Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/117E0F28D7B109643382134A928ADB7D8C131972702EA42A048C2764C80DC7C1/0/3137302e38332e3231362e302f32322d3234203d3e203232373234.roa
File: 3137302e38332e3231362e302f32322d3234203d3e203232373234.roa (raw, json)
Hash identifier: oEDE8tIeiw9g3LimO8fnl1grvxAHKQgXswG0iZhG8OQ=
Subject key identifier: 5F:F9:47:F9:BC:D2:BC:DC:6A:D8:16:95:E5:C4:C5:2C:3A:B5:4F:19
Certificate issuer: /CN=CBE72B8D815E9A3D3D87C10B39ED4169A84AB68F
Certificate serial: 1E1193CAAB119DE70DA828E05425E010B5A3726D
Authority key identifier: CB:E7:2B:8D:81:5E:9A:3D:3D:87:C1:0B:39:ED:41:69:A8:4A:B6:8F
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBE72B8D815E9A3D3D87C10B39ED4169A84AB68F.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/117E0F28D7B109643382134A928ADB7D8C131972702EA42A048C2764C80DC7C1/0/3137302e38332e3231362e302f32322d3234203d3e203232373234.roa
Signing time: Tue 04 Feb 2025 18:16:47 +0000
ROA not before: Tue 04 Feb 2025 18:11:47 +0000
ROA not after: Tue 03 Feb 2026 18:16:47 +0000
asID: 22724
IP address blocks: 170.83.216.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:11:93:ca:ab:11:9d:e7:0d:a8:28:e0:54:25:e0:10:b5:a3:72:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CBE72B8D815E9A3D3D87C10B39ED4169A84AB68F
Validity
Not Before: Feb 4 18:11:47 2025 GMT
Not After : Feb 3 18:16:47 2026 GMT
Subject: CN=5FF947F9BCD2BCDC6AD81695E5C4C52C3AB54F19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ee:55:c9:6d:61:78:d4:40:50:f1:f3:56:16:
27:51:da:07:16:e4:00:09:bd:85:fc:81:96:2d:3f:
d7:f2:4a:a6:7e:46:be:0a:e5:5b:49:4f:12:32:3d:
ad:fb:24:6f:97:1d:4f:4f:1f:7e:d1:1c:8f:05:fb:
be:61:42:3e:93:e7:7c:24:19:27:4f:95:f4:b2:a7:
f9:f1:0d:b8:cd:0c:b2:1f:ed:23:67:a1:0f:93:b2:
9d:97:13:ea:f1:be:1c:a4:f1:60:16:da:37:a7:64:
42:d7:a4:35:2a:fa:35:e9:f2:a5:ec:59:3f:a9:dc:
e7:a2:5f:a5:9f:1d:90:18:7e:10:81:64:49:01:2f:
4e:fb:55:fd:a2:66:5d:c1:49:f0:02:f5:93:2a:ee:
48:1e:e7:33:23:72:82:e5:fb:89:1f:a5:dd:e3:21:
03:53:6e:5b:b6:00:37:96:95:db:75:7b:6a:fd:c5:
14:f5:33:0a:04:f2:32:3e:02:e0:0d:c8:96:fc:d5:
84:89:93:8c:3c:85:52:e2:d7:41:73:a1:ae:ab:ee:
bf:18:b0:d6:f0:a6:3a:33:93:25:46:9f:93:e6:f3:
f5:28:0d:48:43:2c:01:33:38:c6:4a:4d:6d:60:f1:
6c:ce:25:52:6d:66:7c:4b:77:56:4c:a2:59:90:ae:
6d:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:F9:47:F9:BC:D2:BC:DC:6A:D8:16:95:E5:C4:C5:2C:3A:B5:4F:19
X509v3 Authority Key Identifier:
keyid:CB:E7:2B:8D:81:5E:9A:3D:3D:87:C1:0B:39:ED:41:69:A8:4A:B6:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/117E0F28D7B109643382134A928ADB7D8C131972702EA42A048C2764C80DC7C1/0/CBE72B8D815E9A3D3D87C10B39ED4169A84AB68F.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBE72B8D815E9A3D3D87C10B39ED4169A84AB68F.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/117E0F28D7B109643382134A928ADB7D8C131972702EA42A048C2764C80DC7C1/0/3137302e38332e3231362e302f32322d3234203d3e203232373234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.83.216.0/22
Signature Algorithm: sha256WithRSAEncryption
1f:b0:f5:ab:db:ad:ab:8b:58:17:b3:a4:b9:42:79:8b:94:1a:
7a:e8:d3:1d:3a:78:05:53:20:9c:a2:7e:5c:32:85:c4:3b:f4:
05:e8:d6:e7:7f:87:88:f8:28:1c:0c:fc:85:4b:48:f9:76:4c:
ff:b8:55:70:0e:24:3f:c7:95:6a:8d:6e:df:b0:e3:5c:36:34:
91:d7:96:3d:89:4b:0b:d0:85:7b:d5:ed:5b:e5:3f:99:d6:ad:
58:28:1e:3b:dd:00:65:d9:77:7b:07:be:40:69:1e:84:a1:16:
d3:0a:50:5a:4c:a6:d8:2c:3f:37:f9:5f:f3:bd:4f:fb:da:81:
9f:f5:f7:df:e4:da:d1:71:c4:33:ac:ce:9e:b7:f6:c4:3a:95:
3b:18:33:2f:2b:3e:fd:8b:4e:e5:60:06:90:03:4c:36:7d:09:
d2:3c:d0:29:80:2d:7f:aa:fb:6a:f2:b3:c1:62:e8:4e:40:cc:
21:f1:13:1c:09:62:d5:2e:ae:0f:c2:09:27:a7:d0:e1:e6:81:
fc:8f:50:4e:e2:fb:d0:fb:19:ad:50:24:db:63:78:90:0d:96:
28:47:4c:0b:9d:e5:da:b1:12:01:1e:e1:c4:3f:8c:20:80:76:
7c:60:10:b7:60:94:66:4d:03:43:b6:37:c7:4c:98:d8:cb:5f:
31:c4:9b:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:18:08 2025 by rpki-client