Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/843A3AA866138E8A4C9F53BACA9425C2E05F7D6457381AC53270C91C6753715F/0/34352e3137322e3232342e302f32322d3234203d3e20323637383330.roa
File: 34352e3137322e3232342e302f32322d3234203d3e20323637383330.roa (raw, json)
Hash identifier: 0xQbbrjS0P40Ej26EJkAxQLbaPT/4UWW/TsP5CctLlc=
Subject key identifier: D0:B0:74:C5:DB:A3:98:F5:63:48:CE:A2:25:29:76:66:BF:4F:DD:B8
Certificate issuer: /CN=949854C65FB68A162199F9EB159DEF051D92FBE6
Certificate serial: 04EC48CF861378C9F1FB598C18A92325A1C5737E
Authority key identifier: 94:98:54:C6:5F:B6:8A:16:21:99:F9:EB:15:9D:EF:05:1D:92:FB:E6
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/949854C65FB68A162199F9EB159DEF051D92FBE6.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/843A3AA866138E8A4C9F53BACA9425C2E05F7D6457381AC53270C91C6753715F/0/34352e3137322e3232342e302f32322d3234203d3e20323637383330.roa
Signing time: Tue 05 Mar 2024 18:18:11 +0000
ROA not before: Tue 05 Mar 2024 18:13:11 +0000
ROA not after: Tue 04 Mar 2025 18:18:11 +0000
asID: 267830
IP address blocks: 45.172.224.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:ec:48:cf:86:13:78:c9:f1:fb:59:8c:18:a9:23:25:a1:c5:73:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=949854C65FB68A162199F9EB159DEF051D92FBE6
Validity
Not Before: Mar 5 18:13:11 2024 GMT
Not After : Mar 4 18:18:11 2025 GMT
Subject: CN=D0B074C5DBA398F56348CEA225297666BF4FDDB8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:1e:50:03:93:54:a8:66:a6:b5:db:d2:71:a8:
05:ea:80:86:cd:1d:91:b8:3e:a2:b6:7a:13:89:80:
72:33:ec:c2:2b:12:11:3d:56:76:5d:89:4d:a7:8a:
21:27:de:bd:49:3f:5d:10:04:9d:14:84:66:b0:99:
28:f1:8a:e6:cb:d6:28:53:bf:08:cb:30:1f:69:d6:
0f:5c:dc:ab:ec:9f:84:0f:2f:e7:a3:50:cb:22:d1:
17:65:ee:04:aa:d1:ba:f4:6c:d4:21:bc:a2:11:bb:
f0:80:b5:6b:dd:52:9d:da:68:12:b2:dd:e6:8e:0d:
b9:63:02:65:1c:40:f6:85:64:2b:3f:26:22:e3:2c:
9e:25:c1:38:cd:28:ce:5c:2e:1b:ec:06:d8:57:50:
61:16:a8:89:f1:10:4d:81:ba:c4:87:24:d4:f2:56:
6d:26:73:d7:ff:7c:44:7e:9e:d9:f6:c2:e3:2b:b8:
4e:32:66:7d:56:18:3f:14:34:2c:cd:98:b4:79:62:
7f:54:b8:31:f1:d2:ae:54:2d:b1:10:cc:dc:6c:b2:
ac:b1:8e:99:be:a1:0e:97:3c:d0:62:30:01:64:0c:
76:38:1d:04:fd:b3:fe:10:bb:4f:43:ce:34:0d:5d:
8e:ed:dc:17:62:9a:ea:f0:29:ed:58:4f:ae:9f:9f:
82:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:B0:74:C5:DB:A3:98:F5:63:48:CE:A2:25:29:76:66:BF:4F:DD:B8
X509v3 Authority Key Identifier:
keyid:94:98:54:C6:5F:B6:8A:16:21:99:F9:EB:15:9D:EF:05:1D:92:FB:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/843A3AA866138E8A4C9F53BACA9425C2E05F7D6457381AC53270C91C6753715F/0/949854C65FB68A162199F9EB159DEF051D92FBE6.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/949854C65FB68A162199F9EB159DEF051D92FBE6.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/843A3AA866138E8A4C9F53BACA9425C2E05F7D6457381AC53270C91C6753715F/0/34352e3137322e3232342e302f32322d3234203d3e20323637383330.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.172.224.0/22
Signature Algorithm: sha256WithRSAEncryption
58:8d:bf:1d:e7:95:89:a1:0f:7c:fb:57:c1:aa:df:fa:32:fe:
ba:eb:a5:00:06:02:41:51:3d:4e:a9:a7:d6:07:fe:e1:c4:6c:
27:99:0a:31:66:83:0b:09:b9:0c:c5:c6:7a:00:f4:7b:0e:30:
97:36:d8:17:33:0a:a7:9a:53:08:8a:2e:38:c4:3f:b5:45:c1:
ca:a9:71:d7:18:08:9b:09:f2:1c:3a:a9:64:30:0b:4d:7a:64:
12:dd:fd:d1:c4:a0:93:fd:c5:eb:4b:2a:61:5d:27:13:d6:93:
9a:0a:39:b4:c5:76:ec:99:0e:57:27:18:00:a8:51:00:7a:f9:
25:77:aa:5e:83:fc:8c:96:d8:0f:b0:e4:5e:bb:2e:0c:98:c6:
d6:0d:ba:62:4a:6c:80:3e:be:d9:dd:e6:20:b3:72:f3:6d:28:
7e:41:13:e7:75:7a:20:04:d6:68:98:c1:05:4c:d8:79:56:d2:
d2:a6:ca:21:c6:9f:0e:15:62:a1:c7:ec:1f:a6:f3:57:a9:98:
6e:0d:cc:09:5d:2a:8a:ca:b9:78:ce:83:2e:a7:17:51:68:b4:
2f:fb:97:05:2e:5c:59:fe:0b:16:5a:44:77:a6:67:b2:cd:9a:
f5:8e:08:d7:9d:8d:e1:aa:1c:a9:ec:31:ae:98:1c:79:7f:31:
5b:6c:e0:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:30:06 2025 by rpki-client