Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CF9F2669DCA28E525919E44E4FEDCD5FFD0FDF0FEEAA423025749A3CAA2C55FB/0/34352e372e3230382e302f32342d3234203d3e20323635373239.roa
File: 34352e372e3230382e302f32342d3234203d3e20323635373239.roa (raw, json)
Hash identifier: 99Bb9/Fc89+Vh3Leq1qmWPxQimKA0gmPI/DiqpatwUY=
Subject key identifier: 61:CD:98:84:84:05:59:2F:F4:80:B3:EE:CC:5D:42:8D:8C:A3:7E:3D
Certificate issuer: /CN=3A748E67E7C39A7A196D27CB2F4DE6C9B83D427A
Certificate serial: 5957BAF82643D6CE81BE073176F5F53FB2CE3284
Authority key identifier: 3A:74:8E:67:E7:C3:9A:7A:19:6D:27:CB:2F:4D:E6:C9:B8:3D:42:7A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A748E67E7C39A7A196D27CB2F4DE6C9B83D427A.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/CF9F2669DCA28E525919E44E4FEDCD5FFD0FDF0FEEAA423025749A3CAA2C55FB/0/34352e372e3230382e302f32342d3234203d3e20323635373239.roa
Signing time: Tue 05 Mar 2024 18:06:45 +0000
ROA not before: Tue 05 Mar 2024 18:01:45 +0000
ROA not after: Tue 04 Mar 2025 18:06:45 +0000
asID: 265729
IP address blocks: 45.7.208.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:57:ba:f8:26:43:d6:ce:81:be:07:31:76:f5:f5:3f:b2:ce:32:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3A748E67E7C39A7A196D27CB2F4DE6C9B83D427A
Validity
Not Before: Mar 5 18:01:45 2024 GMT
Not After : Mar 4 18:06:45 2025 GMT
Subject: CN=61CD98848405592FF480B3EECC5D428D8CA37E3D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:df:71:78:3b:e3:72:8f:96:24:91:62:73:a0:
b6:49:32:aa:d2:10:56:b4:ae:7a:40:73:10:59:b1:
a0:0b:cd:9f:9a:cc:62:48:b8:b6:1e:d0:1f:eb:d1:
1b:1d:31:f9:2a:c5:39:af:eb:c7:6c:f0:a6:ce:6d:
63:b6:57:39:f7:df:c9:6c:f8:51:87:b4:27:55:62:
47:5c:73:cf:61:78:f4:25:fb:9c:3f:59:b5:72:7e:
8d:c9:d6:99:62:92:58:01:79:ef:61:75:d3:54:76:
3a:eb:0c:61:73:96:1b:a8:c7:68:02:f2:42:10:e5:
ea:d0:cb:42:ab:a4:62:e8:49:aa:4a:2f:a7:0f:d8:
17:88:13:ad:f0:00:70:d3:f0:08:a2:d6:54:63:5f:
4b:98:0e:e0:61:c8:58:b0:fa:e0:6c:96:dd:f8:aa:
1d:62:fc:ad:d4:37:59:b7:ec:08:cc:38:1c:3f:27:
c4:d8:5d:01:32:b6:a6:cc:a9:d4:d4:b4:f5:15:08:
8b:d7:a0:34:b3:8e:68:c6:aa:f7:eb:01:53:09:82:
23:b9:b9:37:bb:a2:2c:0d:af:b6:a1:73:37:6c:f8:
06:5f:68:ac:e7:99:7c:85:c3:d1:52:f2:78:bf:b0:
de:e7:50:a8:18:8d:9c:49:f2:f5:a7:9d:f0:8a:ca:
79:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:CD:98:84:84:05:59:2F:F4:80:B3:EE:CC:5D:42:8D:8C:A3:7E:3D
X509v3 Authority Key Identifier:
keyid:3A:74:8E:67:E7:C3:9A:7A:19:6D:27:CB:2F:4D:E6:C9:B8:3D:42:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/CF9F2669DCA28E525919E44E4FEDCD5FFD0FDF0FEEAA423025749A3CAA2C55FB/0/3A748E67E7C39A7A196D27CB2F4DE6C9B83D427A.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A748E67E7C39A7A196D27CB2F4DE6C9B83D427A.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CF9F2669DCA28E525919E44E4FEDCD5FFD0FDF0FEEAA423025749A3CAA2C55FB/0/34352e372e3230382e302f32342d3234203d3e20323635373239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.7.208.0/24
Signature Algorithm: sha256WithRSAEncryption
44:7f:9a:c8:43:b0:d7:99:f2:1b:48:b4:af:22:24:84:3d:4e:
8f:85:f9:de:c9:32:fa:0d:92:12:0a:b8:73:b4:4e:ce:c2:ac:
f2:a3:d8:61:af:ee:97:eb:59:53:bd:9a:0f:c9:b2:30:2e:a9:
17:92:91:51:7b:2b:74:ce:3c:2c:8d:d0:6e:52:56:ec:22:2a:
5a:ad:05:65:91:96:ec:00:3c:04:f7:76:fa:83:42:63:ba:77:
dc:cf:65:89:40:66:25:bf:55:88:98:ec:b4:3a:44:05:1d:24:
09:c1:48:a6:0f:da:9b:71:27:a1:7c:d4:fe:d8:46:49:47:5a:
8f:7f:57:1a:0b:eb:50:24:ff:0d:04:c9:b1:cd:22:9d:52:2e:
d9:b7:63:73:7e:89:63:be:04:3b:39:ee:b2:28:95:7c:26:b3:
e0:04:2e:f2:35:28:eb:75:8d:dc:1f:e8:72:b6:d4:80:d3:95:
ec:9b:6d:a7:54:a8:f8:e5:97:d4:33:39:96:e7:eb:ca:ce:c8:
d8:5a:bd:d4:49:1d:7b:b2:0c:b7:c4:9b:53:f9:b9:dd:4b:34:
a4:3b:a3:af:c5:83:2d:7c:ed:1f:90:d6:0c:5c:9a:6a:73:66:
cc:d9:e9:52:02:b4:e2:a0:27:7d:ae:87:98:dc:7a:89:9f:6a:
fb:c5:23:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 20:32:10 2025 by rpki-client