Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1E17080BF341711B27BE627D469BC3FEC4C5DD66588222F5E5558083B67A36C8/0/3133382e3138352e31352e302f32342d3234203d3e20333939333832.roa
File: 3133382e3138352e31352e302f32342d3234203d3e20333939333832.roa (raw, json)
Hash identifier: kiEMwzOBUzIn14yWt9kmhuLFduEHEWEQgH9vHipgYrQ=
Subject key identifier: 63:AD:9B:90:8D:2B:E5:5E:8E:90:C0:9E:3F:A2:D2:5B:C3:56:CA:BE
Certificate issuer: /CN=A5ADA847947FFCAAF29C2E41F2DEF23FE82B94DD
Certificate serial: 40A7A162BB7673F9CE7B58A76A7DEC241B1BDD91
Authority key identifier: A5:AD:A8:47:94:7F:FC:AA:F2:9C:2E:41:F2:DE:F2:3F:E8:2B:94:DD
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5ADA847947FFCAAF29C2E41F2DEF23FE82B94DD.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1E17080BF341711B27BE627D469BC3FEC4C5DD66588222F5E5558083B67A36C8/0/3133382e3138352e31352e302f32342d3234203d3e20333939333832.roa
Signing time: Tue 04 Feb 2025 18:48:13 +0000
ROA not before: Tue 04 Feb 2025 18:43:13 +0000
ROA not after: Tue 03 Feb 2026 18:48:13 +0000
asID: 399382
IP address blocks: 138.185.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:a7:a1:62:bb:76:73:f9:ce:7b:58:a7:6a:7d:ec:24:1b:1b:dd:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A5ADA847947FFCAAF29C2E41F2DEF23FE82B94DD
Validity
Not Before: Feb 4 18:43:13 2025 GMT
Not After : Feb 3 18:48:13 2026 GMT
Subject: CN=63AD9B908D2BE55E8E90C09E3FA2D25BC356CABE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:87:02:61:84:ad:c8:c5:d0:7c:a7:ba:c4:5d:
6d:d0:b4:c7:47:c2:1e:cc:c2:52:4e:5c:65:3c:81:
9b:a0:7c:64:79:13:7c:bf:21:f0:99:33:0c:4c:0e:
bb:be:2e:a5:22:81:6a:49:9c:ab:91:5b:9e:0a:51:
e4:7d:5b:e9:f2:0b:00:5c:64:ed:d0:6c:6b:40:76:
c1:c8:87:c2:11:d6:49:a3:76:58:f1:05:d2:bf:0b:
12:e7:15:7b:63:9d:23:9a:c6:85:5c:e4:7c:26:04:
97:39:77:8e:c3:a7:44:0e:00:9c:27:80:4d:06:69:
e1:7b:79:35:ba:95:a5:2e:da:a3:71:3c:d7:c6:be:
6f:bd:3b:f5:a3:2c:08:1c:bb:85:65:78:49:9e:71:
b1:e4:c8:90:bf:67:58:7e:22:93:14:98:a5:89:be:
c2:01:48:b4:46:6c:f0:62:8b:1a:9a:31:b4:78:e1:
76:e6:9c:80:b6:d0:67:04:48:7f:69:70:f8:ca:9e:
fe:07:7d:ad:56:c2:15:5b:0b:d8:12:78:63:4f:06:
dd:2d:25:37:ad:87:90:f2:52:51:8d:5f:49:24:8c:
2a:60:f0:cc:9b:8e:4a:2a:f6:5b:63:71:3d:22:85:
4a:d9:06:22:ff:c3:d5:92:3c:46:16:f3:1c:e8:f7:
94:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:AD:9B:90:8D:2B:E5:5E:8E:90:C0:9E:3F:A2:D2:5B:C3:56:CA:BE
X509v3 Authority Key Identifier:
keyid:A5:AD:A8:47:94:7F:FC:AA:F2:9C:2E:41:F2:DE:F2:3F:E8:2B:94:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1E17080BF341711B27BE627D469BC3FEC4C5DD66588222F5E5558083B67A36C8/0/A5ADA847947FFCAAF29C2E41F2DEF23FE82B94DD.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5ADA847947FFCAAF29C2E41F2DEF23FE82B94DD.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1E17080BF341711B27BE627D469BC3FEC4C5DD66588222F5E5558083B67A36C8/0/3133382e3138352e31352e302f32342d3234203d3e20333939333832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.185.15.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:1a:20:ec:a2:7a:3d:f0:03:69:88:43:29:78:68:86:18:d8:
d1:b6:38:e5:69:d1:6f:e0:2d:09:22:6d:91:bf:50:e0:3c:47:
eb:3b:62:94:78:f2:14:b2:59:1e:1b:89:0a:2e:80:d1:2c:06:
d0:c2:57:97:f5:6e:0c:80:72:2e:5b:ac:f4:0d:12:17:c5:b0:
1d:51:70:bd:7c:d1:67:73:37:1b:20:da:de:1c:ee:e5:7c:f8:
8f:01:dd:14:d9:3f:68:95:12:56:88:ff:df:08:54:a3:a0:a3:
9d:91:2e:fe:79:db:e8:82:53:8b:28:fb:89:fd:26:a1:19:da:
8a:75:21:e0:ac:04:12:16:51:ec:e4:4e:00:10:26:0b:2d:7b:
99:b3:a8:e5:40:3d:d5:47:76:cb:18:c3:b2:17:25:13:f4:d1:
9d:e0:e6:ff:98:d0:49:e7:dc:d8:8e:35:44:2a:a8:70:81:88:
6f:47:35:0b:17:e5:c2:73:41:28:e9:38:4d:ed:70:1a:90:ec:
24:59:14:40:3b:2b:54:ae:95:30:70:2f:30:55:69:4f:b1:bc:
1b:1c:61:41:11:ab:27:34:dd:af:0d:61:64:5a:60:13:8e:d2:
e1:14:f0:5e:9f:01:ec:4f:10:73:a1:3e:7c:93:a2:09:76:19:
9b:dd:b9:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:46:38 2025 by rpki-client