Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6418A6DC546DDE05D160CE8944520A5EC7CB2E3F2C4F35E23DB8F1D0FBAE54DA/0/34352e3137372e31362e302f32322d3234203d3e20323637383835.roa
File: 34352e3137372e31362e302f32322d3234203d3e20323637383835.roa (raw, json)
Hash identifier: LiOUubUvyY0ILbVZrGmOPg9eUDpMPcnE1J/p/dTO1Co=
Subject key identifier: 67:D9:17:57:6C:94:91:64:BE:11:99:58:65:09:A2:9A:6E:BD:8F:A5
Certificate issuer: /CN=87E86111F292762220D44761EC4E8B3C4F012F38
Certificate serial: 3912F7A5BC91123257ECCA47905BAE27881EC320
Authority key identifier: 87:E8:61:11:F2:92:76:22:20:D4:47:61:EC:4E:8B:3C:4F:01:2F:38
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/87E86111F292762220D44761EC4E8B3C4F012F38.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/6418A6DC546DDE05D160CE8944520A5EC7CB2E3F2C4F35E23DB8F1D0FBAE54DA/0/34352e3137372e31362e302f32322d3234203d3e20323637383835.roa
Signing time: Tue 05 Mar 2024 18:02:49 +0000
ROA not before: Tue 05 Mar 2024 17:57:49 +0000
ROA not after: Tue 04 Mar 2025 18:02:49 +0000
asID: 267885
IP address blocks: 45.177.16.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:12:f7:a5:bc:91:12:32:57:ec:ca:47:90:5b:ae:27:88:1e:c3:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87E86111F292762220D44761EC4E8B3C4F012F38
Validity
Not Before: Mar 5 17:57:49 2024 GMT
Not After : Mar 4 18:02:49 2025 GMT
Subject: CN=67D917576C949164BE1199586509A29A6EBD8FA5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:4b:d4:8d:9f:8a:68:dc:1c:f1:3d:a0:c7:7a:
50:56:99:2a:5a:11:19:87:c2:be:71:dd:ac:1f:07:
45:c7:8b:03:cb:0e:aa:51:97:d4:0b:5e:80:7a:b7:
ad:77:7d:41:4b:26:20:b5:7d:d8:31:5f:9f:21:35:
49:fd:35:ce:64:8e:4b:d7:8b:2e:68:f2:b0:90:f1:
c3:d3:89:15:a4:10:ee:53:2f:74:d5:cf:84:e8:00:
a6:b7:4a:07:3f:24:6f:ba:37:dd:fc:48:39:de:17:
ca:c2:66:e5:00:7a:93:a8:92:34:93:ff:31:43:02:
f7:67:c0:30:78:89:3b:50:ee:a5:2c:62:00:58:d3:
22:2e:46:a9:75:89:4b:f3:f4:71:df:5b:1a:d6:d0:
2d:c8:4a:99:65:bd:c4:94:bc:c4:d5:1d:ca:6d:92:
70:68:a6:cc:11:b6:b1:18:82:b0:94:11:d0:88:8f:
53:94:b5:e6:e4:79:8b:72:b4:c2:6c:f7:df:77:8d:
2b:a9:84:44:ff:b7:a5:f4:5b:7a:17:c5:97:0e:69:
2b:4b:23:1e:64:ad:cd:94:6d:ee:af:ee:92:1a:32:
30:48:ca:c1:0f:84:cd:6e:66:9d:88:28:67:24:83:
2c:96:70:6e:95:f5:2a:11:25:a2:ce:6f:7e:09:4f:
af:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:D9:17:57:6C:94:91:64:BE:11:99:58:65:09:A2:9A:6E:BD:8F:A5
X509v3 Authority Key Identifier:
keyid:87:E8:61:11:F2:92:76:22:20:D4:47:61:EC:4E:8B:3C:4F:01:2F:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/6418A6DC546DDE05D160CE8944520A5EC7CB2E3F2C4F35E23DB8F1D0FBAE54DA/0/87E86111F292762220D44761EC4E8B3C4F012F38.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/87E86111F292762220D44761EC4E8B3C4F012F38.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6418A6DC546DDE05D160CE8944520A5EC7CB2E3F2C4F35E23DB8F1D0FBAE54DA/0/34352e3137372e31362e302f32322d3234203d3e20323637383835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.177.16.0/22
Signature Algorithm: sha256WithRSAEncryption
a0:ce:82:60:ba:f9:df:b2:f3:03:c9:a5:90:0e:ee:71:f6:64:
62:cf:c6:02:19:f4:3d:ad:f2:cf:78:d7:cf:61:bc:b7:f8:6e:
c3:aa:10:4c:77:1e:d3:fe:b6:75:ac:cf:ef:26:0a:85:2f:b2:
79:fc:bb:d9:20:3a:c8:19:4a:88:1a:d3:b5:4b:fe:f1:04:77:
e8:eb:f4:4e:27:e5:a3:8a:e6:6b:5d:73:81:2d:1b:95:82:cd:
08:47:42:bf:af:8f:85:ac:c6:56:d7:5a:71:3a:1e:9d:35:7e:
a2:fc:b7:f5:6a:52:00:4d:b2:30:60:2d:d2:95:7d:1b:c6:67:
dc:26:72:4c:7f:0b:b4:7b:83:23:75:25:96:d5:9a:49:76:23:
08:ab:de:13:e4:6e:f3:2b:9f:77:37:1e:c2:4d:2d:f2:69:c7:
91:88:a9:0d:9b:73:6f:9b:e0:c3:b6:d1:6e:f2:4b:c6:e7:b7:
1f:3a:b6:f8:1d:5f:02:d8:51:e6:3c:70:02:c2:d1:71:a8:63:
99:c2:82:9a:cb:76:22:32:a6:d9:e2:fb:af:be:09:34:d2:61:
a2:63:df:22:ee:34:c6:8b:dd:b1:19:65:3c:59:97:72:e4:37:
3d:70:3d:79:c7:ba:22:37:dc:85:29:43:22:9c:c1:1a:a8:47:
d8:67:cb:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 00:18:57 2025 by rpki-client