Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FC831F138F3C11AAF23CAC0CFC5BBA832ABCC3274EB44C043D1A2640B513DEC6/0/34352e37312e3235332e302f32342d3234203d3e20323732393534.roa
File: 34352e37312e3235332e302f32342d3234203d3e20323732393534.roa (raw, json)
Hash identifier: E8KeqrF3Rcr/SpsC8e5V8s2AwOfJrsGf/gZyDyiT5lc=
Subject key identifier: DD:B6:9E:19:A8:F6:FD:A2:64:29:64:BC:58:53:4B:11:56:FC:51:FD
Certificate issuer: /CN=896E033E875BDBE6F2217610A8C83D959EB2168F
Certificate serial: 2D301BB5FC346F8D0368B3E6B79A6B9B0459C564
Authority key identifier: 89:6E:03:3E:87:5B:DB:E6:F2:21:76:10:A8:C8:3D:95:9E:B2:16:8F
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/896E033E875BDBE6F2217610A8C83D959EB2168F.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/FC831F138F3C11AAF23CAC0CFC5BBA832ABCC3274EB44C043D1A2640B513DEC6/0/34352e37312e3235332e302f32342d3234203d3e20323732393534.roa
Signing time: Tue 05 Mar 2024 18:00:25 +0000
ROA not before: Tue 05 Mar 2024 17:55:25 +0000
ROA not after: Tue 04 Mar 2025 18:00:25 +0000
asID: 272954
IP address blocks: 45.71.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:30:1b:b5:fc:34:6f:8d:03:68:b3:e6:b7:9a:6b:9b:04:59:c5:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=896E033E875BDBE6F2217610A8C83D959EB2168F
Validity
Not Before: Mar 5 17:55:25 2024 GMT
Not After : Mar 4 18:00:25 2025 GMT
Subject: CN=DDB69E19A8F6FDA2642964BC58534B1156FC51FD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:5f:e2:58:32:72:ac:2a:e3:61:f8:e5:0b:dc:
1c:b4:b0:97:31:01:84:44:44:0a:62:60:88:8e:7f:
48:dc:d6:4a:8a:93:60:a2:4e:bf:61:8a:da:fa:04:
16:90:75:54:a7:6e:28:9b:8b:00:97:22:a0:aa:8c:
3c:7d:fa:a9:31:81:3b:49:bc:f4:d7:96:6d:30:07:
5e:f9:ce:77:18:70:27:33:06:18:63:9e:26:29:09:
5c:f4:58:a1:46:60:fb:12:06:90:3f:10:ea:40:8e:
a4:9e:45:5d:0c:2a:ae:e4:20:0d:b7:ae:ed:7f:3b:
a5:dd:a0:47:f0:98:09:e4:2a:09:6b:04:f2:80:6a:
09:3c:de:34:c6:c1:a7:98:de:5e:b0:98:83:6c:db:
36:dc:89:af:0b:1c:ce:35:c4:1b:09:7c:ae:f0:8a:
62:47:45:8b:a1:b2:02:74:01:0b:0a:0f:cc:da:cf:
67:6d:62:a2:1f:93:73:cc:10:ae:be:28:ea:64:a3:
3b:41:1d:57:2e:bc:df:62:11:61:aa:11:18:66:0a:
b2:c5:2f:20:8c:4c:11:9c:60:b3:f8:cd:cd:10:68:
d0:da:3b:cc:f1:56:4c:f6:50:67:3b:1c:94:9c:c2:
62:8a:4b:d4:7d:be:c2:69:fb:a0:4d:26:e6:5b:3a:
76:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:B6:9E:19:A8:F6:FD:A2:64:29:64:BC:58:53:4B:11:56:FC:51:FD
X509v3 Authority Key Identifier:
keyid:89:6E:03:3E:87:5B:DB:E6:F2:21:76:10:A8:C8:3D:95:9E:B2:16:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/FC831F138F3C11AAF23CAC0CFC5BBA832ABCC3274EB44C043D1A2640B513DEC6/0/896E033E875BDBE6F2217610A8C83D959EB2168F.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/896E033E875BDBE6F2217610A8C83D959EB2168F.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FC831F138F3C11AAF23CAC0CFC5BBA832ABCC3274EB44C043D1A2640B513DEC6/0/34352e37312e3235332e302f32342d3234203d3e20323732393534.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.71.253.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:29:d4:d1:1c:d3:d4:f6:4a:ee:ea:1c:b4:0d:da:75:01:a4:
ee:80:c1:d1:0a:33:d6:7e:c4:25:af:b0:60:0a:88:4e:ae:23:
b0:b8:c0:6f:9d:9b:2e:bc:20:e4:2e:39:25:24:d5:e0:e2:f9:
30:f7:4f:05:a5:14:06:b2:e5:dd:5d:29:53:33:5a:4e:24:74:
cc:a0:00:c1:01:8d:85:aa:80:eb:21:b8:63:f0:4e:36:63:79:
1e:a3:da:f6:cb:f2:81:1c:fa:e2:81:46:d8:3a:62:9d:85:60:
44:1b:d6:26:c4:55:3c:a7:7b:6b:ef:3e:c3:4a:74:f4:38:ee:
99:2a:56:a8:ca:16:55:6b:94:30:bc:ed:1a:64:8a:7f:42:47:
78:47:59:6d:17:42:7c:69:a8:15:cb:81:91:55:9b:e5:d5:ec:
82:7c:fa:fe:a2:dc:57:65:74:c2:1a:5b:28:d8:0f:76:a9:f7:
50:7a:a9:9c:7c:3f:31:c1:75:81:47:8e:d6:4a:5f:02:db:70:
89:c7:f3:15:66:c9:32:dc:dc:4f:07:4f:f2:de:df:c1:20:f0:
6f:4c:9a:a6:72:85:67:8f:6e:e3:ac:60:82:0a:8d:91:9c:69:
d1:78:76:3c:47:4d:1a:f0:7d:55:e0:ce:e4:7b:16:d7:ec:82:
d3:53:bd:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 00:44:09 2025 by rpki-client