Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0D4370C5419038DFAFE42339E6D2362DBF9F48F5A1A225DFD8EDC70969C1C230/0/3136382e3139342e3234332e302f32342d3234203d3e20323634373730.roa
File: 3136382e3139342e3234332e302f32342d3234203d3e20323634373730.roa (raw, json)
Hash identifier: w6VVn4KKqOpUv8zikfjKlOBW76oOj5zVU2KC3qrLWh8=
Subject key identifier: F8:86:4B:E4:37:C4:A3:7E:92:0A:C3:DA:48:A1:7D:1C:68:7C:A4:9D
Certificate issuer: /CN=F7AC0CE553F93FC5CE942F12360E6A144723F82D
Certificate serial: 68F8886B61B62E8E1FFA8CD644A9D8ED9C0FC597
Authority key identifier: F7:AC:0C:E5:53:F9:3F:C5:CE:94:2F:12:36:0E:6A:14:47:23:F8:2D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F7AC0CE553F93FC5CE942F12360E6A144723F82D.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0D4370C5419038DFAFE42339E6D2362DBF9F48F5A1A225DFD8EDC70969C1C230/0/3136382e3139342e3234332e302f32342d3234203d3e20323634373730.roa
Signing time: Tue 04 Feb 2025 18:01:32 +0000
ROA not before: Tue 04 Feb 2025 17:56:32 +0000
ROA not after: Tue 03 Feb 2026 18:01:32 +0000
asID: 264770
IP address blocks: 168.194.243.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:f8:88:6b:61:b6:2e:8e:1f:fa:8c:d6:44:a9:d8:ed:9c:0f:c5:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F7AC0CE553F93FC5CE942F12360E6A144723F82D
Validity
Not Before: Feb 4 17:56:32 2025 GMT
Not After : Feb 3 18:01:32 2026 GMT
Subject: CN=F8864BE437C4A37E920AC3DA48A17D1C687CA49D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:17:29:d0:7b:c7:72:86:55:65:ff:f6:89:33:
e8:2c:56:05:22:6f:67:6e:e5:f5:08:18:b2:6f:10:
f5:b7:27:51:0d:ad:51:b3:f2:48:22:f6:b1:fe:81:
08:44:eb:fe:5d:2c:e6:8b:5e:af:c2:59:12:24:64:
05:59:bb:50:ec:fa:5c:d6:13:58:08:de:72:d8:49:
6a:81:25:41:bd:e7:2a:09:fa:79:73:0f:58:fa:3c:
15:6f:2e:be:18:18:27:0b:bd:3c:f5:81:a4:f5:6c:
ac:e2:9c:4d:07:ec:a0:e7:b1:01:4e:d8:7d:f0:ee:
13:9f:1f:d3:4e:74:a0:8c:26:c1:69:17:60:1c:cf:
86:82:0e:f0:6b:a5:1a:65:e6:5a:f5:7d:a6:18:3e:
af:ad:78:3a:45:bd:6e:15:43:65:80:5c:98:0a:9b:
af:8a:5c:b4:9c:d1:d3:3c:85:27:c2:8e:04:53:a1:
b1:97:39:72:4a:c5:d3:59:a0:4e:c7:83:e0:43:98:
a3:47:81:89:5f:0e:96:81:c9:06:d1:ef:02:ce:cf:
b8:82:2c:a7:55:54:4a:b3:da:d1:2c:40:10:6f:3a:
81:13:90:2b:ec:2c:31:c5:d3:5b:d9:ad:50:94:05:
9a:97:30:33:99:72:dd:81:5c:a3:d7:71:63:a1:25:
9d:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:86:4B:E4:37:C4:A3:7E:92:0A:C3:DA:48:A1:7D:1C:68:7C:A4:9D
X509v3 Authority Key Identifier:
keyid:F7:AC:0C:E5:53:F9:3F:C5:CE:94:2F:12:36:0E:6A:14:47:23:F8:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/0D4370C5419038DFAFE42339E6D2362DBF9F48F5A1A225DFD8EDC70969C1C230/0/F7AC0CE553F93FC5CE942F12360E6A144723F82D.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F7AC0CE553F93FC5CE942F12360E6A144723F82D.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0D4370C5419038DFAFE42339E6D2362DBF9F48F5A1A225DFD8EDC70969C1C230/0/3136382e3139342e3234332e302f32342d3234203d3e20323634373730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.194.243.0/24
Signature Algorithm: sha256WithRSAEncryption
26:e3:a7:40:6b:10:ec:1a:be:ba:c7:36:d5:82:1a:0b:c4:d3:
ae:20:f4:4c:27:34:c1:3c:9a:5b:fe:f2:25:d5:34:cd:7f:61:
ac:8f:97:9c:5f:90:d2:91:42:5f:a9:72:96:d5:8e:0a:d8:a2:
ea:8f:c0:a2:20:07:9c:ae:24:63:cb:f7:fc:89:48:ff:15:52:
88:d6:ae:62:21:a1:91:0f:2f:ad:86:fd:3d:de:14:50:d9:56:
3c:f9:7e:f0:8b:83:e6:4b:b0:0b:e1:ae:30:c1:36:1b:bb:51:
58:65:4c:18:58:7c:da:0f:68:41:a2:66:9b:81:0c:e0:e0:ec:
d6:b9:c9:65:9b:da:02:e5:eb:d1:23:f9:9f:d7:69:5e:2e:f2:
2d:67:82:fd:6d:96:6e:4c:51:21:64:f0:05:cf:e1:bb:11:2c:
99:30:1c:d9:63:df:da:c7:c6:27:51:5d:c1:39:6a:a6:9f:6e:
8f:28:b5:41:9c:ad:b3:25:76:7c:d8:d6:95:23:08:1e:a3:95:
49:10:d7:b7:38:d9:de:dd:4d:26:2b:e9:19:d3:74:c3:63:59:
ad:a6:21:a0:15:bf:f6:bf:4c:e3:31:34:75:76:bc:b8:ed:0c:
a6:8b:0d:fe:4b:e1:ac:a9:7c:b7:50:ba:61:88:d1:84:93:f9:
30:a1:82:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:55:09 2025 by rpki-client