Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/3139302e3133312e3139352e302f32342d3234203d3e20323632313931.roa
File: 3139302e3133312e3139352e302f32342d3234203d3e20323632313931.roa (raw, json)
Hash identifier: 7ijOsQlkJYl+c2FIxW7kQOBmi1SsH4A/p5C6p6PHflQ=
Subject key identifier: F4:01:72:22:11:BC:29:36:A3:A7:A9:3A:F3:6D:7E:2C:CD:4A:85:3D
Certificate issuer: /CN=85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD
Certificate serial: 1479695CF7900514B959F23348B2848AB98481A4
Authority key identifier: 85:D9:E7:D9:BE:EF:ED:0B:9E:18:8D:B7:E8:CC:3B:64:89:06:6D:CD
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/3139302e3133312e3139352e302f32342d3234203d3e20323632313931.roa
Signing time: Tue 04 Feb 2025 20:04:38 +0000
ROA not before: Tue 04 Feb 2025 19:59:38 +0000
ROA not after: Tue 03 Feb 2026 20:04:38 +0000
asID: 262191
IP address blocks: 190.131.195.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:79:69:5c:f7:90:05:14:b9:59:f2:33:48:b2:84:8a:b9:84:81:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD
Validity
Not Before: Feb 4 19:59:38 2025 GMT
Not After : Feb 3 20:04:38 2026 GMT
Subject: CN=F401722211BC2936A3A7A93AF36D7E2CCD4A853D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:2a:a7:0e:2c:70:da:09:65:55:12:70:77:19:
c8:5d:07:31:a5:57:1a:76:4c:04:5c:00:f1:84:a1:
ce:dc:dc:c9:d0:de:a3:85:95:ef:83:8f:4e:62:4a:
88:35:a3:b3:5c:12:14:b5:c7:45:66:38:06:3f:84:
d2:42:bd:3f:2f:6f:3c:66:5a:63:05:7f:1f:1d:43:
55:0c:77:cd:d4:fb:d8:a7:69:bf:4d:c3:9c:69:bd:
47:96:d0:4d:35:4e:b9:64:ff:fe:4f:c4:b4:44:d8:
e0:c7:70:c1:c4:24:2e:41:20:8f:91:ec:85:d2:08:
06:d1:46:ac:a7:40:b0:9b:61:23:75:b0:d4:54:39:
96:d6:bc:34:2f:ab:56:c5:a3:b7:d1:b9:90:dd:ab:
f8:e0:6a:d0:ab:c0:92:ff:7d:f8:2d:67:de:83:4c:
4a:f0:6a:01:ed:f6:36:21:68:7f:ed:90:9a:0e:a2:
6b:73:55:c5:63:45:71:e1:94:6d:97:a2:7f:25:4a:
99:64:76:9d:af:09:a3:5b:97:53:b0:15:23:fc:a9:
a1:57:7c:e9:de:56:73:fb:06:86:d4:8c:d8:77:30:
b4:c3:6b:42:6a:5d:c5:36:39:27:37:2d:42:56:bb:
23:30:32:87:65:ce:ae:fa:2b:05:f3:74:fc:ab:a5:
8f:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:01:72:22:11:BC:29:36:A3:A7:A9:3A:F3:6D:7E:2C:CD:4A:85:3D
X509v3 Authority Key Identifier:
keyid:85:D9:E7:D9:BE:EF:ED:0B:9E:18:8D:B7:E8:CC:3B:64:89:06:6D:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/3139302e3133312e3139352e302f32342d3234203d3e20323632313931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.131.195.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:b6:6e:0d:c3:87:74:6a:7e:f5:e2:85:c4:10:1d:05:0a:27:
73:d5:b8:aa:59:b7:67:e3:38:43:99:c0:c0:6a:a5:7f:d9:13:
7f:dc:78:b6:01:e1:d6:4f:dc:18:d0:0b:94:ca:10:d9:f3:79:
06:6c:20:c4:d2:b6:42:b6:e9:15:3a:e1:2d:20:71:79:54:30:
a7:17:9c:98:ff:85:65:dd:a7:20:c0:43:33:94:0d:b2:62:aa:
c1:19:44:f1:26:92:9d:fa:f8:b4:b5:9b:e0:d0:58:75:ad:cc:
15:5f:bb:77:f0:11:7d:91:66:94:8f:a7:06:7d:22:dd:9d:cd:
e8:04:aa:ba:e7:10:48:5b:65:b5:9b:c2:0c:5a:2d:ac:3e:28:
bb:7b:0e:d4:1c:50:2e:c4:6e:2d:c2:32:6f:ab:af:74:49:b2:
5c:6d:fe:83:35:01:04:ec:32:03:4e:dd:7b:9b:c1:ce:d6:5a:
40:20:ae:e2:b5:2f:06:3e:bc:5f:9e:c9:66:9f:e9:4a:7e:01:
2b:e5:54:3c:ef:2b:c6:99:7c:ee:09:81:a7:52:f4:1f:2a:50:
19:62:18:90:dc:fa:1c:17:4a:e1:c7:23:3d:00:17:56:9e:0a:
e3:59:68:c5:59:17:f2:b5:d9:7a:bc:b0:bf:3c:65:da:84:92:
35:13:6a:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:40:45 2025 by rpki-client