Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BF9CEA9A0F070C9A952B7B8BCA2BB519EE001285EC2DF41394118981BFBB5389/0/34352e3233342e38382e302f32322d3234203d3e20323636373632.roa
File: 34352e3233342e38382e302f32322d3234203d3e20323636373632.roa (raw, json)
Hash identifier: svnQ/qMEFJmsYnkhBtBBrz8TRvfYesSNhPPGAJJsoa8=
Subject key identifier: C3:37:CA:D9:A1:33:D2:24:39:0D:28:91:01:A6:F2:2D:BF:F5:A6:F1
Certificate issuer: /CN=D09418521EA53A7D75F8FDF01F073B4955B0B259
Certificate serial: 13F95DF7397921A17769B9DA07EEA0FEF5CAEA55
Authority key identifier: D0:94:18:52:1E:A5:3A:7D:75:F8:FD:F0:1F:07:3B:49:55:B0:B2:59
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D09418521EA53A7D75F8FDF01F073B4955B0B259.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/BF9CEA9A0F070C9A952B7B8BCA2BB519EE001285EC2DF41394118981BFBB5389/0/34352e3233342e38382e302f32322d3234203d3e20323636373632.roa
Signing time: Tue 05 Mar 2024 18:18:13 +0000
ROA not before: Tue 05 Mar 2024 18:13:13 +0000
ROA not after: Tue 04 Mar 2025 18:18:13 +0000
asID: 266762
IP address blocks: 45.234.88.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:f9:5d:f7:39:79:21:a1:77:69:b9:da:07:ee:a0:fe:f5:ca:ea:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D09418521EA53A7D75F8FDF01F073B4955B0B259
Validity
Not Before: Mar 5 18:13:13 2024 GMT
Not After : Mar 4 18:18:13 2025 GMT
Subject: CN=C337CAD9A133D224390D289101A6F22DBFF5A6F1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:25:ec:cb:be:67:a0:b6:ca:43:6c:68:27:10:
87:f9:11:68:fe:d6:26:0b:5d:40:c2:4e:72:a0:ed:
4f:72:c6:0d:e6:6b:ce:e2:c3:95:68:45:d9:98:08:
21:f8:a6:00:8a:f8:29:6f:2c:78:52:5d:c4:a1:a7:
66:1d:e8:39:f9:24:e6:25:6f:1d:0a:3d:9a:cd:b0:
02:24:f8:b6:59:5b:a3:2a:33:b7:c5:35:ba:9e:1b:
83:89:6e:6c:24:b1:a5:d1:2e:f6:1d:ec:d5:31:e5:
37:09:d2:bc:b4:b0:24:31:0a:9b:b2:dd:c9:33:e8:
80:41:12:13:d8:50:cb:0c:d8:40:d5:f0:d9:f1:7f:
dc:b7:77:62:60:cb:3d:9c:d5:59:b1:48:40:85:da:
8d:f6:ae:fb:5c:73:14:49:7e:e0:fe:09:04:68:2d:
40:b3:fc:91:59:df:25:5c:0d:18:9d:95:2b:38:1f:
77:f0:37:4e:fe:0c:97:95:b8:d7:2c:14:98:e2:e3:
a8:b6:a7:90:01:90:40:7b:ea:d7:02:e4:7f:07:bc:
9c:af:ce:43:2f:eb:b8:db:59:1b:2b:5b:45:ec:a6:
2f:bd:2d:ef:de:d2:fa:34:88:32:cd:cf:49:42:21:
67:d1:3e:0f:52:06:6d:c3:3a:7d:a5:99:9c:15:31:
ae:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:37:CA:D9:A1:33:D2:24:39:0D:28:91:01:A6:F2:2D:BF:F5:A6:F1
X509v3 Authority Key Identifier:
keyid:D0:94:18:52:1E:A5:3A:7D:75:F8:FD:F0:1F:07:3B:49:55:B0:B2:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/BF9CEA9A0F070C9A952B7B8BCA2BB519EE001285EC2DF41394118981BFBB5389/0/D09418521EA53A7D75F8FDF01F073B4955B0B259.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D09418521EA53A7D75F8FDF01F073B4955B0B259.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BF9CEA9A0F070C9A952B7B8BCA2BB519EE001285EC2DF41394118981BFBB5389/0/34352e3233342e38382e302f32322d3234203d3e20323636373632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.234.88.0/22
Signature Algorithm: sha256WithRSAEncryption
89:6e:3c:6c:15:8a:5b:f5:94:80:c8:52:d1:c1:43:0c:11:2b:
33:a1:45:f4:e6:10:61:e9:a3:99:17:96:c2:15:93:dd:4f:fd:
be:4a:df:01:63:d2:6c:7b:d9:84:6e:9d:65:65:7d:00:21:59:
db:72:86:39:b3:b5:fc:21:1b:ba:1d:6f:d3:42:bf:17:c4:28:
fc:8e:cc:87:e7:81:8f:3c:28:7a:6f:9f:19:2d:e9:74:71:68:
10:33:be:ba:a3:ff:8d:58:e2:b0:f2:fa:eb:70:5e:4b:1f:e7:
0e:63:f7:52:b5:1c:52:b1:86:80:dd:4d:eb:89:31:c0:c5:98:
1c:0d:c5:09:e2:96:13:dd:6e:da:de:df:fa:82:51:18:f6:89:
0a:d6:a2:b2:3d:58:28:a4:4e:e7:59:00:c1:81:ee:d2:e7:61:
73:5e:0d:90:01:a2:1e:1b:1f:ab:77:b7:e1:92:ea:95:17:22:
34:22:9e:13:af:f7:c3:df:16:68:05:40:ea:ce:c1:29:2b:07:
38:4b:2b:8b:a7:27:db:05:e1:13:81:cb:9b:a2:fa:b2:d0:00:
da:ea:27:ac:c7:e9:0a:57:21:4d:7f:c6:49:df:1d:22:99:5d:
64:f8:3a:e3:11:59:0d:a5:51:13:ef:f8:a3:01:77:e0:9d:1b:
e8:e1:66:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 20:28:33 2025 by rpki-client