Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3230312e3233342e31392e302f32342d3234203d3e203532323535.roa
File: 3230312e3233342e31392e302f32342d3234203d3e203532323535.roa (raw, json)
Hash identifier: sfplz4YxCn7ieRDOofkb0B9hzAdHlTUcl8EeY4nFTCY=
Subject key identifier: 0D:B6:6F:3D:1D:17:7F:06:40:20:A8:A6:C4:16:7F:4B:09:9F:DC:3A
Certificate issuer: /CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
Certificate serial: 79B1154CE8332838BB007386803C22DCE408C1BB
Authority key identifier: C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3230312e3233342e31392e302f32342d3234203d3e203532323535.roa
Signing time: Tue 04 Feb 2025 18:41:37 +0000
ROA not before: Tue 04 Feb 2025 18:36:37 +0000
ROA not after: Tue 03 Feb 2026 18:41:37 +0000
asID: 52255
IP address blocks: 201.234.19.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:b1:15:4c:e8:33:28:38:bb:00:73:86:80:3c:22:dc:e4:08:c1:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
Validity
Not Before: Feb 4 18:36:37 2025 GMT
Not After : Feb 3 18:41:37 2026 GMT
Subject: CN=0DB66F3D1D177F064020A8A6C4167F4B099FDC3A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b8:b7:4e:99:ae:f2:a4:6b:9c:52:0d:e9:85:
dc:2e:9a:45:88:9f:44:00:d6:f0:12:aa:55:af:70:
0c:fb:e4:b1:36:d7:15:27:c2:4a:95:44:39:87:4d:
6c:b9:76:35:61:dd:7d:5b:bf:46:5f:ae:c7:2a:83:
30:38:60:79:77:a8:9c:8c:40:68:57:aa:be:3e:04:
c5:80:70:20:b1:50:4a:61:8c:09:fe:b1:de:54:49:
3c:af:24:ec:56:d2:f5:2e:04:e1:2b:95:5d:29:45:
2c:d3:85:f5:b4:a7:d6:a0:16:bd:da:5c:32:06:53:
15:0a:5e:5a:01:f0:6d:92:e6:76:97:a9:09:5d:df:
65:e0:01:79:11:ad:12:0a:77:75:98:07:24:05:79:
10:b3:cb:01:68:6f:4b:69:b4:ba:8c:b5:5f:91:a7:
07:e0:ff:e4:f5:a4:65:71:da:5a:d2:bd:86:62:13:
44:c3:61:13:b9:be:e4:0f:49:d5:7c:e8:8d:70:f0:
c0:e8:da:9c:91:d7:5c:9c:33:12:2f:a0:d0:41:85:
47:13:a7:10:9e:18:9e:05:e1:f1:84:66:19:13:d8:
e5:90:22:2a:e2:29:65:72:50:aa:c1:c2:c8:6c:f3:
d0:43:5c:96:91:81:17:d4:ae:fc:dd:91:6c:36:1b:
b8:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:B6:6F:3D:1D:17:7F:06:40:20:A8:A6:C4:16:7F:4B:09:9F:DC:3A
X509v3 Authority Key Identifier:
keyid:C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3230312e3233342e31392e302f32342d3234203d3e203532323535.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.234.19.0/24
Signature Algorithm: sha256WithRSAEncryption
86:61:cd:20:f5:83:5b:d2:7a:06:e8:63:32:c3:04:d4:0b:5d:
85:c1:cc:75:78:06:32:83:c9:7e:9d:94:bd:a4:86:57:f4:ab:
cb:d9:73:7e:59:d4:18:d2:df:d7:99:2d:35:83:d8:e4:c3:5b:
38:27:32:a4:cb:21:c1:88:e6:61:11:d2:b3:29:9b:4c:63:81:
c7:2c:5a:82:e6:20:a3:25:2a:c9:0e:17:f7:0f:48:07:37:4d:
34:72:68:1b:02:ff:3c:65:9f:b6:e8:ab:62:84:10:9c:0b:32:
02:f4:12:ae:e2:5f:5b:e5:0c:4e:d8:56:c5:9e:57:21:4c:ca:
a8:af:ad:fa:21:38:7a:17:ae:b4:9f:45:a1:70:f2:34:4b:96:
b9:d4:50:f2:ca:91:5d:bd:95:ed:74:d2:f6:5d:1f:ee:60:34:
d2:ee:10:22:53:59:19:23:07:25:3b:1d:0f:d2:ff:b4:31:b2:
f3:9c:6e:f0:e1:3b:0b:b7:f8:f4:c4:66:ac:ed:3b:c5:b1:a6:
e9:c7:a6:8d:6f:0e:4f:d7:ae:2b:c3:43:ec:9a:3c:40:01:5a:
d1:cb:d8:cd:bc:fd:4e:84:69:05:f9:99:7c:be:68:ba:6e:69:
eb:ae:8f:3e:c4:4a:4d:eb:8a:a2:25:ce:5e:bf:8b:53:2f:ab:
52:96:29:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 02:38:40 2025 by rpki-client