Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/18B7D3007F0EE83FA3973E63E4AB5AE1AF733E8118FA67C62AA932BD2F32C4FB/0/3133382e3132312e3234302e302f32322d3234203d3e20323633373436.roa
File: 3133382e3132312e3234302e302f32322d3234203d3e20323633373436.roa (raw, json)
Hash identifier: k+jGg2PubxRLOPfDOyEghApeM5Txmbat9Vsc7BjusrE=
Subject key identifier: F6:2F:A5:3C:76:34:3D:EF:5E:A5:3C:AB:7F:74:82:A7:64:41:08:2F
Certificate issuer: /CN=DB96EF9719DEAB2F806B872EA360985A830AD8E5
Certificate serial: 4BDEF920C49D3CE70E48B943CE8427FE018F59
Authority key identifier: DB:96:EF:97:19:DE:AB:2F:80:6B:87:2E:A3:60:98:5A:83:0A:D8:E5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB96EF9719DEAB2F806B872EA360985A830AD8E5.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/18B7D3007F0EE83FA3973E63E4AB5AE1AF733E8118FA67C62AA932BD2F32C4FB/0/3133382e3132312e3234302e302f32322d3234203d3e20323633373436.roa
Signing time: Tue 04 Feb 2025 18:15:11 +0000
ROA not before: Tue 04 Feb 2025 18:10:11 +0000
ROA not after: Tue 03 Feb 2026 18:15:11 +0000
asID: 263746
IP address blocks: 138.121.240.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:de:f9:20:c4:9d:3c:e7:0e:48:b9:43:ce:84:27:fe:01:8f:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DB96EF9719DEAB2F806B872EA360985A830AD8E5
Validity
Not Before: Feb 4 18:10:11 2025 GMT
Not After : Feb 3 18:15:11 2026 GMT
Subject: CN=F62FA53C76343DEF5EA53CAB7F7482A76441082F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:f9:7a:a4:c0:e7:82:65:1b:c9:11:bb:c8:35:
ae:d7:ca:37:fd:f9:95:f0:0b:ed:51:d9:05:5f:d9:
ec:bc:bb:bf:ad:32:4d:f6:8c:93:c9:92:6d:ac:5c:
84:b2:6e:a1:5a:6c:d6:c3:24:27:61:04:7a:59:ec:
67:05:99:e7:4a:57:bc:8d:cd:76:d7:9d:1a:a0:5c:
ef:d0:6d:f3:d1:4b:52:94:11:25:46:84:2c:d0:c9:
35:f1:65:c1:64:15:d3:9c:41:ba:ae:71:db:89:d0:
b2:e3:79:5d:0f:aa:b8:2a:0b:be:a0:33:d7:d0:c0:
8b:ba:20:b0:95:35:29:22:ca:40:63:46:48:eb:bd:
d3:c2:0d:c0:7f:a4:d1:9d:96:11:66:3f:1f:9f:20:
01:dd:8f:9d:0a:53:2a:9f:6d:99:9e:83:c4:45:fc:
c5:7f:ed:99:da:41:ce:f6:78:b6:24:bb:36:8c:5f:
a4:30:99:ce:52:07:3e:3a:eb:00:8f:c2:7d:b4:92:
e3:f3:0c:43:18:a1:09:4b:ca:b6:c3:ef:70:2d:ff:
3c:ae:1e:78:65:07:15:90:cf:be:e8:c5:e8:8a:53:
55:42:31:5a:c0:aa:5f:bc:1d:1c:62:a4:80:fd:66:
86:4a:91:ea:4f:c8:58:ae:1f:5d:5c:33:1d:89:7b:
6d:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:2F:A5:3C:76:34:3D:EF:5E:A5:3C:AB:7F:74:82:A7:64:41:08:2F
X509v3 Authority Key Identifier:
keyid:DB:96:EF:97:19:DE:AB:2F:80:6B:87:2E:A3:60:98:5A:83:0A:D8:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/18B7D3007F0EE83FA3973E63E4AB5AE1AF733E8118FA67C62AA932BD2F32C4FB/0/DB96EF9719DEAB2F806B872EA360985A830AD8E5.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB96EF9719DEAB2F806B872EA360985A830AD8E5.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/18B7D3007F0EE83FA3973E63E4AB5AE1AF733E8118FA67C62AA932BD2F32C4FB/0/3133382e3132312e3234302e302f32322d3234203d3e20323633373436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.121.240.0/22
Signature Algorithm: sha256WithRSAEncryption
11:9b:d6:ce:a7:46:ab:2d:a7:f9:1a:10:cd:2b:f4:1b:c9:d6:
01:04:9d:8e:3b:bd:26:c5:54:eb:b1:12:6a:19:52:37:8d:55:
bd:95:92:09:fd:fa:9e:97:73:0b:c8:e1:0f:f5:eb:c5:cc:1b:
07:4b:3e:24:80:95:aa:c1:f2:ec:d4:84:5f:9d:cd:fa:b5:aa:
d8:a3:90:e1:51:c9:f0:a3:79:ac:e2:b1:20:80:b6:59:40:9f:
02:2f:c2:37:70:33:4a:9d:d3:c7:3b:14:75:33:e1:ba:5e:83:
6d:46:f0:25:ec:9a:76:54:e5:9d:c8:f6:bc:23:98:b9:03:7e:
3e:a5:af:26:75:1d:2a:79:81:04:76:b9:e6:c1:cf:f3:18:0d:
b6:bb:98:2a:4e:49:5e:80:55:5d:d2:6a:04:11:9d:eb:91:64:
ce:6a:e9:9b:71:3f:d6:61:5b:2d:a9:ca:17:9c:3e:20:9f:0b:
07:11:0b:c2:02:b3:37:b4:f6:ec:9a:b6:aa:aa:da:d4:96:a2:
ea:b7:13:67:bf:49:88:fc:b6:70:5d:b0:0a:96:bd:04:57:d9:
44:4b:19:b0:9c:15:48:d1:8c:75:00:61:01:3f:d7:3a:f2:35:
92:91:95:93:4c:cc:98:de:ce:b7:13:af:a8:73:45:cc:aa:70:
64:a4:f2:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:57:46 2025 by rpki-client