Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/58987EAFB0C2B7C4CEE1389DF7A75BA8E5134C60DBB53093024E2471BDA66276/0/34352e3232352e3133322e302f32342d3234203d3e20323636363535.roa
File: 34352e3232352e3133322e302f32342d3234203d3e20323636363535.roa (raw, json)
Hash identifier: vojAqR7GNhtAn4GRPQNP0Hh8I9ReGiq7MdOn/aURNKc=
Subject key identifier: 32:82:D2:9F:FE:97:FE:35:BC:A7:5A:22:59:81:52:DA:A7:CB:A9:77
Certificate issuer: /CN=97D1E81CAFD7CF1F5FEE08285EA1177A46AB17CB
Certificate serial: 174C212BF64BA782878A7244C2E0A95CC5299431
Authority key identifier: 97:D1:E8:1C:AF:D7:CF:1F:5F:EE:08:28:5E:A1:17:7A:46:AB:17:CB
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/97D1E81CAFD7CF1F5FEE08285EA1177A46AB17CB.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/58987EAFB0C2B7C4CEE1389DF7A75BA8E5134C60DBB53093024E2471BDA66276/0/34352e3232352e3133322e302f32342d3234203d3e20323636363535.roa
Signing time: Tue 05 Mar 2024 18:00:32 +0000
ROA not before: Tue 05 Mar 2024 17:55:32 +0000
ROA not after: Tue 04 Mar 2025 18:00:32 +0000
asID: 266655
IP address blocks: 45.225.132.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:4c:21:2b:f6:4b:a7:82:87:8a:72:44:c2:e0:a9:5c:c5:29:94:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97D1E81CAFD7CF1F5FEE08285EA1177A46AB17CB
Validity
Not Before: Mar 5 17:55:32 2024 GMT
Not After : Mar 4 18:00:32 2025 GMT
Subject: CN=3282D29FFE97FE35BCA75A22598152DAA7CBA977
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:fb:fd:db:06:91:75:58:a7:91:6e:7e:d3:67:
8a:cc:a7:b9:2e:81:87:47:eb:99:14:54:48:32:1d:
2e:4c:4d:11:c4:00:aa:8e:66:2a:21:fa:b8:43:46:
ba:87:45:1b:24:cc:5f:1a:24:ae:c0:8c:e3:dd:39:
e6:99:40:f4:11:7f:05:00:16:b6:ee:a3:bb:3d:8c:
17:b8:50:78:92:2f:cf:ab:29:c3:fc:fc:ee:8f:75:
a9:f4:57:55:41:03:e8:84:00:6f:9a:48:e4:b6:7a:
0d:00:61:fc:7a:67:91:84:87:b6:c2:4a:f2:0a:82:
8e:58:84:0b:bf:81:41:68:a3:87:b5:a3:c1:d3:96:
d3:e4:03:e4:4e:0d:8a:c4:e1:19:22:1f:d5:b5:99:
0a:c9:12:ab:04:8d:d0:2f:d4:d1:73:13:1d:66:50:
cf:f7:b4:a4:b7:20:d5:bf:1d:89:f9:a2:cd:ba:56:
ac:d6:5c:55:ab:59:2d:47:a5:17:b3:a7:60:9a:c2:
7d:db:20:f0:4d:93:ec:04:43:fa:57:32:88:f1:81:
e9:8b:e2:57:a3:81:7b:e5:2b:67:b7:fd:db:ee:da:
d1:14:c8:ba:5d:2c:b9:bc:ec:5b:9e:05:c6:ab:39:
1d:a8:db:c4:13:cb:e8:af:83:c8:e5:6b:df:07:51:
82:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:82:D2:9F:FE:97:FE:35:BC:A7:5A:22:59:81:52:DA:A7:CB:A9:77
X509v3 Authority Key Identifier:
keyid:97:D1:E8:1C:AF:D7:CF:1F:5F:EE:08:28:5E:A1:17:7A:46:AB:17:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/58987EAFB0C2B7C4CEE1389DF7A75BA8E5134C60DBB53093024E2471BDA66276/0/97D1E81CAFD7CF1F5FEE08285EA1177A46AB17CB.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/97D1E81CAFD7CF1F5FEE08285EA1177A46AB17CB.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/58987EAFB0C2B7C4CEE1389DF7A75BA8E5134C60DBB53093024E2471BDA66276/0/34352e3232352e3133322e302f32342d3234203d3e20323636363535.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.225.132.0/24
Signature Algorithm: sha256WithRSAEncryption
95:38:ed:5f:19:1c:1a:34:75:07:2e:44:7a:a4:c4:76:67:d2:
1d:b3:6b:36:bf:f9:3e:7d:8d:cf:1c:48:9d:db:cd:20:9a:32:
e4:b2:3c:d3:d6:79:c3:89:31:52:47:30:56:af:28:63:a8:c6:
07:c4:60:05:60:5c:ba:25:47:a5:de:92:1e:ac:9e:0d:16:b5:
7d:a3:bb:b6:a3:c7:a7:c4:de:a5:67:62:1c:e4:e7:73:0a:69:
d7:ba:fe:83:5d:bc:e8:69:89:10:af:3e:5c:87:46:2c:31:16:
10:a7:b4:e0:5e:6d:ec:a0:da:b2:93:4b:a8:3c:3c:52:ab:24:
87:ef:94:50:e8:78:b7:25:16:9d:cf:08:83:d5:92:31:ee:cd:
0b:39:3f:11:d5:df:b5:02:14:ac:d5:6b:e5:1b:03:b0:ef:d8:
d6:28:51:ce:cd:7f:f6:4e:91:36:53:c6:ae:9d:4a:82:7d:5b:
f4:96:d1:15:9d:51:48:e7:a8:c3:77:c2:67:07:64:bd:5b:43:
b9:ac:21:77:70:df:84:ff:bf:fb:90:55:f9:61:87:67:8e:6f:
47:cd:eb:a5:81:fe:c4:82:40:11:32:ec:98:d7:f5:39:f9:dc:
0b:29:b2:5c:b3:89:18:b7:94:f9:f3:f9:fe:37:43:02:ab:0d:
82:a3:95:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 08:43:38 2025 by rpki-client