Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1E17080BF341711B27BE627D469BC3FEC4C5DD66588222F5E5558083B67A36C8/0/3136382e3139342e3137302e302f32342d3234203d3e20323731383432.roa
File: 3136382e3139342e3137302e302f32342d3234203d3e20323731383432.roa (raw, json)
Hash identifier: ZYYjYJXHcmkwlEQ0y6UmS/aN0iG2165IACTknyKAhKk=
Subject key identifier: DB:15:E7:92:6E:58:CF:86:95:68:49:44:44:83:1D:83:DF:81:BE:77
Certificate issuer: /CN=A5ADA847947FFCAAF29C2E41F2DEF23FE82B94DD
Certificate serial: 243E215EA2B3B598814A1AFACB273BE9DE8EDBED
Authority key identifier: A5:AD:A8:47:94:7F:FC:AA:F2:9C:2E:41:F2:DE:F2:3F:E8:2B:94:DD
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5ADA847947FFCAAF29C2E41F2DEF23FE82B94DD.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1E17080BF341711B27BE627D469BC3FEC4C5DD66588222F5E5558083B67A36C8/0/3136382e3139342e3137302e302f32342d3234203d3e20323731383432.roa
Signing time: Tue 04 Feb 2025 18:48:14 +0000
ROA not before: Tue 04 Feb 2025 18:43:14 +0000
ROA not after: Tue 03 Feb 2026 18:48:14 +0000
asID: 271842
IP address blocks: 168.194.170.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:3e:21:5e:a2:b3:b5:98:81:4a:1a:fa:cb:27:3b:e9:de:8e:db:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A5ADA847947FFCAAF29C2E41F2DEF23FE82B94DD
Validity
Not Before: Feb 4 18:43:14 2025 GMT
Not After : Feb 3 18:48:14 2026 GMT
Subject: CN=DB15E7926E58CF869568494444831D83DF81BE77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:3c:e7:19:96:04:fc:10:d8:4d:aa:dd:f2:6b:
65:5f:56:fb:9b:2a:96:b6:14:12:ae:20:cc:9b:8d:
82:11:3b:9a:24:53:12:da:bf:c8:53:22:58:1f:33:
9b:0c:7a:a2:8f:5f:e7:c2:50:0a:d7:f4:39:43:17:
28:55:a9:89:8d:38:9f:4d:ab:97:f4:4a:94:49:84:
8f:90:34:9c:68:cf:98:26:3f:39:33:9e:2e:7d:3b:
cb:f9:fb:f6:11:55:0f:b9:ef:22:dd:8b:6c:44:9e:
76:a1:10:2c:dd:b3:d8:10:e4:25:74:2e:00:ef:e5:
8e:61:cb:c7:59:89:f3:a3:38:d2:0f:d3:ea:0a:ae:
9f:d8:f2:3c:82:2d:4a:4c:9b:2f:0e:d8:f4:5d:4f:
7d:d0:e7:9a:43:29:13:93:cd:a3:c1:20:f6:63:cf:
64:44:08:8f:0a:1a:bd:35:0d:19:b0:ce:f9:9a:8a:
2d:39:17:50:18:0c:e9:7e:d1:03:04:3c:a5:50:1b:
d8:56:95:0d:c2:78:f0:00:ec:d6:d8:ee:a4:77:ae:
4e:c5:44:98:17:db:f8:3e:e4:a1:5d:b6:66:da:16:
33:f3:45:3b:d7:ca:02:f1:da:77:33:ba:e5:92:2d:
1a:94:50:9f:d7:20:99:5c:66:42:07:42:e1:e3:fd:
1a:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:15:E7:92:6E:58:CF:86:95:68:49:44:44:83:1D:83:DF:81:BE:77
X509v3 Authority Key Identifier:
keyid:A5:AD:A8:47:94:7F:FC:AA:F2:9C:2E:41:F2:DE:F2:3F:E8:2B:94:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1E17080BF341711B27BE627D469BC3FEC4C5DD66588222F5E5558083B67A36C8/0/A5ADA847947FFCAAF29C2E41F2DEF23FE82B94DD.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5ADA847947FFCAAF29C2E41F2DEF23FE82B94DD.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1E17080BF341711B27BE627D469BC3FEC4C5DD66588222F5E5558083B67A36C8/0/3136382e3139342e3137302e302f32342d3234203d3e20323731383432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.194.170.0/24
Signature Algorithm: sha256WithRSAEncryption
47:dc:55:84:ef:c2:01:a2:81:ab:e0:fc:31:00:90:02:f2:12:
a6:5a:b5:75:5a:d1:2a:d8:88:22:e1:ef:cc:81:fa:74:39:38:
fa:6b:55:28:8d:75:83:16:95:23:c1:0c:72:34:5e:ed:9e:e4:
68:78:c9:e3:74:7e:5f:33:58:64:de:fe:b5:8a:52:43:e9:e5:
ab:49:9f:b9:d1:0e:fa:73:1b:10:1d:f3:27:61:fc:44:c6:1d:
0f:75:7a:99:47:eb:b7:66:16:52:ca:9e:9c:cf:27:08:16:37:
e1:c9:8c:37:1a:60:b4:8f:fd:5b:56:fd:a4:5b:d0:c3:31:eb:
82:2a:94:b5:30:03:46:80:94:eb:f1:60:b1:2f:25:8b:e9:d0:
b6:3f:6d:2f:55:61:90:f4:71:fa:a2:54:96:c4:94:60:a3:ad:
b6:74:d9:1e:0d:ec:76:d2:50:72:bc:b9:b8:2b:b7:dd:42:10:
2d:22:10:a9:7d:86:f2:f3:a6:66:46:4c:84:60:89:b8:f2:77:
d3:0b:a7:97:f1:0b:5a:57:a7:24:61:4c:5f:1c:65:aa:51:a8:
48:eb:87:b0:f5:b7:16:83:8d:c5:4d:04:c7:bb:91:9b:c6:6e:
6b:e2:6d:03:b8:3d:ff:5e:20:9e:0c:d6:1f:73:96:63:ab:e9:
e1:aa:6b:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:49:36 2025 by rpki-client