Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3139352e302f32342d3234203d3e203237383337.roa
File: 3139302e39302e3139352e302f32342d3234203d3e203237383337.roa (raw, json)
Hash identifier: 8H5eFdqlobhdjSqJroqBEBS15J5P9Z0qlCtwmjDD/8w=
Subject key identifier: D0:8C:21:06:6F:2B:BF:5A:04:4E:57:6A:69:5D:39:79:75:F3:12:D9
Certificate issuer: /CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Certificate serial: 3F0385089A45239102F7599CA4418FA4F6CE9C68
Authority key identifier: CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3139352e302f32342d3234203d3e203237383337.roa
Signing time: Tue 04 Feb 2025 18:17:14 +0000
ROA not before: Tue 04 Feb 2025 18:12:14 +0000
ROA not after: Tue 03 Feb 2026 18:17:14 +0000
asID: 27837
IP address blocks: 190.90.195.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:03:85:08:9a:45:23:91:02:f7:59:9c:a4:41:8f:a4:f6:ce:9c:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Validity
Not Before: Feb 4 18:12:14 2025 GMT
Not After : Feb 3 18:17:14 2026 GMT
Subject: CN=D08C21066F2BBF5A044E576A695D397975F312D9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:bb:2f:17:12:24:d3:be:e5:7c:30:cf:31:5c:
bf:b9:bf:7a:63:30:2b:56:9c:17:1c:0f:93:ae:10:
63:71:79:f3:90:21:aa:7a:db:93:29:e5:59:d9:27:
88:b9:f9:5b:8d:b5:be:6b:ca:39:3d:b5:c1:49:2c:
9a:1a:37:ac:eb:32:af:78:32:a4:bb:c0:24:69:6d:
d6:4a:0f:99:1a:4b:cb:46:2b:43:ed:2d:b2:70:f0:
7b:21:16:04:00:ce:ed:64:8e:bd:b3:65:7c:b2:e3:
63:ab:f0:a7:59:b2:3f:2a:98:da:96:b3:ac:3f:5b:
cc:18:70:f0:1f:06:fe:3a:89:99:38:7e:5b:4c:a3:
36:cf:f2:e8:24:1d:7b:93:90:e7:22:fe:8d:5c:7f:
7c:00:94:07:62:28:4c:53:63:6e:53:1a:82:53:46:
fc:ad:41:54:a6:73:18:88:f4:82:29:8a:30:12:f8:
f1:65:6b:65:6e:da:db:cc:ac:32:24:21:cb:5c:40:
6c:ec:53:50:a0:e6:6c:92:45:19:d6:ca:6f:f8:6c:
47:2e:10:35:1e:ac:b3:76:a4:70:59:7f:e5:18:ec:
72:ba:f0:d5:4c:c0:ad:26:74:04:1d:0e:52:bb:95:
73:91:f7:54:91:9c:6e:01:6b:84:ce:c0:be:51:e9:
bd:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:8C:21:06:6F:2B:BF:5A:04:4E:57:6A:69:5D:39:79:75:F3:12:D9
X509v3 Authority Key Identifier:
keyid:CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3139352e302f32342d3234203d3e203237383337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.90.195.0/24
Signature Algorithm: sha256WithRSAEncryption
71:93:f0:20:20:55:06:27:fa:47:3f:89:1e:32:91:eb:30:b2:
80:1d:54:ba:e7:a7:83:05:14:5b:3c:63:55:75:e9:3c:ac:99:
19:cd:fd:0a:38:e7:22:b2:33:1a:f6:bc:e0:07:4e:22:0e:65:
70:6c:f2:64:3f:ba:b7:db:7d:22:a1:f2:4c:d1:07:ca:3b:bc:
b1:94:99:e4:8a:02:36:e0:b0:9e:d6:7f:9b:b6:9b:13:a4:3c:
d4:ab:1b:45:44:57:7c:5c:9a:de:cb:3d:cc:f0:51:56:0a:b2:
87:eb:41:31:fa:b6:db:4a:af:13:3a:28:d2:a3:85:18:c3:2f:
01:73:fc:73:cc:83:2f:e6:85:89:7f:32:0d:f0:d2:56:95:9e:
e8:a0:22:6f:02:c4:28:fa:77:f4:95:8e:15:05:7a:69:38:b5:
e4:96:15:29:66:36:c8:1e:62:85:b0:90:d2:72:40:56:ef:be:
ff:4c:d6:98:30:9e:2f:70:18:c5:84:8b:74:4e:91:ef:b9:e5:
2e:fa:37:ee:0b:bb:e7:be:a4:7b:b6:4c:73:43:f7:b6:1a:3e:
52:74:31:7b:7c:e9:91:44:b3:e1:02:0f:ad:c7:4f:8e:32:89:
00:2d:7f:e9:76:b1:b4:23:3f:26:80:49:9b:f1:88:a4:7f:c3:
d0:a8:80:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:36:34 2025 by rpki-client