Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F0A1BCFC0E11E8265228A6D986A3B342B22EAAA1A6D57193BF92FD07650EFEFE/0/34352e3137302e3233322e302f32322d3234203d3e20323632323034.roa
File: 34352e3137302e3233322e302f32322d3234203d3e20323632323034.roa (raw, json)
Hash identifier: Q5A/Ig7UnlEKFqgvXa+m9oIudYRB+PCUD+WjOr8szH8=
Subject key identifier: 9B:FB:BB:E7:1B:E4:74:2A:CE:E6:E2:D8:63:C2:0A:3C:A0:7A:39:DE
Certificate issuer: /CN=927E0012070570AB4DFA4DD1913EF12B0C5A1FBA
Certificate serial: 0E0B8FD085AFAB762568632B6B4B4587B383D315
Authority key identifier: 92:7E:00:12:07:05:70:AB:4D:FA:4D:D1:91:3E:F1:2B:0C:5A:1F:BA
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/927E0012070570AB4DFA4DD1913EF12B0C5A1FBA.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/F0A1BCFC0E11E8265228A6D986A3B342B22EAAA1A6D57193BF92FD07650EFEFE/0/34352e3137302e3233322e302f32322d3234203d3e20323632323034.roa
Signing time: Tue 05 Mar 2024 18:22:54 +0000
ROA not before: Tue 05 Mar 2024 18:17:54 +0000
ROA not after: Tue 04 Mar 2025 18:22:54 +0000
asID: 262204
IP address blocks: 45.170.232.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:0b:8f:d0:85:af:ab:76:25:68:63:2b:6b:4b:45:87:b3:83:d3:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=927E0012070570AB4DFA4DD1913EF12B0C5A1FBA
Validity
Not Before: Mar 5 18:17:54 2024 GMT
Not After : Mar 4 18:22:54 2025 GMT
Subject: CN=9BFBBBE71BE4742ACEE6E2D863C20A3CA07A39DE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:f0:e7:c5:74:d0:e4:6c:d4:d8:52:64:f6:dc:
1b:f4:b9:ce:57:8d:51:37:13:7e:5c:ab:df:25:47:
aa:4e:7a:bf:13:29:97:3e:f9:b0:a7:c0:82:29:76:
5d:aa:23:3d:a7:c1:4a:4d:63:2a:00:75:d1:bc:81:
d1:0b:2f:d3:b3:ee:54:c0:1c:96:36:9c:4f:84:ba:
f0:be:2c:7b:78:44:c1:3d:f4:ff:d5:79:1e:f9:1b:
b8:38:e4:0e:73:ed:ee:98:51:12:fb:48:27:61:c1:
be:23:13:ff:13:b3:97:ee:51:6d:98:5c:81:0b:5b:
cc:ea:20:f1:c0:6e:e8:7c:d8:9e:38:a0:46:7f:df:
53:29:3b:ed:57:71:c9:82:57:3c:b0:03:72:72:7b:
d0:38:fe:f0:a5:af:88:c4:c6:4b:cc:3f:03:57:7c:
88:06:60:58:63:03:84:1a:aa:86:00:a4:cc:9a:57:
01:c5:20:c1:54:0a:33:7d:9c:65:48:03:d4:ad:3c:
de:fa:8c:94:8c:5f:74:21:73:4e:ff:2e:2c:92:06:
b1:b7:8d:84:0b:c5:67:7c:dc:f8:9a:d3:1e:3a:8e:
34:2f:00:b5:4e:c7:0b:20:4a:17:5f:76:24:09:88:
26:fd:82:9e:57:e1:f9:f2:4b:4f:98:f9:36:86:da:
8c:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:FB:BB:E7:1B:E4:74:2A:CE:E6:E2:D8:63:C2:0A:3C:A0:7A:39:DE
X509v3 Authority Key Identifier:
keyid:92:7E:00:12:07:05:70:AB:4D:FA:4D:D1:91:3E:F1:2B:0C:5A:1F:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/F0A1BCFC0E11E8265228A6D986A3B342B22EAAA1A6D57193BF92FD07650EFEFE/0/927E0012070570AB4DFA4DD1913EF12B0C5A1FBA.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/927E0012070570AB4DFA4DD1913EF12B0C5A1FBA.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F0A1BCFC0E11E8265228A6D986A3B342B22EAAA1A6D57193BF92FD07650EFEFE/0/34352e3137302e3233322e302f32322d3234203d3e20323632323034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.170.232.0/22
Signature Algorithm: sha256WithRSAEncryption
be:5e:43:b7:e2:e3:cc:09:7e:f6:f6:ef:f1:f9:37:3e:a9:b8:
ab:5b:3b:e4:e5:39:f6:83:ba:9b:b6:c8:7e:08:25:c6:dc:49:
2f:de:70:55:0f:d6:6a:e0:6c:8e:bc:c8:8e:68:29:40:3f:b0:
98:09:04:bb:d9:ed:a9:b6:13:ee:ef:92:aa:87:86:f0:19:c5:
e5:d5:d0:1b:8c:83:d5:a2:fe:de:fe:40:52:84:e7:9e:b3:e6:
a6:5e:37:59:36:13:39:53:5b:6c:4a:ee:16:81:65:65:71:dd:
0e:36:57:61:72:5a:7d:cf:41:1f:60:01:b2:ea:ba:e4:c6:55:
6c:bb:72:53:9f:0c:20:4f:9d:20:02:5e:7a:3a:60:fe:de:61:
b0:cf:56:57:17:a6:23:39:9e:8f:55:01:2f:ca:c1:42:71:6b:
9c:f1:bf:9e:5f:98:92:c9:cc:f7:10:d9:0e:a4:60:2f:ac:3e:
47:58:b4:4c:4e:9a:bf:42:32:50:3e:37:fe:9e:aa:28:6b:b8:
d4:f7:88:b5:d9:72:89:3b:80:f7:a0:70:45:04:69:c9:1d:d9:
fb:68:d0:30:f0:48:53:1e:db:2a:10:d5:84:2f:e7:43:6e:a8:
34:9c:b3:33:a9:fd:49:06:7b:f9:17:80:a3:5e:ed:0c:8d:17:
0f:19:44:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 00:21:27 2025 by rpki-client