Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B9D1DF45E9A86CDA1CFE95BC5E5796EDEABD214A8B07C94BB9D6628D0656AE11/0/34352e3136322e37362e302f32322d3234203d3e20323632353839.roa
File: 34352e3136322e37362e302f32322d3234203d3e20323632353839.roa (raw, json)
Hash identifier: XoP5c3R2w1EAPH1TDU9tHlBFsBHGt5k/bhrhOPhWZb4=
Subject key identifier: 43:F5:88:AD:CF:7C:0F:94:DA:EE:41:C0:66:A5:2A:51:40:0C:C6:33
Certificate issuer: /CN=02ED3395A01A385371573CF59B1E5D8F2BF6D57E
Certificate serial: 42E8B4F0CF875BFA5198A3CDA9D1584F734ADC53
Authority key identifier: 02:ED:33:95:A0:1A:38:53:71:57:3C:F5:9B:1E:5D:8F:2B:F6:D5:7E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/02ED3395A01A385371573CF59B1E5D8F2BF6D57E.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/B9D1DF45E9A86CDA1CFE95BC5E5796EDEABD214A8B07C94BB9D6628D0656AE11/0/34352e3136322e37362e302f32322d3234203d3e20323632353839.roa
Signing time: Tue 05 Mar 2024 17:57:55 +0000
ROA not before: Tue 05 Mar 2024 17:52:55 +0000
ROA not after: Tue 04 Mar 2025 17:57:55 +0000
asID: 262589
IP address blocks: 45.162.76.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:e8:b4:f0:cf:87:5b:fa:51:98:a3:cd:a9:d1:58:4f:73:4a:dc:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02ED3395A01A385371573CF59B1E5D8F2BF6D57E
Validity
Not Before: Mar 5 17:52:55 2024 GMT
Not After : Mar 4 17:57:55 2025 GMT
Subject: CN=43F588ADCF7C0F94DAEE41C066A52A51400CC633
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b6:69:d8:cd:97:5a:17:3e:84:b2:8b:a1:33:
71:e4:06:fe:f2:d9:2a:fe:4a:48:bb:90:e6:48:ef:
95:f6:97:8a:8e:6b:93:0b:53:9e:22:d0:dc:05:5b:
77:6c:14:c8:3a:3a:76:31:3d:89:5c:0a:ce:bc:f2:
36:76:e8:30:1c:a5:07:5d:aa:71:ee:7d:8d:71:1c:
69:f1:96:fb:75:05:05:e9:d1:0a:ed:92:d0:fb:b7:
76:2c:1c:08:e4:93:8a:ec:64:7d:6e:b7:38:be:17:
b8:f3:ac:e4:a7:d8:ee:a7:ac:7b:24:69:5b:4a:e1:
c4:df:bd:5a:54:b9:c2:fc:8b:97:68:e2:5d:99:3e:
48:cb:3c:07:95:0e:9c:0b:c5:e9:bc:0b:8f:cb:b2:
85:7e:6f:6d:e3:c2:a8:33:60:57:14:86:94:6a:ad:
a6:7f:6a:18:e3:5a:e6:c8:81:97:0c:b3:a0:ce:73:
9a:d9:17:ca:0b:38:91:d9:0a:a7:f6:ed:29:75:3c:
25:0e:69:9f:0f:46:14:f4:33:68:bb:e8:93:8e:fb:
0e:b8:fd:0d:a0:75:ef:e5:54:54:89:89:e5:e0:e4:
83:6a:8b:3f:8b:6e:d1:c5:84:06:80:d3:ae:1f:de:
67:c8:23:35:6d:72:9e:ec:3c:14:dc:99:fa:19:87:
6c:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:F5:88:AD:CF:7C:0F:94:DA:EE:41:C0:66:A5:2A:51:40:0C:C6:33
X509v3 Authority Key Identifier:
keyid:02:ED:33:95:A0:1A:38:53:71:57:3C:F5:9B:1E:5D:8F:2B:F6:D5:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/B9D1DF45E9A86CDA1CFE95BC5E5796EDEABD214A8B07C94BB9D6628D0656AE11/0/02ED3395A01A385371573CF59B1E5D8F2BF6D57E.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/02ED3395A01A385371573CF59B1E5D8F2BF6D57E.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B9D1DF45E9A86CDA1CFE95BC5E5796EDEABD214A8B07C94BB9D6628D0656AE11/0/34352e3136322e37362e302f32322d3234203d3e20323632353839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.162.76.0/22
Signature Algorithm: sha256WithRSAEncryption
60:17:05:fb:cb:25:c6:23:70:ee:a7:f8:1c:cc:a0:d3:85:07:
76:71:e0:36:89:dc:30:5f:2a:a2:4c:7c:02:df:49:0b:dd:7e:
95:b5:97:0a:23:69:a0:18:f4:80:3f:37:3d:7e:bb:85:5e:9e:
79:a5:31:10:83:1f:9e:ec:54:9c:2d:c1:9c:47:60:49:57:8c:
ea:a5:2b:a2:b7:40:86:83:81:0b:47:42:4f:82:83:7b:07:56:
66:d4:26:f5:68:f6:16:7d:f9:56:4e:77:17:1f:1d:f6:fe:77:
5e:e4:08:bb:9a:0b:d6:f8:02:36:7a:a6:a4:94:66:dc:25:ec:
dd:12:31:d5:49:aa:41:25:78:5c:fe:cf:ef:3e:c7:db:61:f6:
31:02:b2:91:78:e5:be:13:b1:2f:d9:2e:e5:6f:f7:3c:07:c8:
3b:85:89:ba:1b:7d:9c:18:3b:92:ea:92:fa:5a:f6:7a:ee:81:
2e:e3:83:f7:3e:e4:7c:b9:da:cf:c2:43:7e:73:7c:09:7c:ec:
9a:76:7e:d6:40:ff:fd:ef:e8:64:dc:eb:b9:0b:d8:be:dd:c4:
94:2c:0f:fa:f5:87:43:e9:d5:b9:15:41:1e:4b:d3:50:02:dd:
b8:80:d1:b7:42:26:1b:fa:06:39:d3:1b:e0:89:63:e5:e0:fc:
2b:47:e0:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:58:22 2025 by rpki-client