Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D80FD0D5746E4486974F87F0B58AA3D22DF7A9D340037E73D5DA44A391EE2640/0/34352e342e3132382e302f32322d3234203d3e203232383639.roa
File: 34352e342e3132382e302f32322d3234203d3e203232383639.roa (raw, json)
Hash identifier: Dfvj8m/xSOlvMhwkC1A8hNnPqCf2qsLb1gUcuYv+AQs=
Subject key identifier: 27:D3:A5:63:3F:A2:D1:A4:02:82:F6:37:55:8A:45:6E:BF:60:35:DC
Certificate issuer: /CN=231411337300474BC5489725C8707684F70A876D
Certificate serial: 0F6B8FB95C7C123CD71FC3E3316F88EA5BA27E56
Authority key identifier: 23:14:11:33:73:00:47:4B:C5:48:97:25:C8:70:76:84:F7:0A:87:6D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/231411337300474BC5489725C8707684F70A876D.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D80FD0D5746E4486974F87F0B58AA3D22DF7A9D340037E73D5DA44A391EE2640/0/34352e342e3132382e302f32322d3234203d3e203232383639.roa
Signing time: Tue 05 Mar 2024 18:15:54 +0000
ROA not before: Tue 05 Mar 2024 18:10:54 +0000
ROA not after: Tue 04 Mar 2025 18:15:54 +0000
asID: 22869
IP address blocks: 45.4.128.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:6b:8f:b9:5c:7c:12:3c:d7:1f:c3:e3:31:6f:88:ea:5b:a2:7e:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=231411337300474BC5489725C8707684F70A876D
Validity
Not Before: Mar 5 18:10:54 2024 GMT
Not After : Mar 4 18:15:54 2025 GMT
Subject: CN=27D3A5633FA2D1A40282F637558A456EBF6035DC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:52:6b:12:e1:cc:a3:f9:45:08:2a:bb:3d:e3:
b8:95:21:70:6d:48:ab:c7:1b:fe:cd:70:ba:25:b1:
ce:d8:e7:10:a2:38:d5:62:db:9d:75:b6:fb:30:2e:
25:83:b0:1d:06:45:cb:1f:46:d6:58:2a:ed:27:fe:
24:ac:51:46:f6:cf:c4:90:6d:ee:0c:2e:12:6a:23:
b6:e8:32:89:eb:47:c5:bf:91:e0:fd:5e:87:c0:cd:
bb:f0:19:56:c9:9d:b1:ad:9f:ef:1d:a3:e2:2e:fe:
31:88:54:14:2a:25:b7:55:09:19:98:86:a0:bf:0d:
24:d9:19:4f:02:cc:b3:07:e6:2b:7c:35:71:76:98:
5d:b6:c3:24:91:c3:9b:fe:0a:16:45:59:32:74:43:
63:5f:62:36:22:26:b1:22:2b:93:79:6a:0a:ba:d5:
88:1f:41:21:a4:2f:97:56:d5:6c:4c:68:21:e2:a3:
de:dd:0a:71:42:85:52:36:cc:7a:96:b7:7b:46:45:
a6:22:dd:6a:4e:77:6f:fc:f6:95:ac:ef:82:e1:a1:
a3:1d:62:f8:ef:c9:a5:5a:34:da:40:f8:19:e1:2d:
8f:f8:3a:ff:46:ef:2b:ff:6f:76:fb:97:b4:08:ab:
c8:2f:4e:5c:5b:b1:c5:ba:0b:1e:86:85:08:cc:cf:
00:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:D3:A5:63:3F:A2:D1:A4:02:82:F6:37:55:8A:45:6E:BF:60:35:DC
X509v3 Authority Key Identifier:
keyid:23:14:11:33:73:00:47:4B:C5:48:97:25:C8:70:76:84:F7:0A:87:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/D80FD0D5746E4486974F87F0B58AA3D22DF7A9D340037E73D5DA44A391EE2640/0/231411337300474BC5489725C8707684F70A876D.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/231411337300474BC5489725C8707684F70A876D.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D80FD0D5746E4486974F87F0B58AA3D22DF7A9D340037E73D5DA44A391EE2640/0/34352e342e3132382e302f32322d3234203d3e203232383639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.4.128.0/22
Signature Algorithm: sha256WithRSAEncryption
0e:10:7d:2e:a1:89:c4:ad:64:e9:f1:7f:71:3e:a0:47:50:b4:
e4:8e:85:67:ce:29:53:ed:ed:02:6e:0f:1a:cb:af:a5:04:f7:
6f:53:ed:96:b0:bb:10:86:a6:df:22:c4:74:1b:49:68:d9:3d:
28:9d:5e:2a:4a:6d:45:ba:1b:37:15:e9:d3:05:54:9c:7a:f6:
31:7d:32:8c:6e:5c:e4:b6:40:71:7f:9c:7b:b5:83:ee:2a:b4:
25:3f:2b:ba:78:d4:b9:d5:de:64:91:3a:1b:dd:68:78:57:20:
bc:e4:b5:d0:2a:e4:24:0d:1c:1b:7d:a9:5f:59:49:8c:32:5f:
4c:0c:cd:9a:d9:63:ae:28:e8:2f:e8:b1:20:c0:bf:3d:1f:2f:
8b:94:e5:8d:52:b9:33:94:35:e0:91:cb:f0:21:7c:b6:ab:da:
64:c7:cc:53:26:ab:7b:b2:9c:61:b8:95:62:15:b0:35:05:b9:
08:f2:6a:17:0c:e1:63:6e:42:ec:7c:8c:db:70:96:4d:42:16:
3b:df:7b:0f:66:c6:dd:7e:48:76:32:45:96:e4:88:c7:df:b2:
b3:e5:01:0b:b3:1c:c9:9b:13:b8:71:c2:2c:26:79:a7:63:4c:
62:dc:7f:bc:a4:bc:50:0c:32:1f:52:06:81:f9:6c:33:2f:f5:
f6:f2:6b:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 20:32:12 2025 by rpki-client