Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/686A87C0260F7870954C01648D3E2973239D033694AA40D98723525F21162D78/0/34352e3233372e3232332e302f32342d3234203d3e20323636383139.roa
File: 34352e3233372e3232332e302f32342d3234203d3e20323636383139.roa (raw, json)
Hash identifier: usrI5sNfp+FhY1lx4raUZGoiEkj+dwqA6ZJO4j7+818=
Subject key identifier: 21:AA:A7:92:40:7B:72:9E:C2:67:E7:B3:9E:5B:7C:5B:E8:0A:1D:0D
Certificate issuer: /CN=AA2338B66632D823F77072125112B5BF1F721769
Certificate serial: 44E1F0606A7DF8AA631E381A8602F4A3ABFD53A4
Authority key identifier: AA:23:38:B6:66:32:D8:23:F7:70:72:12:51:12:B5:BF:1F:72:17:69
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA2338B66632D823F77072125112B5BF1F721769.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/686A87C0260F7870954C01648D3E2973239D033694AA40D98723525F21162D78/0/34352e3233372e3232332e302f32342d3234203d3e20323636383139.roa
Signing time: Tue 05 Mar 2024 18:00:05 +0000
ROA not before: Tue 05 Mar 2024 17:55:05 +0000
ROA not after: Tue 04 Mar 2025 18:00:05 +0000
asID: 266819
IP address blocks: 45.237.223.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:e1:f0:60:6a:7d:f8:aa:63:1e:38:1a:86:02:f4:a3:ab:fd:53:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AA2338B66632D823F77072125112B5BF1F721769
Validity
Not Before: Mar 5 17:55:05 2024 GMT
Not After : Mar 4 18:00:05 2025 GMT
Subject: CN=21AAA792407B729EC267E7B39E5B7C5BE80A1D0D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:09:f3:2e:0a:b6:e9:f0:f0:08:b1:53:f7:ba:
98:b6:a7:1d:b4:d8:95:18:3c:20:8c:b3:ff:e1:44:
5b:78:3e:48:30:71:b9:1f:cc:d7:2c:7e:5c:7b:d9:
a9:b7:45:40:7e:d9:a1:84:18:94:2a:db:f7:d8:ae:
a8:30:5f:e8:25:40:7a:c3:3a:0e:4e:f4:90:60:59:
a8:c7:79:03:f9:3f:24:0e:6f:90:e0:77:77:50:71:
00:4a:60:95:70:6e:0f:e4:c2:8e:09:79:4d:20:3c:
a8:b3:7b:8d:7c:4b:23:33:8b:aa:83:f2:06:66:b2:
4c:8d:b8:57:f4:8d:c6:55:f2:d9:2e:46:a4:fa:1b:
21:00:2f:0a:83:33:10:4c:28:17:c8:52:13:45:3f:
33:8a:93:7b:e5:cc:39:3f:57:83:ff:d1:43:af:11:
03:c4:a8:78:4a:b6:58:5c:9c:b6:dd:88:76:12:8f:
f0:ac:c8:31:54:7a:ec:a4:8d:d9:d3:bb:9f:08:0b:
9c:8d:26:d6:e0:79:46:8a:67:6d:a9:c9:ed:45:78:
e2:b1:c2:56:10:06:37:08:ad:d2:0b:cf:d5:a2:6e:
97:ca:35:4e:f0:be:fc:ca:87:4b:67:e0:d1:0a:65:
a1:7e:1f:1d:47:c8:96:39:52:2b:28:54:2f:e0:f2:
23:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:AA:A7:92:40:7B:72:9E:C2:67:E7:B3:9E:5B:7C:5B:E8:0A:1D:0D
X509v3 Authority Key Identifier:
keyid:AA:23:38:B6:66:32:D8:23:F7:70:72:12:51:12:B5:BF:1F:72:17:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/686A87C0260F7870954C01648D3E2973239D033694AA40D98723525F21162D78/0/AA2338B66632D823F77072125112B5BF1F721769.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA2338B66632D823F77072125112B5BF1F721769.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/686A87C0260F7870954C01648D3E2973239D033694AA40D98723525F21162D78/0/34352e3233372e3232332e302f32342d3234203d3e20323636383139.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.237.223.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:94:08:7a:52:2e:63:66:63:31:5f:74:85:71:6c:53:51:52:
ff:54:cc:19:3b:bf:cb:b6:02:dc:59:10:43:94:6c:f4:4f:81:
34:0f:33:4e:5f:10:7a:ac:d4:01:6d:40:48:4b:c9:06:9c:3f:
b7:0e:53:e3:60:fe:6b:ee:4a:de:6f:b1:38:0b:b7:31:fb:5c:
85:8c:17:6a:73:b7:ad:c5:13:37:66:4a:62:ab:42:92:25:a9:
81:fb:1e:d8:39:ef:b2:95:0b:f7:54:f3:af:ad:a5:70:7c:a4:
18:a2:81:85:da:49:3e:61:85:61:67:84:f7:9f:7b:8a:19:05:
96:54:67:73:d3:04:f3:9f:51:0b:3e:45:b5:ec:ca:8b:08:cd:
09:61:c0:6c:f7:13:5f:a9:a6:96:9b:b4:57:05:79:0a:12:4e:
12:8b:00:a7:45:37:c4:44:df:ad:82:38:91:65:bb:b7:4f:e6:
d4:d8:d1:a6:a7:d4:0c:53:78:69:0a:68:a7:61:86:0c:bc:b5:
59:c7:31:a8:fd:1d:42:81:1d:77:34:50:fe:2e:de:4a:07:d9:
fe:dc:b3:c1:05:95:ba:99:b3:34:a3:4b:a4:69:64:b0:d2:6a:
2d:af:de:7c:0f:5a:8f:b4:16:64:4e:6c:c4:87:5f:db:ed:dc:
9d:88:05:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 20:49:19 2025 by rpki-client