Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/54002EB3EC2BBE4384251AB2E4F211EF7DD07E7F3A927E356B79C45938598F64/0/34352e3136392e3134342e302f32322d3234203d3e20323731373935.roa
File: 34352e3136392e3134342e302f32322d3234203d3e20323731373935.roa (raw, json)
Hash identifier: gVHW+Q7dfSEnu7goDBvRVhn8GoXVuIihc73nau+0r0o=
Subject key identifier: 94:13:D6:C7:AA:4B:80:C8:24:35:95:35:3C:50:69:BB:24:F8:79:F6
Certificate issuer: /CN=DD2D25C642478D5D4DCAB0135DBBD87109D394CC
Certificate serial: 544E1FF76FD4B7C10034E5112019DDB81DBCA140
Authority key identifier: DD:2D:25:C6:42:47:8D:5D:4D:CA:B0:13:5D:BB:D8:71:09:D3:94:CC
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DD2D25C642478D5D4DCAB0135DBBD87109D394CC.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/54002EB3EC2BBE4384251AB2E4F211EF7DD07E7F3A927E356B79C45938598F64/0/34352e3136392e3134342e302f32322d3234203d3e20323731373935.roa
Signing time: Wed 01 May 2024 22:15:00 +0000
ROA not before: Wed 01 May 2024 22:10:00 +0000
ROA not after: Wed 30 Apr 2025 22:15:00 +0000
asID: 271795
IP address blocks: 45.169.144.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:4e:1f:f7:6f:d4:b7:c1:00:34:e5:11:20:19:dd:b8:1d:bc:a1:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DD2D25C642478D5D4DCAB0135DBBD87109D394CC
Validity
Not Before: May 1 22:10:00 2024 GMT
Not After : Apr 30 22:15:00 2025 GMT
Subject: CN=9413D6C7AA4B80C8243595353C5069BB24F879F6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e4:1d:60:ab:08:24:6f:bc:6d:08:24:7b:27:
ad:81:37:80:98:d9:d0:96:45:f9:cc:79:a3:09:e8:
f4:ba:3c:67:04:2d:8e:90:9d:ce:2b:b0:2e:b1:9f:
ab:1a:de:94:bd:a3:23:cd:6b:1b:a7:f4:6f:35:97:
db:31:f5:dc:22:07:ac:f4:a2:4c:78:6b:46:92:93:
cd:b1:09:68:fe:02:a4:b0:92:bb:eb:bc:4e:c6:f4:
cf:98:bf:85:f6:b1:6a:68:80:31:ab:52:5e:ab:70:
70:fb:87:3e:13:27:7b:ae:eb:88:be:90:bc:c5:d7:
35:15:09:36:09:9a:42:13:d9:ad:50:04:4a:b2:49:
e1:bf:1e:a0:f1:e1:74:bb:54:41:6c:8a:1f:97:4b:
45:44:6a:32:34:f5:80:ec:06:38:b3:37:01:ee:30:
fe:36:73:7a:78:ad:dd:cb:2b:2e:da:6f:79:ea:55:
4c:60:80:37:55:be:f9:c4:bb:b7:e6:41:ed:3c:cb:
5b:a4:ce:87:b5:3d:6f:a4:e3:45:7a:5f:09:31:3b:
84:48:b0:90:12:c9:a4:27:90:ce:e9:20:d1:7e:3b:
8b:ef:62:dc:b4:3c:3f:02:b4:2b:9b:ab:1c:29:d3:
b4:b6:1b:eb:b7:65:cf:42:6c:bb:5c:f7:e3:86:10:
33:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:13:D6:C7:AA:4B:80:C8:24:35:95:35:3C:50:69:BB:24:F8:79:F6
X509v3 Authority Key Identifier:
keyid:DD:2D:25:C6:42:47:8D:5D:4D:CA:B0:13:5D:BB:D8:71:09:D3:94:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/54002EB3EC2BBE4384251AB2E4F211EF7DD07E7F3A927E356B79C45938598F64/0/DD2D25C642478D5D4DCAB0135DBBD87109D394CC.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DD2D25C642478D5D4DCAB0135DBBD87109D394CC.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/54002EB3EC2BBE4384251AB2E4F211EF7DD07E7F3A927E356B79C45938598F64/0/34352e3136392e3134342e302f32322d3234203d3e20323731373935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.169.144.0/22
Signature Algorithm: sha256WithRSAEncryption
34:62:7e:57:20:57:24:cb:df:3e:9b:fc:0d:15:84:4f:f4:c0:
3f:43:3c:94:fc:05:07:93:f6:e2:1a:2f:97:2a:fe:f7:a6:6a:
b3:d1:c6:68:58:31:89:ff:78:0c:4f:45:84:0d:9a:ca:9a:aa:
da:09:b1:d8:07:1d:53:54:9f:2f:2d:3b:bd:52:5f:2b:be:52:
60:7b:db:c9:d3:88:d8:92:d6:0d:6f:f9:e5:84:cf:0c:4b:a5:
05:87:1f:67:5c:4f:bb:e2:32:8c:1b:13:7a:00:9e:92:dc:53:
4c:67:23:fa:51:9a:9c:7b:e6:26:9d:53:4b:87:58:43:6d:55:
55:55:53:bb:49:10:45:dd:64:b2:39:de:2c:3c:84:5f:7d:21:
57:f3:a4:16:e7:5a:79:7e:e1:5a:87:d1:e8:d2:0d:82:eb:31:
82:f7:05:dc:c8:3c:ec:e2:ce:fb:44:f5:bb:c6:02:c9:e4:24:
48:22:d3:f9:59:07:7b:79:7e:f3:f7:27:0e:1d:03:05:7f:e1:
dd:69:34:40:ea:bb:16:dd:78:b9:c6:41:43:01:6c:9b:64:76:
22:77:25:17:e8:0b:55:86:53:89:11:63:05:28:db:a6:4b:7a:
51:79:5e:06:93:94:42:8e:34:b4:90:f6:b2:6b:b7:77:a2:80:
74:05:f4:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 04:22:57 2025 by rpki-client