Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1E17080BF341711B27BE627D469BC3FEC4C5DD66588222F5E5558083B67A36C8/0/3136382e3139342e3136382e302f32342d3234203d3e20323639383632.roa
File: 3136382e3139342e3136382e302f32342d3234203d3e20323639383632.roa (raw, json)
Hash identifier: tF5MDo6gmUWVZK0yhy2dD3blv3MloeE7mpgvsFpJSPg=
Subject key identifier: 55:DA:9C:8F:57:11:E2:80:41:11:EE:4C:CE:4D:3A:40:F8:19:56:CD
Certificate issuer: /CN=A5ADA847947FFCAAF29C2E41F2DEF23FE82B94DD
Certificate serial: 0A58AD92EF1D2B721B5088C70BAB586846BF6244
Authority key identifier: A5:AD:A8:47:94:7F:FC:AA:F2:9C:2E:41:F2:DE:F2:3F:E8:2B:94:DD
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5ADA847947FFCAAF29C2E41F2DEF23FE82B94DD.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1E17080BF341711B27BE627D469BC3FEC4C5DD66588222F5E5558083B67A36C8/0/3136382e3139342e3136382e302f32342d3234203d3e20323639383632.roa
Signing time: Tue 04 Feb 2025 18:48:12 +0000
ROA not before: Tue 04 Feb 2025 18:43:12 +0000
ROA not after: Tue 03 Feb 2026 18:48:12 +0000
asID: 269862
IP address blocks: 168.194.168.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:58:ad:92:ef:1d:2b:72:1b:50:88:c7:0b:ab:58:68:46:bf:62:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A5ADA847947FFCAAF29C2E41F2DEF23FE82B94DD
Validity
Not Before: Feb 4 18:43:12 2025 GMT
Not After : Feb 3 18:48:12 2026 GMT
Subject: CN=55DA9C8F5711E2804111EE4CCE4D3A40F81956CD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:62:26:0b:3d:50:fb:b1:be:30:0c:b0:58:04:
c6:e3:69:58:15:b4:85:80:33:13:68:ee:10:8f:69:
6d:0a:5f:4f:12:36:4c:4e:03:71:43:10:73:36:0b:
29:9e:c2:28:1f:06:8d:30:76:8a:88:d2:7f:4a:42:
2a:4d:a3:f3:11:4b:36:23:7e:6e:b1:d7:78:9b:ba:
23:25:be:fe:47:7b:72:8e:8a:59:a9:1e:ad:de:ac:
e4:44:d0:c9:d8:ed:d2:76:37:ed:5d:f1:13:70:35:
7f:02:af:7b:39:8f:87:3a:6b:b8:1d:79:54:c1:ec:
03:df:27:a8:95:0d:41:57:11:70:29:2a:bb:e9:ef:
d3:04:1e:b5:74:8f:f2:b6:ac:71:7d:1a:3d:c3:e2:
e9:7c:5b:3d:9e:20:52:72:f8:ad:22:de:f9:0b:ca:
f7:02:7d:81:ef:97:07:66:2f:86:18:6a:ff:6f:b8:
e7:6f:d9:33:ad:fd:44:d4:44:c3:85:3d:a3:f2:ce:
96:c8:ed:04:6f:4b:56:7c:67:d6:62:1d:95:d7:3d:
57:dd:22:46:3e:a4:3f:26:fb:2b:1e:75:80:cf:6a:
a5:c1:7a:00:4c:b6:f7:fd:9f:9d:45:06:a6:e8:dc:
23:2c:6a:34:ac:ae:17:b3:19:dd:84:49:fb:17:0d:
d7:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:DA:9C:8F:57:11:E2:80:41:11:EE:4C:CE:4D:3A:40:F8:19:56:CD
X509v3 Authority Key Identifier:
keyid:A5:AD:A8:47:94:7F:FC:AA:F2:9C:2E:41:F2:DE:F2:3F:E8:2B:94:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1E17080BF341711B27BE627D469BC3FEC4C5DD66588222F5E5558083B67A36C8/0/A5ADA847947FFCAAF29C2E41F2DEF23FE82B94DD.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5ADA847947FFCAAF29C2E41F2DEF23FE82B94DD.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1E17080BF341711B27BE627D469BC3FEC4C5DD66588222F5E5558083B67A36C8/0/3136382e3139342e3136382e302f32342d3234203d3e20323639383632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.194.168.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:e4:8f:a3:6e:8f:60:af:b3:31:ae:a5:b4:a5:fe:8f:6c:59:
2c:72:10:bd:f5:bc:6a:5c:27:04:e3:d3:d3:27:d0:b4:6d:81:
50:bd:3b:1f:15:86:f3:cd:0c:bb:5b:4b:15:7a:c9:de:93:70:
c9:ee:51:dd:b0:a6:70:19:b3:02:5f:cd:64:0f:30:2b:a5:ac:
db:2a:26:af:60:35:11:bb:07:72:e2:5f:30:13:3e:00:e8:94:
6a:2c:f4:69:62:b7:d1:21:dc:3a:25:0d:9b:f1:ce:63:09:32:
58:97:0e:42:bb:34:5a:47:91:d3:15:ec:ab:d7:ea:82:18:6d:
aa:86:9e:95:bd:af:48:79:07:af:8d:c5:15:cc:2d:20:c7:d5:
ec:f6:6f:d7:9a:ef:0c:5a:6d:7c:40:12:56:3b:71:72:83:46:
78:b3:26:5e:22:93:77:a5:5a:5e:ee:9d:f2:d7:11:d7:76:62:
76:f8:e1:66:a8:12:50:c5:9c:76:3d:57:6a:1b:6a:af:c5:34:
b8:c7:37:e3:e0:59:1b:b9:94:3d:80:b9:92:14:70:84:0e:c6:
ab:e4:e8:81:58:4d:9a:80:51:af:51:35:12:9a:9a:3e:90:28:
bc:24:4f:31:d4:9d:09:b0:c1:32:c6:f7:48:25:c4:0b:c3:07:
29:26:91:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:00:05 2025 by rpki-client