Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8F598647DD0DD4F67EBAD9EE7DBAA52F1B75700077976725355D353DDEAB6B68/0/323830313a3137383a6531303a3a2f34382d3438203d3e203136353039.roa
File: 323830313a3137383a6531303a3a2f34382d3438203d3e203136353039.roa (raw, json)
Hash identifier: IePZHGPIhUBuyqcJEpnoDtk0C6cObL73xyFKolBgZ94=
Subject key identifier: 50:D6:CD:53:45:92:E4:CA:83:DC:E0:8E:8F:2B:CF:29:EE:75:AC:00
Certificate issuer: /CN=66F23ED5577522E4A0E713E9342675BADFEF19F5
Certificate serial: 44947635B589F68374F3681E0B1E2F405ED527F5
Authority key identifier: 66:F2:3E:D5:57:75:22:E4:A0:E7:13:E9:34:26:75:BA:DF:EF:19:F5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/66F23ED5577522E4A0E713E9342675BADFEF19F5.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8F598647DD0DD4F67EBAD9EE7DBAA52F1B75700077976725355D353DDEAB6B68/0/323830313a3137383a6531303a3a2f34382d3438203d3e203136353039.roa
Signing time: Tue 04 Feb 2025 18:11:54 +0000
ROA not before: Tue 04 Feb 2025 18:06:54 +0000
ROA not after: Tue 03 Feb 2026 18:11:54 +0000
asID: 16509
IP address blocks: 2801:178:e10::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:94:76:35:b5:89:f6:83:74:f3:68:1e:0b:1e:2f:40:5e:d5:27:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66F23ED5577522E4A0E713E9342675BADFEF19F5
Validity
Not Before: Feb 4 18:06:54 2025 GMT
Not After : Feb 3 18:11:54 2026 GMT
Subject: CN=50D6CD534592E4CA83DCE08E8F2BCF29EE75AC00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:a6:02:92:8a:38:34:7d:29:56:26:70:de:d4:
0a:26:2f:6b:68:66:d9:30:f7:47:3d:49:f9:78:d6:
8d:77:ae:e2:ac:29:8d:38:cc:6c:be:0e:13:0a:67:
fd:48:d0:75:56:2b:9a:9b:3e:6f:a9:99:15:e4:ac:
63:2c:87:b5:7c:4a:eb:e4:43:00:e5:d1:b4:01:ff:
80:41:55:9a:40:fa:49:63:52:46:47:b4:61:a0:bf:
15:f2:51:06:57:4b:62:26:55:0b:f6:af:b3:3e:1f:
f9:9a:31:fe:06:f2:13:b4:ef:eb:29:e1:c3:24:01:
60:ca:e6:17:07:5d:02:1d:5b:84:9c:60:c2:79:50:
f4:9f:57:05:f7:4a:8d:9c:c9:80:c8:8f:90:13:f1:
a9:a5:32:e3:50:c6:c3:f2:7c:c5:18:24:9a:43:6d:
af:97:61:0a:e7:12:65:a2:83:b2:9d:49:0f:00:fe:
f6:82:74:bc:8b:c6:c0:ef:ee:85:be:46:1f:7d:80:
84:b0:6d:8a:23:27:b2:12:1c:df:bb:e5:2d:7e:cf:
ed:9b:7f:89:46:41:11:a2:38:0a:2d:06:c8:b0:84:
6a:3f:bb:7d:01:ce:43:cc:53:07:6e:55:1d:cb:99:
57:91:87:99:ea:90:d6:7e:d2:80:80:42:fb:02:1a:
bd:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:D6:CD:53:45:92:E4:CA:83:DC:E0:8E:8F:2B:CF:29:EE:75:AC:00
X509v3 Authority Key Identifier:
keyid:66:F2:3E:D5:57:75:22:E4:A0:E7:13:E9:34:26:75:BA:DF:EF:19:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/8F598647DD0DD4F67EBAD9EE7DBAA52F1B75700077976725355D353DDEAB6B68/0/66F23ED5577522E4A0E713E9342675BADFEF19F5.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/66F23ED5577522E4A0E713E9342675BADFEF19F5.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8F598647DD0DD4F67EBAD9EE7DBAA52F1B75700077976725355D353DDEAB6B68/0/323830313a3137383a6531303a3a2f34382d3438203d3e203136353039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2801:178:e10::/48
Signature Algorithm: sha256WithRSAEncryption
a4:7c:49:43:d5:d4:a9:dd:9f:71:6f:02:d8:38:4e:b5:bb:4a:
95:c1:2c:17:0a:66:46:1f:45:87:38:ac:eb:99:48:d1:61:95:
2e:ad:f1:fc:88:32:64:30:89:27:6b:b7:ba:af:e8:92:59:d9:
30:9d:b3:08:27:04:8e:96:a3:13:54:52:b2:22:c0:bc:3a:32:
07:bb:20:bb:85:0e:43:ad:57:9d:f5:76:96:79:57:de:72:5b:
53:65:89:26:eb:f0:59:f0:9a:78:0c:f9:90:04:a7:5b:a8:ee:
c1:c0:d5:b0:08:b8:15:f1:1e:d7:8b:c9:99:53:89:58:0c:b2:
41:7b:50:4d:df:73:b6:ab:ac:6d:bd:bf:dd:00:de:a2:b1:4c:
b9:aa:38:52:d1:7c:08:66:06:37:13:1e:e5:b2:55:67:9d:62:
cb:62:82:39:e1:2e:6b:a5:cb:1e:b2:ca:e1:27:d5:af:bc:a6:
28:ab:93:1e:1d:e7:a1:51:ec:b6:3a:5b:cc:aa:29:65:37:18:
dd:02:ab:4e:3c:f5:f9:04:bb:ef:37:32:9b:da:4e:ce:3f:f8:
d9:8a:e9:d1:4f:85:de:d5:0e:f3:11:a6:02:a2:18:06:69:6f:
fa:1b:96:e5:e6:6e:fd:36:1b:fb:e0:70:c6:a4:ac:df:2f:2d:
e0:36:02:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:59:47 2025 by rpki-client