Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4AFE5819E71CB8C00B3869A1C438E049A37CD331BABA10B57EB27E4F2B93F449/0/34352e3138352e31362e302f32322d3232203d3e20323733303339.roa
File: 34352e3138352e31362e302f32322d3232203d3e20323733303339.roa (raw, json)
Hash identifier: OAPNaFOFV85ReC8kn3yiqX7TVZzik+RcI6GbhAZ/kRE=
Subject key identifier: 8B:8D:32:75:25:7D:D9:FD:10:C3:E9:88:02:92:22:EE:88:17:0A:C1
Certificate issuer: /CN=F31886AD8E83200541E6D67B21D86C3BF4D2DA60
Certificate serial: 14FA375F2BA1FFA2A868F8E6B24F4BFAEF21E67D
Authority key identifier: F3:18:86:AD:8E:83:20:05:41:E6:D6:7B:21:D8:6C:3B:F4:D2:DA:60
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F31886AD8E83200541E6D67B21D86C3BF4D2DA60.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4AFE5819E71CB8C00B3869A1C438E049A37CD331BABA10B57EB27E4F2B93F449/0/34352e3138352e31362e302f32322d3232203d3e20323733303339.roa
Signing time: Tue 05 Mar 2024 17:58:30 +0000
ROA not before: Tue 05 Mar 2024 17:53:30 +0000
ROA not after: Tue 04 Mar 2025 17:58:30 +0000
asID: 273039
IP address blocks: 45.185.16.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:fa:37:5f:2b:a1:ff:a2:a8:68:f8:e6:b2:4f:4b:fa:ef:21:e6:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F31886AD8E83200541E6D67B21D86C3BF4D2DA60
Validity
Not Before: Mar 5 17:53:30 2024 GMT
Not After : Mar 4 17:58:30 2025 GMT
Subject: CN=8B8D3275257DD9FD10C3E988029222EE88170AC1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:fb:d2:17:bc:dd:d8:77:70:8f:14:db:df:fd:
d2:0f:b3:ec:ea:34:8f:64:b5:2e:2d:43:73:bb:51:
d3:f7:77:f7:0a:e8:9d:a5:7f:96:fe:f4:9e:d0:35:
44:a6:0c:3c:06:b6:dd:80:0e:49:d4:57:4f:fa:b5:
07:2b:0e:65:da:6d:97:70:ea:63:5b:90:d7:71:b8:
4d:42:0a:8f:a8:b3:bd:36:24:81:e1:c7:3f:68:01:
e3:78:7f:8b:11:9e:30:11:98:3a:82:32:e5:b7:71:
85:e5:d6:55:a4:85:7a:e9:84:95:38:3c:30:aa:10:
21:8a:0a:8f:5b:76:f0:03:54:11:8e:8e:49:27:ff:
ba:ae:3c:66:27:f3:09:67:91:cc:a7:a8:d8:08:ec:
70:d8:c4:24:60:54:41:ce:d3:ef:8d:29:3e:7f:d0:
c4:6a:46:ca:98:b8:59:e1:78:01:18:d5:78:f9:ff:
51:6a:de:05:f1:d8:43:7e:57:2a:c1:f2:93:77:71:
6a:c1:d9:b9:2c:ae:a2:36:b1:0f:3e:07:d5:26:3f:
eb:72:e4:bf:17:e8:ce:28:c5:39:f3:de:fb:f5:77:
31:01:16:8f:8e:6c:74:67:9b:f5:bc:63:41:0a:2a:
af:fe:32:ef:b6:d1:45:55:d6:2b:bb:b2:ca:ad:22:
d2:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:8D:32:75:25:7D:D9:FD:10:C3:E9:88:02:92:22:EE:88:17:0A:C1
X509v3 Authority Key Identifier:
keyid:F3:18:86:AD:8E:83:20:05:41:E6:D6:7B:21:D8:6C:3B:F4:D2:DA:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/4AFE5819E71CB8C00B3869A1C438E049A37CD331BABA10B57EB27E4F2B93F449/0/F31886AD8E83200541E6D67B21D86C3BF4D2DA60.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F31886AD8E83200541E6D67B21D86C3BF4D2DA60.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4AFE5819E71CB8C00B3869A1C438E049A37CD331BABA10B57EB27E4F2B93F449/0/34352e3138352e31362e302f32322d3232203d3e20323733303339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.185.16.0/22
Signature Algorithm: sha256WithRSAEncryption
27:a4:24:42:ce:7e:39:6e:0b:06:ca:16:77:34:40:16:76:ca:
63:96:18:fd:28:72:97:d3:a8:d4:02:58:1c:b6:04:95:45:c3:
a7:b9:79:6e:f9:7c:e0:9f:7b:71:41:bb:fc:64:5e:83:65:65:
81:b6:ad:aa:a1:9f:b3:a0:5a:c4:55:da:98:12:02:61:7a:05:
60:11:7d:47:87:d8:9d:2d:11:ef:37:ac:94:1f:a2:3e:aa:4d:
57:8e:b7:49:63:ee:23:d3:a2:2a:43:99:c1:1d:fa:32:dd:d4:
fd:ee:52:da:8a:11:73:c6:a8:93:84:49:0e:50:3a:cc:f0:b7:
b0:28:c7:b7:01:c7:71:7a:db:7b:43:2d:05:09:f9:ab:10:1b:
1e:b2:02:40:90:0b:9b:af:12:45:35:4a:dc:77:9b:c2:3f:53:
03:c3:0b:7b:c3:66:dc:c6:d6:0a:95:03:f1:69:d6:0a:f4:89:
9b:ee:3f:ad:77:22:05:e4:aa:38:e4:a4:8f:f8:7a:82:0f:69:
6d:41:5f:89:17:00:42:60:59:96:25:ed:f1:90:cb:0b:31:82:
03:a4:8c:b8:38:cd:7b:9d:66:63:fd:b7:88:be:03:97:83:df:
3d:5b:21:78:df:05:a9:00:91:48:92:93:df:26:73:7b:eb:cb:
39:06:1f:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 00:05:02 2025 by rpki-client