Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1DA1B251A5AC65CE3FF4424A1DE44D319A1EB9303B549C7514E808292E869FD7/0/3230372e3139312e3137352e302f32342d3234203d3e203236363137.roa
File: 3230372e3139312e3137352e302f32342d3234203d3e203236363137.roa (raw, json)
Hash identifier: oqXUp2Vr128XcsuUHVQxS13y4gqDwyxVSIJT3rApjhI=
Subject key identifier: 9D:C2:DE:B7:5B:8D:2D:5F:AC:87:F2:72:92:8D:A8:7B:D8:F0:F0:88
Certificate issuer: /CN=11608D0E6066566C8B39881F7F4F27D38D7F38FE
Certificate serial: 42709D1ABFD24B4935EE5153378BB3A4C8343DD2
Authority key identifier: 11:60:8D:0E:60:66:56:6C:8B:39:88:1F:7F:4F:27:D3:8D:7F:38:FE
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/11608D0E6066566C8B39881F7F4F27D38D7F38FE.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1DA1B251A5AC65CE3FF4424A1DE44D319A1EB9303B549C7514E808292E869FD7/0/3230372e3139312e3137352e302f32342d3234203d3e203236363137.roa
Signing time: Mon 02 Dec 2024 16:05:00 +0000
ROA not before: Mon 02 Dec 2024 16:00:00 +0000
ROA not after: Mon 01 Dec 2025 16:05:00 +0000
asID: 26617
IP address blocks: 207.191.175.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:70:9d:1a:bf:d2:4b:49:35:ee:51:53:37:8b:b3:a4:c8:34:3d:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11608D0E6066566C8B39881F7F4F27D38D7F38FE
Validity
Not Before: Dec 2 16:00:00 2024 GMT
Not After : Dec 1 16:05:00 2025 GMT
Subject: CN=9DC2DEB75B8D2D5FAC87F272928DA87BD8F0F088
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:d2:a0:c2:13:19:56:07:29:55:67:d0:ba:3d:
8f:a8:13:39:64:44:9d:6d:0f:f5:7f:ff:1f:0e:01:
ed:2d:33:53:e5:45:75:fd:5f:32:e4:fc:5f:0c:03:
1e:29:39:78:2a:70:93:59:2a:33:05:a9:5b:ef:c3:
9d:13:22:9b:22:d5:0c:90:8f:e5:b3:d4:1f:37:08:
a4:2b:b9:6a:c4:c8:77:c9:ac:17:14:a1:b0:71:cb:
a3:07:04:f2:7f:03:9c:a1:42:13:5d:49:eb:7c:70:
5b:3a:55:1c:e3:32:73:17:f0:90:b3:41:2c:50:24:
50:d9:df:89:73:e2:f1:e1:47:8d:37:a6:2d:ed:14:
0d:d9:db:09:5f:ec:61:80:4f:f6:cc:1e:21:71:a2:
3f:a7:58:a7:f6:60:82:5f:bb:0d:7d:06:8f:a4:c5:
9d:3e:bc:ee:c3:e0:04:84:79:d6:09:67:02:64:72:
28:37:01:65:5d:78:d6:02:20:0c:87:71:94:e1:43:
10:78:24:b5:61:d3:7a:c8:d3:b1:34:2a:e7:79:1c:
c3:57:40:a4:82:67:0b:2e:85:05:38:1b:9d:67:ff:
b0:5c:e1:16:68:41:c2:f7:a1:84:e7:13:c5:9a:84:
31:4b:e9:76:5b:90:69:50:3d:b3:1f:ea:68:b2:9a:
72:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:C2:DE:B7:5B:8D:2D:5F:AC:87:F2:72:92:8D:A8:7B:D8:F0:F0:88
X509v3 Authority Key Identifier:
keyid:11:60:8D:0E:60:66:56:6C:8B:39:88:1F:7F:4F:27:D3:8D:7F:38:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1DA1B251A5AC65CE3FF4424A1DE44D319A1EB9303B549C7514E808292E869FD7/0/11608D0E6066566C8B39881F7F4F27D38D7F38FE.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/11608D0E6066566C8B39881F7F4F27D38D7F38FE.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1DA1B251A5AC65CE3FF4424A1DE44D319A1EB9303B549C7514E808292E869FD7/0/3230372e3139312e3137352e302f32342d3234203d3e203236363137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
207.191.175.0/24
Signature Algorithm: sha256WithRSAEncryption
49:c9:51:08:b3:23:37:28:c2:03:1e:42:07:78:18:fc:10:05:
8e:63:00:76:96:02:ec:79:ae:d2:f8:55:1a:7b:89:62:6d:ab:
9c:f3:00:a4:af:ce:ee:7b:6e:3b:58:5e:0b:a5:fd:69:e6:90:
fa:f0:20:82:e9:7e:20:a3:0d:82:21:49:c9:6f:74:14:95:71:
c4:86:48:1d:ff:e5:8e:ae:d2:88:04:5a:71:2f:49:6d:ce:d8:
f9:28:66:7c:73:87:bc:c7:1e:2e:8c:f4:17:81:07:b4:b2:6e:
0d:19:08:c5:7f:39:ec:89:f7:9a:2e:d2:5f:37:22:35:ad:ce:
fe:b9:a8:53:ad:50:ae:88:f9:cd:aa:35:1a:b4:1a:1e:c5:07:
48:6f:bb:f8:15:f9:d4:5f:65:29:02:54:de:6c:0f:63:ee:a3:
ce:1f:49:41:a9:08:f4:52:ff:e4:2b:15:bc:a9:48:ed:5a:f5:
a6:3c:e1:a9:d9:28:3e:a2:80:9f:4e:cd:c8:32:81:3c:06:c0:
28:a3:66:f8:75:98:4a:41:c0:ec:bd:6f:d7:13:77:39:04:e2:
5f:79:95:9d:45:8c:32:72:d7:1d:7d:6f:53:89:04:3d:5a:f3:
8b:b0:96:a4:77:78:ba:30:fa:6b:a6:6b:5e:ed:79:3a:66:f4:
3a:13:dd:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 22:55:43 2025 by rpki-client