Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/07C0096B91EEE14598A448131C1F2250BEC9AE9D2F5809CE4A43201C1092A294/0/323830333a636332303a3a2f33322d3332203d3e203532343638.roa
File: 323830333a636332303a3a2f33322d3332203d3e203532343638.roa (raw, json)
Hash identifier: Rc5GyfeKiWedtLYcpadlhz2T0yhmuDLKu5Lom5UEwf0=
Subject key identifier: DE:16:84:16:FF:27:51:91:CC:03:A8:01:DB:D9:53:F7:61:BC:3C:B8
Certificate issuer: /CN=DD74393AEC4E41A41C6F1FD02E0D9D2806ED9D5A
Certificate serial: 2F6DF4B4F313EAAD5D6365DFF336D9C86E0A9339
Authority key identifier: DD:74:39:3A:EC:4E:41:A4:1C:6F:1F:D0:2E:0D:9D:28:06:ED:9D:5A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DD74393AEC4E41A41C6F1FD02E0D9D2806ED9D5A.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/07C0096B91EEE14598A448131C1F2250BEC9AE9D2F5809CE4A43201C1092A294/0/323830333a636332303a3a2f33322d3332203d3e203532343638.roa
Signing time: Tue 04 Feb 2025 18:37:27 +0000
ROA not before: Tue 04 Feb 2025 18:32:27 +0000
ROA not after: Tue 03 Feb 2026 18:37:27 +0000
asID: 52468
IP address blocks: 2803:cc20::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:6d:f4:b4:f3:13:ea:ad:5d:63:65:df:f3:36:d9:c8:6e:0a:93:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DD74393AEC4E41A41C6F1FD02E0D9D2806ED9D5A
Validity
Not Before: Feb 4 18:32:27 2025 GMT
Not After : Feb 3 18:37:27 2026 GMT
Subject: CN=DE168416FF275191CC03A801DBD953F761BC3CB8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:0d:e0:54:88:60:50:f5:cf:04:7b:bd:45:67:
86:2a:07:63:ce:a0:aa:b8:ee:02:ef:ae:61:a1:12:
fe:e1:a9:eb:70:89:2e:91:9d:d2:8e:a7:d0:aa:4f:
6c:f8:19:d0:21:79:8e:c6:59:f2:1a:48:27:20:01:
c4:2b:58:32:cc:60:6a:fc:34:e3:72:b9:25:9f:da:
27:51:f7:da:25:5a:f0:52:69:e5:e5:92:21:46:2c:
03:40:8d:02:e1:04:05:e3:b6:d4:06:8f:c6:32:d1:
ab:e2:97:3f:ca:f3:33:0b:ba:ae:2a:34:f4:4f:b4:
27:b7:3f:43:15:1c:c7:d5:1c:52:cb:9d:66:89:6e:
e8:1e:ce:66:d1:e3:b9:b1:87:9c:94:39:1b:77:a1:
58:f8:47:3d:ba:a1:6e:ef:ae:da:aa:47:3b:61:e8:
f3:60:9d:74:d0:f6:86:f5:49:6b:4d:c8:40:de:ef:
d7:30:21:51:c8:08:cc:35:29:9c:a4:81:7a:bf:23:
12:07:79:7b:39:9f:f0:66:8b:98:95:ce:65:07:01:
a1:15:07:f8:54:f4:eb:05:2d:ff:94:14:d0:6e:de:
aa:20:a0:1d:f9:d9:49:0c:60:21:63:b7:21:7b:5a:
ae:07:11:03:c4:43:97:7f:5e:19:47:15:5c:f2:9f:
54:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:16:84:16:FF:27:51:91:CC:03:A8:01:DB:D9:53:F7:61:BC:3C:B8
X509v3 Authority Key Identifier:
keyid:DD:74:39:3A:EC:4E:41:A4:1C:6F:1F:D0:2E:0D:9D:28:06:ED:9D:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/07C0096B91EEE14598A448131C1F2250BEC9AE9D2F5809CE4A43201C1092A294/0/DD74393AEC4E41A41C6F1FD02E0D9D2806ED9D5A.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DD74393AEC4E41A41C6F1FD02E0D9D2806ED9D5A.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/07C0096B91EEE14598A448131C1F2250BEC9AE9D2F5809CE4A43201C1092A294/0/323830333a636332303a3a2f33322d3332203d3e203532343638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:cc20::/32
Signature Algorithm: sha256WithRSAEncryption
3d:46:8d:ad:2f:33:54:b7:da:76:ef:43:b3:00:1f:6d:e9:c0:
3a:27:bd:c6:d3:58:2a:a2:85:93:96:71:13:ad:20:42:8b:13:
0d:d8:b4:8e:94:89:62:13:16:fe:30:0c:13:e4:d3:95:a4:c9:
4a:cc:88:aa:24:05:bb:b1:61:02:89:e7:28:18:41:86:10:6e:
56:ab:eb:f4:32:95:a7:c5:7b:47:4d:59:d2:84:6b:6d:a9:61:
f1:29:eb:5d:2d:c2:45:d7:95:89:f5:a9:07:a5:61:c0:f0:cf:
80:5e:78:17:48:3d:9f:32:18:16:d4:67:d8:ac:a8:5c:b0:e8:
40:0a:a5:75:3c:7c:87:e6:e2:6d:3f:5c:00:e2:50:f5:59:20:
fa:96:81:04:e3:71:1c:72:13:64:9f:52:ab:4e:dd:0d:dc:5d:
4b:34:42:b7:7b:5c:9f:ee:a9:ed:0d:19:09:ba:6b:30:6e:92:
3e:b9:69:8f:10:c0:ee:76:a8:aa:2e:62:d4:9d:32:19:20:5a:
b4:1e:55:f7:69:f5:3f:9c:69:b8:ea:31:0d:49:7e:ea:da:0c:
88:35:fc:24:b4:49:69:46:8f:44:2f:68:6d:64:5c:38:e7:b9:
91:d7:43:28:44:ee:21:44:c3:4a:14:1c:0a:62:be:d0:dc:dd:
a1:68:21:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:37:13 2025 by rpki-client