Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/30CC8E928CEFD03411023C0EDE689D1B7B796364201C2AC9B99E515B83A7F74D/0/34352e3233382e3134362e302f32332d3233203d3e20323636383332.roa
File: 34352e3233382e3134362e302f32332d3233203d3e20323636383332.roa (raw, json)
Hash identifier: L4JhQyX4YIq3gc+wY4DmfYgmQT8sYB+xNcut0LLtygQ=
Subject key identifier: D9:FF:67:01:63:EE:17:54:96:F8:F0:5B:6D:B2:22:23:39:9E:BA:D6
Certificate issuer: /CN=CB51CF25AE68F0C858FEB51FF72D964BE568AA54
Certificate serial: 4437215F2E6A33C24F2ADCE4E0424A824CFD48E2
Authority key identifier: CB:51:CF:25:AE:68:F0:C8:58:FE:B5:1F:F7:2D:96:4B:E5:68:AA:54
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB51CF25AE68F0C858FEB51FF72D964BE568AA54.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/30CC8E928CEFD03411023C0EDE689D1B7B796364201C2AC9B99E515B83A7F74D/0/34352e3233382e3134362e302f32332d3233203d3e20323636383332.roa
Signing time: Fri 24 Jan 2025 17:00:02 +0000
ROA not before: Fri 24 Jan 2025 16:55:02 +0000
ROA not after: Fri 23 Jan 2026 17:00:02 +0000
asID: 266832
IP address blocks: 45.238.146.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:37:21:5f:2e:6a:33:c2:4f:2a:dc:e4:e0:42:4a:82:4c:fd:48:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CB51CF25AE68F0C858FEB51FF72D964BE568AA54
Validity
Not Before: Jan 24 16:55:02 2025 GMT
Not After : Jan 23 17:00:02 2026 GMT
Subject: CN=D9FF670163EE175496F8F05B6DB22223399EBAD6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:0b:73:2b:d6:f4:12:5c:88:e0:5c:ae:2c:16:
cd:a6:07:84:37:fc:b9:f9:18:f3:7a:f8:c9:c5:ab:
fb:da:31:df:5d:87:fc:6f:77:c6:79:5d:d4:1e:a5:
9a:7a:ad:c3:84:32:9e:97:af:d1:b8:59:3f:47:f1:
38:8d:55:d9:61:1b:f1:4e:d2:31:13:9b:46:80:ce:
5f:78:5a:49:b6:2c:1d:e4:c5:2a:0c:9c:ce:8a:24:
49:b4:98:3c:2c:4c:a4:6b:ac:ea:9a:68:d7:a0:0d:
21:6d:8d:38:14:58:5c:58:f8:e7:2c:bf:50:bd:e8:
09:5e:8c:e3:4f:31:2e:cf:ca:e9:32:fb:24:c3:5b:
bd:e8:b7:17:7e:75:a8:9b:e6:8e:22:69:56:28:92:
37:96:c9:00:a3:b9:ef:95:b0:59:c9:3c:d5:db:c9:
2c:ec:25:37:36:d8:c9:05:55:16:a5:01:e8:2c:54:
e3:9a:72:e1:66:0c:3b:f5:74:a4:5c:55:f4:9a:e8:
08:2e:3f:e5:37:fe:58:8f:9d:d3:c4:7f:51:19:c2:
3c:02:06:b4:e4:a8:84:a5:c8:5e:a0:e0:ae:6d:77:
5f:68:5d:31:67:72:e3:d5:2f:63:97:a0:6a:c5:d5:
6a:85:ab:50:ab:ba:4a:d1:0c:55:32:18:77:ab:d6:
3d:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:FF:67:01:63:EE:17:54:96:F8:F0:5B:6D:B2:22:23:39:9E:BA:D6
X509v3 Authority Key Identifier:
keyid:CB:51:CF:25:AE:68:F0:C8:58:FE:B5:1F:F7:2D:96:4B:E5:68:AA:54
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/30CC8E928CEFD03411023C0EDE689D1B7B796364201C2AC9B99E515B83A7F74D/0/CB51CF25AE68F0C858FEB51FF72D964BE568AA54.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB51CF25AE68F0C858FEB51FF72D964BE568AA54.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/30CC8E928CEFD03411023C0EDE689D1B7B796364201C2AC9B99E515B83A7F74D/0/34352e3233382e3134362e302f32332d3233203d3e20323636383332.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.238.146.0/23
Signature Algorithm: sha256WithRSAEncryption
ba:20:d0:b9:c3:a4:95:66:61:e2:cd:21:10:f3:ce:47:79:4e:
fb:86:a9:7e:a7:d1:38:ca:1b:46:36:ca:a5:ca:c9:bc:b0:90:
15:96:70:b8:07:e2:8c:34:ea:d3:90:5e:c6:d5:7f:5b:49:30:
01:7a:31:31:e2:74:2e:b3:14:09:ea:27:da:b9:9b:7a:2f:23:
b1:34:36:1e:15:85:82:26:c6:54:f4:73:3a:e8:77:13:a4:d4:
d3:fb:55:70:91:e9:0a:b4:df:ca:b3:af:97:17:48:23:75:25:
7b:44:1b:89:3f:4f:b8:15:14:b9:82:af:3d:ba:73:0c:41:8c:
67:10:a1:7d:dc:76:06:2a:7d:53:09:8c:ff:36:8e:36:25:56:
c1:c1:14:ec:97:72:ab:25:94:cf:58:6c:51:db:89:28:77:76:
71:d9:bf:59:37:17:c7:92:30:9e:5e:8a:29:32:ce:d8:b8:b0:
f4:fc:43:06:2f:92:b9:fe:fc:d9:71:8a:91:fe:88:4c:47:50:
8b:fc:e3:48:33:cb:bf:4b:32:9f:a5:40:6a:85:ba:c8:10:53:
8a:b1:83:04:12:30:cc:a8:08:13:22:e1:64:00:f7:39:1f:f5:
70:39:44:7b:b3:14:04:73:89:cc:71:15:95:87:04:78:5a:7b:
3f:fb:45:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 02:25:18 2025 by rpki-client