Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/432DC8C67B653D26A04A97340B984E283B51B64882644561B47515706F499970/0/34352e36352e3138382e302f32322d3234203d3e20323636383533.roa
File: 34352e36352e3138382e302f32322d3234203d3e20323636383533.roa (raw, json)
Hash identifier: YPo4kkcDj1vqMZa0Ao7SK47jpjDE5Ma3f91+xlbG3GM=
Subject key identifier: C8:FF:64:B4:21:82:87:7D:FD:F1:3C:25:77:3C:03:CB:B6:87:FA:0B
Certificate issuer: /CN=AB80663EBC1BB544C55B4CE00C58BC038F2BBB6B
Certificate serial: 5AFC6B39FE2741421CD3D02AB6DAE8AF5A449620
Authority key identifier: AB:80:66:3E:BC:1B:B5:44:C5:5B:4C:E0:0C:58:BC:03:8F:2B:BB:6B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AB80663EBC1BB544C55B4CE00C58BC038F2BBB6B.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/432DC8C67B653D26A04A97340B984E283B51B64882644561B47515706F499970/0/34352e36352e3138382e302f32322d3234203d3e20323636383533.roa
Signing time: Tue 05 Mar 2024 18:11:37 +0000
ROA not before: Tue 05 Mar 2024 18:06:37 +0000
ROA not after: Tue 04 Mar 2025 18:11:37 +0000
asID: 266853
IP address blocks: 45.65.188.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:fc:6b:39:fe:27:41:42:1c:d3:d0:2a:b6:da:e8:af:5a:44:96:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AB80663EBC1BB544C55B4CE00C58BC038F2BBB6B
Validity
Not Before: Mar 5 18:06:37 2024 GMT
Not After : Mar 4 18:11:37 2025 GMT
Subject: CN=C8FF64B42182877DFDF13C25773C03CBB687FA0B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:96:cb:9c:3b:d2:82:fa:21:55:ca:f1:d1:c3:
83:4f:a4:d2:19:e4:00:70:4e:5a:c7:af:d7:91:56:
21:c6:71:59:6a:69:47:a9:bf:ee:80:98:d9:c4:e4:
e5:15:1b:41:64:39:b2:15:25:f2:f5:3d:33:69:f5:
4f:2e:5e:dd:a7:0d:f6:3a:ac:1d:a3:a5:b3:02:3c:
57:af:bd:4e:00:e5:c2:88:82:77:b9:4a:ed:d4:11:
16:77:f0:30:63:35:f3:30:1f:e1:a7:23:84:27:71:
42:ff:ca:0b:36:5a:a2:25:fd:95:2e:6c:4c:67:4d:
0c:ab:91:0f:53:d1:5a:c5:73:27:f0:31:14:f1:dd:
18:24:f9:7b:3a:86:5e:98:18:1f:f5:8c:54:c5:21:
43:5f:b2:31:69:48:da:11:77:64:83:9b:60:e5:4e:
b7:d2:34:02:4f:18:19:c4:3a:c1:a7:c4:85:c9:58:
b6:6b:dc:b2:a6:20:49:7f:1b:2c:95:03:2e:b0:3b:
d8:a6:8c:7f:42:eb:61:69:63:dc:05:9a:18:11:96:
47:bd:63:ff:4a:dc:13:94:0f:d1:ab:7d:7e:21:5f:
39:31:5e:3c:18:fb:06:49:ad:23:16:ed:d9:2b:9f:
2a:bc:e0:b9:3d:d4:af:f7:bd:11:53:b6:11:08:ee:
1b:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:FF:64:B4:21:82:87:7D:FD:F1:3C:25:77:3C:03:CB:B6:87:FA:0B
X509v3 Authority Key Identifier:
keyid:AB:80:66:3E:BC:1B:B5:44:C5:5B:4C:E0:0C:58:BC:03:8F:2B:BB:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/432DC8C67B653D26A04A97340B984E283B51B64882644561B47515706F499970/0/AB80663EBC1BB544C55B4CE00C58BC038F2BBB6B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AB80663EBC1BB544C55B4CE00C58BC038F2BBB6B.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/432DC8C67B653D26A04A97340B984E283B51B64882644561B47515706F499970/0/34352e36352e3138382e302f32322d3234203d3e20323636383533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.65.188.0/22
Signature Algorithm: sha256WithRSAEncryption
ab:7e:09:65:11:55:cb:77:ed:30:56:43:ae:96:d2:fb:f2:08:
b1:29:65:4c:a8:32:73:a7:7f:9c:b9:8b:a3:fd:83:b0:ae:b0:
ed:11:bc:95:02:6b:d6:91:cd:20:7d:d4:3f:8c:b6:2b:54:3b:
b8:00:5c:b3:6b:2a:38:e4:94:bd:33:ca:23:ae:06:ef:b6:bd:
e5:31:6c:64:14:1d:9b:67:87:13:e0:a8:51:e1:d5:93:e3:d5:
a8:5e:97:67:ff:92:a9:d0:04:3d:78:b1:92:f6:29:6f:ae:31:
2a:a0:0b:b0:69:84:40:b6:d1:0f:49:62:f9:86:86:75:ec:76:
98:19:94:30:a3:10:52:f4:91:5e:65:53:ca:e9:df:1b:9c:f8:
91:06:8f:33:2a:5d:41:2c:c5:63:3b:e3:8e:9f:7e:79:65:56:
06:97:6c:6c:80:16:23:19:a3:2b:11:14:8b:00:57:3d:5c:e6:
44:5d:a4:83:f7:ba:4c:2b:27:9d:9b:73:f3:4b:c5:50:b9:1b:
4f:91:c2:fb:96:61:2c:01:a8:ea:b1:99:08:ad:49:a1:a2:a4:
4b:38:09:49:b4:97:84:59:4f:e0:c2:de:b3:af:b9:7b:e9:5e:
9a:e0:e1:45:1c:78:e0:7c:cf:0b:ed:7a:c5:66:39:36:f9:04:
de:71:1c:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 00:26:15 2025 by rpki-client