03:da:51:
d4:c2:76:5d:06:c0:44:31:b9:90:95:9d:ad:12:13:
e4:9b:be:0c:47:66:ef:b9:6f:f0:91:fa:de:eb:4e:
f3:9a:d0:b4:73:0e:14:21:61:83:38:7c:0e:6e:ae:
93:ee:30:db:90:f8:9f:ef:03:a4:7c:e8:ad:ed:ae:
83:81:3f:c1:0d:05:71:59:12:14:92:86:87:a4:31:
1e:36:18:ef:67:9d:b4:d2:ef:da:2c:86:2e:b5:28:
ba:9b:4f:f7:57:ef:0f:34:df:08:8e:4f:8a:3d:fb:
7b:9d:ab:0c:86:7e:02:07:f9:8d:8e:1f:36:ee:95:
c6:de:53:33:58:dd:ad:39:d0:b9:41:f9:69:e7:a0:
b4:d3:fd:c4:24:4a:94:d6:95:5b:ba:db:18:4a:f7:
9d:12:37:28:f7:bb:06:5a:a3:9b:27:3c:c0:c7:75:
76:b3:50:fc:21:24:1b:2a:b4:ee:93:09:33:49:4c:
7f:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:6E:32:B7:94:7B:75:BE:A3:B2:39:99:8D:B5:12:3B:C0:A3:14:4F
X509v3 Authority Key Identifier:
keyid:3A:2C:3D:E3:9D:ED:BA:52:25:EA:7F:EB:C2:89:33:12:0A:B9:36:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/23F08232BF502194E3A2E4011DB483DD7BF48C846574180F4EEB517EA9183F30/0/3A2C3DE39DEDBA5225EA7FEBC28933120AB9361B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A2C3DE39DEDBA5225EA7FEBC28933120AB9361B.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/23F08232BF502194E3A2E4011DB483DD7BF48C846574180F4EEB517EA9183F30/0/34352e3233382e31322e302f32342d3234203d3e20323636383337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.238.12.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:59:80:66:23:cb:2e:f9:ca:65:4f:a2:ca:fe:04:e6:ff:d3:
48:33:cf:2e:ea:cc:9d:22:a5:36:08:b8:96:82:99:83:81:ff:
b1:fd:7e:fa:b6:1f:8a:2f:4a:b3:fe:9a:74:c1:0a:6c:95:92:
08:d2:3b:a5:dc:f1:0d:b4:14:96:bf:15:e2:60:a6:37:88:17:
31:f7:14:fc:e3:bd:66:16:35:5f:ec:54:02:15:98:ea:e7:58:
ae:53:5a:2a:78:e0:e5:b3:3c:07:22:a4:e1:05:70:b8:bf:35:
d2:63:b8:43:09:0e:87:67:5d:c3:bc:9f:28:d5:d5:ae:cf:58:
bd:77:50:35:c6:0a:7d:5d:c8:98:ca:3f:aa:93:fe:01:a8:6c:
60:79:50:d6:99:6a:a4:67:c4:0b:cd:78:9f:5c:c5:19:a8:c1:
23:b7:40:e6:ab:b0:26:1a:ce:84:a3:70:ff:5c:9e:79:45:0d:
d7:11:63:38:84:17:e3:e3:46:4b:94:a5:c6:ce:e0:7f:a2:f6:
ba:46:e4:2e:3f:ae:a8:67:20:81:bc:b2:3e:ca:e0:89:76:24:
4c:1e:e2:e9:ea:c5:e6:5b:d5:54:25:52:7b:65:24:39:3e:55:
b8:5d:c6:4c:ff:14:83:35:0a:10:ec:19:62:a7:ab:f5:44:d4:
25:cb:8d:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:27:53 2025 by rpki-client