Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AA1FBA1E9A6B012F1422DFCB428DD9FA4D93BBAD25D4989BCB1FD3338FBA5759/0/34352e3136322e3133352e302f32342d3234203d3e20323733383739.roa
File: 34352e3136322e3133352e302f32342d3234203d3e20323733383739.roa (raw, json)
Hash identifier: F6bsnRTCs627fuNyoRTlesCcezkPMMnlWqt9UKcbXIQ=
Subject key identifier: 18:D5:93:15:38:0D:04:7A:43:E2:4E:9B:73:10:49:49:E6:65:73:E6
Certificate issuer: /CN=B4FABCBFF83288B64BE540323B458825C54A4663
Certificate serial: 46439BFF7B3B38F45263D08A1BABEC5F9894A7CB
Authority key identifier: B4:FA:BC:BF:F8:32:88:B6:4B:E5:40:32:3B:45:88:25:C5:4A:46:63
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B4FABCBFF83288B64BE540323B458825C54A4663.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/AA1FBA1E9A6B012F1422DFCB428DD9FA4D93BBAD25D4989BCB1FD3338FBA5759/0/34352e3136322e3133352e302f32342d3234203d3e20323733383739.roa
Signing time: Mon 06 Jan 2025 05:50:00 +0000
ROA not before: Mon 06 Jan 2025 05:45:00 +0000
ROA not after: Mon 05 Jan 2026 05:50:00 +0000
asID: 273879
IP address blocks: 45.162.135.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:43:9b:ff:7b:3b:38:f4:52:63:d0:8a:1b:ab:ec:5f:98:94:a7:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B4FABCBFF83288B64BE540323B458825C54A4663
Validity
Not Before: Jan 6 05:45:00 2025 GMT
Not After : Jan 5 05:50:00 2026 GMT
Subject: CN=18D59315380D047A43E24E9B73104949E66573E6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:2f:13:a6:fa:41:45:66:0d:61:0f:09:1a:21:
3a:24:c2:19:bf:05:53:85:f1:15:bc:4f:e0:f2:76:
75:33:17:97:99:eb:e1:db:05:0b:28:74:56:00:ad:
30:50:6b:f4:02:ca:0e:55:66:4c:00:fc:5c:c1:88:
ec:d9:aa:a9:c5:10:fc:0c:9f:c3:cc:9e:a6:03:ce:
0b:b7:3d:17:16:72:6d:03:84:b0:71:f7:53:89:a5:
91:cc:d3:a8:0e:df:ce:d3:1e:42:60:42:f4:dc:f7:
e4:2e:68:fb:1f:0d:ae:b1:ec:68:88:7a:b2:6c:4d:
3b:58:77:cd:db:12:e9:b0:a4:34:37:93:cb:e0:68:
2b:46:7a:dc:e8:b8:89:b9:da:30:a2:b3:9a:26:c9:
cf:5f:92:41:66:85:03:2d:6b:73:bd:31:48:4d:34:
fa:60:a4:db:54:90:5a:53:5b:75:54:46:bf:0c:25:
19:8e:ed:64:84:ff:2f:cd:b7:85:47:3c:35:54:2b:
fd:bd:cc:38:0e:aa:2c:fb:b5:09:86:63:70:74:3c:
13:da:08:25:8b:88:db:16:96:09:8c:0a:13:4a:8c:
19:1b:f6:bd:e5:08:66:62:8b:7b:1d:bf:cb:b5:c5:
55:25:f0:46:8e:85:21:10:ff:30:73:69:04:2a:85:
c4:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:D5:93:15:38:0D:04:7A:43:E2:4E:9B:73:10:49:49:E6:65:73:E6
X509v3 Authority Key Identifier:
keyid:B4:FA:BC:BF:F8:32:88:B6:4B:E5:40:32:3B:45:88:25:C5:4A:46:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/AA1FBA1E9A6B012F1422DFCB428DD9FA4D93BBAD25D4989BCB1FD3338FBA5759/0/B4FABCBFF83288B64BE540323B458825C54A4663.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B4FABCBFF83288B64BE540323B458825C54A4663.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AA1FBA1E9A6B012F1422DFCB428DD9FA4D93BBAD25D4989BCB1FD3338FBA5759/0/34352e3136322e3133352e302f32342d3234203d3e20323733383739.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.162.135.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:39:78:18:67:ed:72:4a:b2:1f:e7:4a:35:38:29:6d:ab:4b:
5e:51:50:2f:78:17:0d:3a:1a:ab:34:0f:3d:1c:d5:de:80:41:
bc:75:76:78:52:a8:1f:92:fe:e4:8e:73:06:a6:02:3d:16:be:
72:6e:85:f5:e1:d4:1b:bc:f7:5a:cd:b9:43:23:ba:80:c8:1a:
89:fb:05:da:4b:42:de:5c:df:18:2c:44:33:1a:d6:18:ef:aa:
03:04:0c:ae:2d:b9:fe:a3:3e:50:4e:7a:0d:7b:36:16:27:14:
c9:d6:af:99:15:55:39:3c:5a:06:71:6e:e0:3f:9c:90:ed:09:
90:6f:66:04:97:18:82:77:9a:a1:b1:8e:c3:b8:ef:3c:cf:fc:
8e:97:fe:39:fa:62:e5:28:de:76:87:c3:0c:8c:a4:c1:06:69:
42:50:3b:0f:c0:96:e1:0f:32:c4:48:b7:0d:7f:16:6b:42:2a:
73:14:0a:d2:49:f0:c7:37:9f:2c:af:15:84:1f:ef:89:64:a4:
1d:f8:3b:0b:5d:47:14:58:c5:39:02:e9:9a:e3:8a:07:c1:1d:
19:aa:7b:e3:5e:01:2a:ff:68:68:3e:0a:f6:21:0e:3e:15:ec:
c7:fd:4e:8d:67:5f:00:4c:bf:a3:6e:3c:25:e3:58:c3:29:f9:
e2:8f:b9:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:19:24 2025 by rpki-client