Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/3230302e3132332e35352e302f32342d3234203d3e203230323037.roa
File: 3230302e3132332e35352e302f32342d3234203d3e203230323037.roa (raw, json)
Hash identifier: idy9LefR83W1xkg42BLEbsJS8z43yNyJpl/+BbYjSE4=
Subject key identifier: 8E:87:C4:32:96:C0:A8:5C:8E:A3:18:48:61:B3:69:F8:C9:35:D7:80
Certificate issuer: /CN=ED05FF962C1240B2E8CC68B4EA41D187C5509591
Certificate serial: 63703EAB72A437BAAC1B19D9DBBF103CAB4954E4
Authority key identifier: ED:05:FF:96:2C:12:40:B2:E8:CC:68:B4:EA:41:D1:87:C5:50:95:91
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/3230302e3132332e35352e302f32342d3234203d3e203230323037.roa
Signing time: Sun 16 Feb 2025 04:05:00 +0000
ROA not before: Sun 16 Feb 2025 04:00:00 +0000
ROA not after: Sun 15 Feb 2026 04:05:00 +0000
asID: 20207
IP address blocks: 200.123.55.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:70:3e:ab:72:a4:37:ba:ac:1b:19:d9:db:bf:10:3c:ab:49:54:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ED05FF962C1240B2E8CC68B4EA41D187C5509591
Validity
Not Before: Feb 16 04:00:00 2025 GMT
Not After : Feb 15 04:05:00 2026 GMT
Subject: CN=8E87C43296C0A85C8EA3184861B369F8C935D780
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:2d:c1:bd:54:08:93:6a:56:1c:f0:83:fa:7f:
10:de:0e:e5:10:d4:b6:cc:2e:55:02:6b:0a:a2:cc:
1d:05:b7:b8:27:a9:87:f7:d9:cf:0e:aa:e0:99:ca:
d2:53:b3:c9:86:c0:0d:69:dd:89:b9:6e:86:f3:a6:
c2:3d:87:08:ae:96:b4:24:a8:8b:cf:30:95:39:46:
24:e9:3b:54:29:8e:35:73:12:6f:51:7d:7f:03:62:
30:09:50:d9:5b:99:72:4f:00:80:eb:95:f1:2b:5e:
71:9e:34:dc:41:7d:1a:12:51:3f:2a:09:f6:c1:f5:
a4:03:48:77:e9:12:3b:00:60:1e:42:76:59:92:27:
89:e0:73:d6:4e:e1:82:2f:17:ac:60:06:e1:74:5d:
9c:1b:11:1a:c9:de:fe:f9:14:56:40:1a:42:aa:d8:
41:ec:1c:8a:b2:9c:46:d1:68:78:ba:a8:e8:81:52:
a7:c9:7b:92:c2:22:fc:ae:c0:1f:e4:73:27:50:6d:
7b:4f:0c:75:03:52:c3:af:2b:93:d0:5b:76:3b:04:
4b:cc:06:d4:1d:e9:3d:0e:41:8d:b0:84:3d:36:93:
bb:9d:3e:6a:86:e7:f2:4e:ed:da:ec:73:a0:f5:4f:
45:c2:51:11:7a:c7:9b:ee:25:4b:68:fc:a4:d8:55:
55:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:87:C4:32:96:C0:A8:5C:8E:A3:18:48:61:B3:69:F8:C9:35:D7:80
X509v3 Authority Key Identifier:
keyid:ED:05:FF:96:2C:12:40:B2:E8:CC:68:B4:EA:41:D1:87:C5:50:95:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/3230302e3132332e35352e302f32342d3234203d3e203230323037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.123.55.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:b8:3e:7e:78:17:bf:49:38:74:50:cb:f0:9f:d2:0c:8a:a0:
de:47:8d:a5:a0:a1:a3:72:28:77:7f:21:ff:93:32:3a:33:62:
58:27:60:fc:ed:fc:07:a4:ff:02:57:56:39:0a:15:dd:06:b7:
47:c0:1d:bd:2b:a4:c8:34:3b:dd:64:7c:7a:c9:9b:45:03:a4:
9d:b5:0d:42:3c:e6:7e:86:8f:10:23:35:3a:0b:4a:28:d5:20:
d9:b4:af:27:17:2d:4e:9f:47:92:2c:18:6f:b1:60:42:df:26:
df:7c:3b:f1:a9:2f:d9:1a:96:ea:d7:1f:ed:9d:a9:d4:ab:d8:
99:d3:3a:0b:02:33:20:74:2f:bd:dd:c4:fe:82:92:13:31:53:
f3:ee:08:7f:31:5e:fa:d6:cc:bc:e8:23:54:d4:3f:5c:25:2d:
be:ff:43:3f:4d:5a:7d:16:c4:c4:4a:46:dc:1c:c6:92:aa:ee:
10:f6:a5:f1:aa:93:6e:36:a5:2c:1c:cc:f1:fc:a1:47:e1:99:
1c:93:c6:4c:cf:43:2e:7f:d9:fa:c4:0b:48:8a:2f:a0:21:6c:
f4:44:4e:f0:1b:db:cd:4c:4e:97:dc:7a:1c:ca:0d:bf:75:30:
27:b9:09:14:b6:f0:b6:1d:20:56:8d:62:2b:d7:ae:91:c4:9d:
4c:e5:45:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:52:32 2025 by rpki-client