Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/3230302e35382e3132302e302f32342d3234203d3e203237383233.roa
File: 3230302e35382e3132302e302f32342d3234203d3e203237383233.roa (raw, json)
Hash identifier: H0KdGXi+KiUMsBihNn2ITNtxaz5rYXUhzrc7DQY4Vug=
Subject key identifier: DD:13:7A:A1:67:F4:8E:CF:62:3B:9C:36:57:66:EA:3D:27:73:AA:60
Certificate issuer: /CN=A5C31DCA4062FBA8FF4175C518EF2246CF570D80
Certificate serial: 6043226FC23983BDB8C4723F7900D6C098DDCFA6
Authority key identifier: A5:C3:1D:CA:40:62:FB:A8:FF:41:75:C5:18:EF:22:46:CF:57:0D:80
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/3230302e35382e3132302e302f32342d3234203d3e203237383233.roa
Signing time: Tue 04 Feb 2025 18:08:19 +0000
ROA not before: Tue 04 Feb 2025 18:03:19 +0000
ROA not after: Tue 03 Feb 2026 18:08:19 +0000
asID: 27823
IP address blocks: 200.58.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:43:22:6f:c2:39:83:bd:b8:c4:72:3f:79:00:d6:c0:98:dd:cf:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A5C31DCA4062FBA8FF4175C518EF2246CF570D80
Validity
Not Before: Feb 4 18:03:19 2025 GMT
Not After : Feb 3 18:08:19 2026 GMT
Subject: CN=DD137AA167F48ECF623B9C365766EA3D2773AA60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:dd:14:7b:0a:ff:e7:0c:b4:88:4b:5f:24:5b:
28:d5:d3:fb:56:b4:9a:42:f0:c4:e7:18:2a:6d:d8:
f9:9a:d8:7b:82:9e:f3:14:04:70:85:e8:c9:28:dc:
74:35:ad:de:c3:a5:0c:92:26:41:ca:95:61:5a:b9:
29:8e:35:54:09:13:e7:09:ee:8d:e2:d1:1e:d4:09:
bb:a4:c6:66:7e:e3:c0:d3:ce:8b:55:e9:1f:29:2a:
b2:ef:65:0e:65:af:82:bb:07:6b:c1:b4:cd:64:35:
a8:d2:bb:8d:13:e5:9c:23:b4:db:a9:92:20:08:52:
be:6a:5b:92:ae:a1:de:4b:66:ca:ee:82:6b:e7:c3:
61:74:ee:ea:4a:f8:87:0b:b0:98:42:89:84:ef:e3:
0c:0c:9d:93:1d:64:2d:61:22:f5:c7:5a:51:8a:ad:
7a:e6:c4:db:1b:35:07:33:52:02:8a:1e:63:97:3d:
85:cb:a8:37:18:73:7d:8e:f2:5b:a6:ce:55:9a:3f:
cd:1a:d5:a6:b8:31:8d:c2:2b:d5:44:52:32:a8:03:
d2:f8:a3:83:8f:4a:68:09:e8:04:be:05:66:91:86:
67:d8:f8:7a:42:4b:b7:78:22:af:58:b2:f3:62:64:
74:47:d5:12:22:d4:1d:e5:a4:0e:02:1b:e7:92:bf:
9a:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:13:7A:A1:67:F4:8E:CF:62:3B:9C:36:57:66:EA:3D:27:73:AA:60
X509v3 Authority Key Identifier:
keyid:A5:C3:1D:CA:40:62:FB:A8:FF:41:75:C5:18:EF:22:46:CF:57:0D:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/3230302e35382e3132302e302f32342d3234203d3e203237383233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.58.120.0/24
Signature Algorithm: sha256WithRSAEncryption
04:ef:f3:7c:99:57:1b:f8:47:20:aa:be:25:33:df:1f:6e:aa:
0c:fd:7f:e3:91:b8:d9:17:40:e5:f0:cb:c6:77:a8:f7:1f:0d:
1b:02:32:c4:7c:b2:42:6e:68:fa:00:16:f9:7f:c4:b9:3d:62:
cb:bf:d9:56:0d:b9:bd:a4:b9:6e:df:9b:63:24:1b:50:06:76:
0a:13:e2:da:3e:08:9b:11:10:6e:ae:2a:73:c1:d9:ff:cb:f4:
88:35:8c:82:f5:f9:04:2b:87:49:64:23:c1:f7:86:f7:d7:de:
76:26:59:1f:87:e2:c2:53:e1:68:43:93:c4:a9:fd:69:35:a3:
c3:50:2f:7d:c8:17:d2:3f:64:3e:7c:7e:1c:2e:28:77:21:01:
a5:a6:c5:8a:7d:23:26:b0:e1:c2:47:17:b8:94:f0:93:01:e8:
96:78:58:7c:fe:57:80:2d:66:39:6c:c3:3f:8d:5b:6d:82:91:
dc:69:0d:d5:1e:ff:92:73:8a:e8:b6:1c:c4:cd:73:9b:ba:93:
d5:24:d0:63:3d:ba:85:8d:6d:f6:3f:07:95:08:f7:db:6b:62:
01:f7:1d:20:98:39:85:79:cc:5b:1c:72:25:5a:0c:4d:01:dd:
02:17:d7:b8:75:69:40:10:23:6a:87:2d:0c:b3:da:26:14:1b:
de:eb:bc:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:50:55 2025 by rpki-client