Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ba4a14f9-9180-4ca1-8f7d-9cd801ad64ef/e03daef0ae869e60714b5ea87fd82473ca20c259.roa
File: e03daef0ae869e60714b5ea87fd82473ca20c259.roa (raw, json)
Hash identifier: r+hEULB9r3K4q3qxKUsRUrqVB/BRxP/r55D7gV2B924=
Subject key identifier: B5:BF:16:0F:43:D4:CB:D1:74:C7:47:C1:98:CB:9D:B4:AA:1C:E0:FE
Certificate issuer: /CN=33d77efc1ab1b4b849aa3ac57cd00366ea75b677
Certificate serial: 215C8C
Authority key identifier: E5:32:D8:5E:46:59:00:DA:65:B0:67:57:94:D1:50:D3:E9:F4:4D:E5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/33d77efc1ab1b4b849aa3ac57cd00366ea75b677.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/ba4a14f9-9180-4ca1-8f7d-9cd801ad64ef/e03daef0ae869e60714b5ea87fd82473ca20c259.roa
Signing time: Tue 20 Jun 2023 12:43:28 +0000
ROA not before: Mon 19 Jun 2023 12:43:27 +0000
ROA not after: Fri 20 Jun 2025 12:43:27 +0000
asID: 27951
IP address blocks: 45.225.225.0/24 maxlen: 24
2803:da20::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2186380 (0x215c8c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33d77efc1ab1b4b849aa3ac57cd00366ea75b677
Validity
Not Before: Jun 19 12:43:27 2023 GMT
Not After : Jun 20 12:43:27 2025 GMT
Subject: CN=e03daef0ae869e60714b5ea87fd82473ca20c259
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:8c:71:36:86:63:4a:5a:07:da:ab:17:52:06:
19:fe:2e:b3:47:49:b3:62:0f:09:39:da:58:c6:d4:
08:b5:b5:f4:a2:2e:55:4a:e6:34:ba:e1:36:c2:28:
a3:0b:3d:3e:ea:e0:ea:bc:5f:1d:90:d6:ac:d9:2a:
df:34:e3:25:4d:5f:c7:eb:01:31:f2:f0:8e:b9:4c:
e0:a5:c3:51:cb:de:00:a4:54:07:83:ab:fd:92:a4:
c1:9c:13:63:57:81:52:ae:ad:68:74:e4:1a:d1:49:
db:41:b9:60:38:28:67:c7:e7:71:9a:eb:52:91:21:
5d:9e:f1:76:dc:2c:da:98:b1:4b:97:2a:86:1f:f2:
a3:b3:bc:0e:04:12:58:b4:6f:b0:e1:f1:bd:84:ec:
77:ab:ae:7c:3a:8f:39:1b:3a:01:60:20:87:fe:1b:
a7:26:61:58:7b:00:89:57:a8:00:59:f6:e8:d9:10:
6f:10:0c:4c:66:31:b6:9a:fd:26:b1:9d:e9:d8:9e:
80:95:43:28:02:2a:2e:ec:76:42:fd:87:da:56:76:
fc:29:6c:0a:69:e1:7b:28:b1:97:97:6e:bd:71:93:
c7:be:87:9a:ab:f6:7b:2c:e5:4f:1e:08:04:7d:91:
68:d4:67:dc:e4:59:d6:c7:5e:1e:60:e9:df:c1:aa:
a4:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:BF:16:0F:43:D4:CB:D1:74:C7:47:C1:98:CB:9D:B4:AA:1C:E0:FE
X509v3 Authority Key Identifier:
keyid:E5:32:D8:5E:46:59:00:DA:65:B0:67:57:94:D1:50:D3:E9:F4:4D:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/33d77efc1ab1b4b849aa3ac57cd00366ea75b677.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ba4a14f9-9180-4ca1-8f7d-9cd801ad64ef/e03daef0ae869e60714b5ea87fd82473ca20c259.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/ba4a14f9-9180-4ca1-8f7d-9cd801ad64ef/33d77efc1ab1b4b849aa3ac57cd00366ea75b677.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.225.225.0/24
IPv6:
2803:da20::/40
Signature Algorithm: sha256WithRSAEncryption
c9:b1:e7:65:c0:a8:3d:b9:a4:4e:4c:f4:4a:d7:18:03:74:69:
8e:4a:89:4a:f8:0e:a5:63:3e:af:2c:60:55:62:d2:6a:37:b4:
e2:ac:ec:3e:fe:1b:93:f9:e0:bc:d7:e5:94:ac:c4:8b:2d:2f:
97:f9:c2:e0:16:e8:bc:7a:05:39:5f:f9:b6:a4:a6:9d:e8:bb:
75:5d:79:50:a9:12:00:d5:b2:db:0f:c2:9e:c9:87:cf:71:ca:
ad:bf:f1:b0:bb:d3:e6:1d:99:92:a4:d9:76:bb:0e:94:1f:b2:
06:01:76:22:29:7e:15:4c:c1:0d:51:d0:0d:4d:fc:34:61:8c:
09:c4:16:32:5d:56:54:1c:39:01:bf:75:52:a5:02:da:19:79:
4a:17:b3:77:a6:dd:b0:b8:db:7c:13:df:2a:53:18:b9:74:28:
fc:8d:62:b6:3b:0e:f5:11:f1:ff:1e:1d:57:bc:b5:34:b1:53:
1a:e3:56:ae:65:ef:26:6d:95:a9:b8:c6:19:2b:97:ac:26:b0:
fe:ef:5e:37:e8:8a:97:c1:8d:4a:28:a2:9c:af:9d:39:a9:0d:
4a:8f:5b:bb:3e:43:e1:d5:11:20:bc:70:6f:2a:c9:5d:e5:25:
70:8f:89:fe:74:bd:0b:03:b5:75:ba:c4:bd:34:58:a3:92:a4:
95:37:8e:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 13:32:22 2025 by rpki-client