Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/3136382e3232382e3132362e302f32342d3234203d3e20323632313931.roa
File: 3136382e3232382e3132362e302f32342d3234203d3e20323632313931.roa (raw, json)
Hash identifier: j/rtRsjjh4g/bqOVIjB5JHVZR+aEH84i8natwJeKOS8=
Subject key identifier: 5D:50:63:61:A8:75:2A:F6:F3:FC:20:09:C5:73:1D:1A:18:73:0B:37
Certificate issuer: /CN=85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD
Certificate serial: 1584FCE427E67972BF2C16CD1E21CFDCEDE6C86D
Authority key identifier: 85:D9:E7:D9:BE:EF:ED:0B:9E:18:8D:B7:E8:CC:3B:64:89:06:6D:CD
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/3136382e3232382e3132362e302f32342d3234203d3e20323632313931.roa
Signing time: Tue 04 Feb 2025 20:04:37 +0000
ROA not before: Tue 04 Feb 2025 19:59:37 +0000
ROA not after: Tue 03 Feb 2026 20:04:37 +0000
asID: 262191
IP address blocks: 168.228.126.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:84:fc:e4:27:e6:79:72:bf:2c:16:cd:1e:21:cf:dc:ed:e6:c8:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD
Validity
Not Before: Feb 4 19:59:37 2025 GMT
Not After : Feb 3 20:04:37 2026 GMT
Subject: CN=5D506361A8752AF6F3FC2009C5731D1A18730B37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:61:4b:1a:cc:ab:c8:32:4a:9b:9f:59:2e:b3:
7f:ea:80:d3:f5:d2:e3:6a:cd:e8:1a:91:bc:e8:f0:
76:23:85:e6:c0:b0:df:b5:ef:ff:6b:c3:2a:d0:ea:
90:f0:a2:4e:c3:cf:50:f3:c5:b2:ce:bd:aa:10:ce:
93:84:e0:9f:19:67:c6:ff:65:28:f8:48:29:3c:3d:
69:55:ea:1e:5d:a1:0e:c6:5c:a6:d5:3d:56:d7:7b:
01:fd:13:3e:f7:05:95:f8:37:be:4a:ab:49:a1:36:
52:34:9d:15:56:90:88:a0:f8:99:f7:34:7e:cd:ca:
50:f7:f0:38:93:14:34:c7:08:88:90:b3:0c:ea:0f:
35:39:04:7d:f5:32:27:58:e8:f8:64:a1:e0:1f:3e:
7e:16:e7:c1:49:1d:11:2f:c1:8d:4c:da:01:70:30:
8b:4e:3f:bd:68:ee:4b:78:0f:94:26:79:01:18:d6:
fd:7c:a5:e5:0f:41:ea:b4:7d:73:91:22:d8:cc:17:
2b:7d:b7:b9:1a:04:7a:74:d5:05:58:d7:37:c1:95:
41:84:fc:52:0d:9e:c1:da:41:f9:0d:bc:7e:59:3e:
b6:da:bd:3c:fb:07:79:28:2e:1c:ea:3f:b6:e1:b2:
2b:d7:29:88:f5:9f:1c:ab:79:93:8d:65:ce:9a:5c:
15:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:50:63:61:A8:75:2A:F6:F3:FC:20:09:C5:73:1D:1A:18:73:0B:37
X509v3 Authority Key Identifier:
keyid:85:D9:E7:D9:BE:EF:ED:0B:9E:18:8D:B7:E8:CC:3B:64:89:06:6D:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/3136382e3232382e3132362e302f32342d3234203d3e20323632313931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.228.126.0/24
Signature Algorithm: sha256WithRSAEncryption
26:2f:26:58:56:90:cf:d6:99:a8:e1:38:51:52:9d:0a:c6:1a:
df:da:36:a0:e5:46:a2:46:34:0f:87:3b:8f:26:70:e9:5b:6f:
8f:bb:bb:5d:e3:8f:7d:1b:53:c0:2e:9e:1b:c1:f6:91:3b:e1:
33:98:90:7b:71:d7:fc:2e:88:5d:7b:36:6c:e8:c6:eb:88:ca:
60:34:34:98:5b:9a:13:cf:1a:bc:b2:04:78:5a:40:78:d6:b1:
d4:33:eb:eb:6a:77:94:b7:c4:76:9b:17:19:bf:fd:7b:6a:71:
75:1e:28:7e:7a:fd:85:26:d9:51:af:65:69:07:c8:11:79:83:
d6:04:71:1f:19:aa:76:e2:b4:3d:71:86:12:0d:cc:75:35:2a:
eb:67:1b:95:43:8a:fb:e6:d2:25:59:52:49:e4:9f:af:32:26:
60:58:65:b8:20:0f:a0:4c:a9:f1:ec:af:87:76:b4:1e:6d:83:
a2:05:bf:ec:35:54:79:9a:cc:ef:9b:45:a2:48:0f:9c:52:f4:
39:ae:93:a7:ed:56:78:68:34:fd:5e:c4:b8:92:49:78:65:12:
31:72:ab:7e:35:94:59:71:a1:37:61:a8:cf:46:12:f6:4d:8d:
f3:2f:46:56:09:ff:bc:bb:ad:1a:d5:f2:ee:c1:ad:2f:06:01:
38:19:14:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 03:02:28 2025 by rpki-client