Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/86FC589D7E403528717A3E02F14EB7F36D3F41553527658FEBACA0AF860CA720/0/34352e3137352e3233362e302f32322d3234203d3e20323635353837.roa
File: 34352e3137352e3233362e302f32322d3234203d3e20323635353837.roa (raw, json)
Hash identifier: vajbyWMznsWG0792qb8ruMgIlZFjV9IZeW3h4KRse2g=
Subject key identifier: 84:E8:BE:4C:16:C4:B6:7F:84:67:E1:25:F9:92:55:05:37:F2:23:84
Certificate issuer: /CN=84B85E7C8440D8BCDD3888C76D6D297CB010C64E
Certificate serial: 181C2D9430F9E34FCF426E8F02B00D2DDBD86E25
Authority key identifier: 84:B8:5E:7C:84:40:D8:BC:DD:38:88:C7:6D:6D:29:7C:B0:10:C6:4E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/84B85E7C8440D8BCDD3888C76D6D297CB010C64E.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/86FC589D7E403528717A3E02F14EB7F36D3F41553527658FEBACA0AF860CA720/0/34352e3137352e3233362e302f32322d3234203d3e20323635353837.roa
Signing time: Tue 05 Mar 2024 17:58:45 +0000
ROA not before: Tue 05 Mar 2024 17:53:45 +0000
ROA not after: Tue 04 Mar 2025 17:58:45 +0000
asID: 265587
IP address blocks: 45.175.236.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:1c:2d:94:30:f9:e3:4f:cf:42:6e:8f:02:b0:0d:2d:db:d8:6e:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84B85E7C8440D8BCDD3888C76D6D297CB010C64E
Validity
Not Before: Mar 5 17:53:45 2024 GMT
Not After : Mar 4 17:58:45 2025 GMT
Subject: CN=84E8BE4C16C4B67F8467E125F992550537F22384
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:58:44:ff:e4:2f:1f:5a:4d:48:98:c6:68:fc:
21:10:77:ed:a8:1f:c8:1c:2d:69:eb:27:f8:4b:76:
90:36:67:8f:06:e9:8c:c7:2e:63:9b:8f:36:ac:c2:
9c:cd:7e:f8:7b:d1:37:57:e2:d2:9b:e7:c9:19:3c:
08:c0:02:a7:81:3c:f3:d2:89:e3:81:87:fc:83:28:
0e:6e:e3:e1:45:c1:22:47:8d:da:d5:13:e3:dc:76:
d0:46:90:21:dc:64:4c:ce:43:8b:ae:a6:be:f2:fd:
06:db:c0:e5:96:07:e1:cc:2b:0f:2f:e9:d2:a0:9f:
e1:fd:d2:26:e4:cc:c5:7c:d3:b6:c7:2a:3a:44:7c:
82:5b:b9:4a:45:98:ec:8b:25:27:f8:64:47:7c:48:
59:c0:15:73:47:09:f3:8d:5d:26:d7:67:ae:55:d4:
99:3c:d7:17:b1:d3:1e:7f:da:72:dd:c1:83:51:dd:
1a:69:f7:2f:fc:82:48:88:15:18:c3:94:ab:ab:38:
1f:4c:b3:3b:e5:c4:6e:eb:b3:64:db:23:2a:54:47:
a3:48:fe:73:01:7d:7d:67:56:c6:49:2f:d5:06:d1:
b4:fe:8a:82:67:9a:39:fa:dd:f9:6d:4b:75:c5:10:
48:66:0d:9f:5c:e8:09:1e:0f:65:11:23:f2:89:64:
a5:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:E8:BE:4C:16:C4:B6:7F:84:67:E1:25:F9:92:55:05:37:F2:23:84
X509v3 Authority Key Identifier:
keyid:84:B8:5E:7C:84:40:D8:BC:DD:38:88:C7:6D:6D:29:7C:B0:10:C6:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/86FC589D7E403528717A3E02F14EB7F36D3F41553527658FEBACA0AF860CA720/0/84B85E7C8440D8BCDD3888C76D6D297CB010C64E.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/84B85E7C8440D8BCDD3888C76D6D297CB010C64E.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/86FC589D7E403528717A3E02F14EB7F36D3F41553527658FEBACA0AF860CA720/0/34352e3137352e3233362e302f32322d3234203d3e20323635353837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.175.236.0/22
Signature Algorithm: sha256WithRSAEncryption
2e:87:87:a7:27:b9:dc:dc:ca:52:61:a3:3e:7e:b3:d4:de:81:
09:5a:52:ca:17:8d:67:bf:c9:5d:c1:ee:de:8b:f0:3d:7a:80:
a8:f9:03:ba:62:68:29:69:26:da:87:37:52:32:44:68:9b:d5:
5e:c3:31:d9:02:04:5f:2c:c3:a2:9d:9a:86:28:68:63:a9:bf:
7d:9c:98:f2:93:42:6c:0f:4b:c4:73:7a:ec:0c:7d:ce:57:4e:
ae:52:f5:45:58:81:b0:2a:61:24:4f:79:bc:3a:d2:39:6b:8b:
73:f1:a9:53:54:83:1d:44:7a:fd:0e:16:65:8c:8e:cc:83:12:
75:e6:21:2b:2f:e2:56:20:1f:b4:47:45:49:90:d1:5b:0c:ca:
13:31:d7:84:74:2c:50:91:29:83:66:7d:8d:66:52:40:67:0c:
03:10:70:51:78:91:b1:fa:75:01:26:bd:19:b9:67:0e:93:0f:
c0:76:24:17:04:a3:b9:e4:8f:5a:47:ba:ca:75:cf:ce:f1:4a:
af:d1:77:a2:18:92:98:9f:36:46:ba:eb:ec:d8:b6:f0:da:4a:
0e:36:35:bb:7d:97:ad:09:5a:0e:ff:bf:db:bc:ff:79:1a:2d:
56:3a:19:07:c0:28:c8:90:81:72:c4:22:99:62:40:e7:e3:1b:
14:1b:63:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 22:46:35 2025 by rpki-client