Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C49F09D0777CD260B28DBBF1CA577BBF1A598B854F7D3DBA3A094E8B654051F2/0/34352e3136372e31322e302f32322d3234203d3e203133393539.roa
File: 34352e3136372e31322e302f32322d3234203d3e203133393539.roa (raw, json)
Hash identifier: N3ed7vn5wXej7rmij2EmpbNJRRTKMnyVUKPwATv5RCI=
Subject key identifier: 19:1C:41:C3:1D:33:2F:29:59:D4:23:3F:CD:13:B0:5A:2C:01:87:C8
Certificate issuer: /CN=CD0CE589373B27C7377B95716717C42DB8B1FF08
Certificate serial: 2C849158751E737F4C00FF3267EA34090E85A95E
Authority key identifier: CD:0C:E5:89:37:3B:27:C7:37:7B:95:71:67:17:C4:2D:B8:B1:FF:08
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CD0CE589373B27C7377B95716717C42DB8B1FF08.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/C49F09D0777CD260B28DBBF1CA577BBF1A598B854F7D3DBA3A094E8B654051F2/0/34352e3136372e31322e302f32322d3234203d3e203133393539.roa
Signing time: Tue 05 Mar 2024 18:01:21 +0000
ROA not before: Tue 05 Mar 2024 17:56:21 +0000
ROA not after: Tue 04 Mar 2025 18:01:21 +0000
asID: 13959
IP address blocks: 45.167.12.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:84:91:58:75:1e:73:7f:4c:00:ff:32:67:ea:34:09:0e:85:a9:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CD0CE589373B27C7377B95716717C42DB8B1FF08
Validity
Not Before: Mar 5 17:56:21 2024 GMT
Not After : Mar 4 18:01:21 2025 GMT
Subject: CN=191C41C31D332F2959D4233FCD13B05A2C0187C8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ac:38:ac:c7:0b:2d:64:1f:ac:fb:be:4d:6e:
89:2c:1a:8b:7d:48:b3:19:6b:f2:eb:2c:4f:06:b5:
59:20:82:f8:1e:22:8e:a2:04:3b:b5:2a:67:64:61:
7c:b0:0b:ca:33:52:b1:7f:c3:e8:88:e0:f7:b0:77:
29:38:13:e5:95:95:7b:da:79:82:74:13:5b:03:54:
7b:9d:32:cf:c6:76:d1:36:c5:06:33:9f:c5:e5:24:
e6:bf:2c:f6:1e:94:7a:38:5d:a2:9c:0f:14:e6:9e:
9b:e1:51:84:b5:44:a9:94:f4:27:b3:f0:17:fe:dd:
e0:86:4a:84:f9:36:99:30:11:80:d8:99:37:6e:f4:
ba:99:2b:b3:47:15:ea:ab:1b:23:ff:75:e5:a1:4c:
c3:48:ad:d9:52:57:72:18:5c:73:d8:b1:13:a7:68:
06:6f:c9:c6:4c:36:7e:d2:af:20:91:03:01:92:04:
77:91:66:d7:40:8d:1d:da:58:04:bc:ee:97:10:82:
ba:e0:61:73:6f:4e:e3:75:ec:be:28:16:55:c5:ea:
3e:4a:98:f0:95:a9:e6:d9:81:6b:d3:31:67:b9:b8:
fa:de:b7:33:06:0b:12:86:0e:07:bc:03:46:e1:c6:
97:b1:84:cc:09:47:cb:3d:b3:4b:b6:4e:4b:75:b4:
fb:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:1C:41:C3:1D:33:2F:29:59:D4:23:3F:CD:13:B0:5A:2C:01:87:C8
X509v3 Authority Key Identifier:
keyid:CD:0C:E5:89:37:3B:27:C7:37:7B:95:71:67:17:C4:2D:B8:B1:FF:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/C49F09D0777CD260B28DBBF1CA577BBF1A598B854F7D3DBA3A094E8B654051F2/0/CD0CE589373B27C7377B95716717C42DB8B1FF08.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CD0CE589373B27C7377B95716717C42DB8B1FF08.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C49F09D0777CD260B28DBBF1CA577BBF1A598B854F7D3DBA3A094E8B654051F2/0/34352e3136372e31322e302f32322d3234203d3e203133393539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.167.12.0/22
Signature Algorithm: sha256WithRSAEncryption
a2:95:13:25:6d:3b:52:5c:b4:2e:1f:ec:9f:d2:55:ad:93:b5:
6d:d5:1d:77:72:4a:f7:ea:c0:10:6a:15:78:ec:3a:51:e4:aa:
39:8b:05:b8:3d:e4:71:9c:76:3e:9b:71:7f:31:97:3e:5e:45:
18:45:bd:23:d9:b2:2c:17:dd:13:c1:de:16:f5:aa:73:66:9e:
d1:42:24:b8:a2:14:9b:bf:d6:96:f8:9f:da:ce:28:e6:d0:8c:
d0:ff:3d:66:99:5b:75:81:44:30:4e:d9:a6:2f:a5:e1:3c:85:
14:22:ad:c9:d2:f8:76:69:0e:dc:84:7c:e4:db:b8:47:d9:99:
f5:71:20:cb:f8:3d:25:19:b6:2d:dc:62:1d:0a:67:19:db:68:
b3:06:cb:9f:45:0b:88:d2:df:a9:72:d3:18:91:c5:a4:01:ec:
0b:c5:66:e0:4a:4b:2c:94:c8:ee:b3:f0:b8:63:74:0c:2a:97:
d2:a4:58:c6:60:97:4f:68:99:cb:bb:2c:53:b3:1d:96:db:9a:
7f:ae:12:ce:3f:a5:7b:c8:fa:02:3c:0c:10:71:77:29:d4:71:
51:e2:c8:97:5d:5f:46:c7:c1:bf:f1:b0:4d:ce:94:d3:20:8d:
08:15:56:60:6b:29:f4:26:ad:be:fc:69:15:38:af:5c:03:2c:
0f:aa:87:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 01:21:52 2025 by rpki-client