Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/23B7C697E988C14728015F75AD4BD621755BB39870EA2831B3CD053B988533F1/0/3134382e3230382e3133362e302f32342d3234203d3e20323730313439.roa
File: 3134382e3230382e3133362e302f32342d3234203d3e20323730313439.roa (raw, json)
Hash identifier: KoebSer/w7zOhaSfObiEOnofCBrTTQ78lYpx0Q7rPag=
Subject key identifier: 85:2F:4C:F0:D8:3A:10:60:BC:00:58:2F:F3:77:A2:44:F3:D1:B8:F4
Certificate issuer: /CN=8A1267DCB4DC6FFA9FCDD7FEA9D7F9F78C3791DB
Certificate serial: 288C94058C3FA3E58CEC88371EEB0874199066
Authority key identifier: 8A:12:67:DC:B4:DC:6F:FA:9F:CD:D7:FE:A9:D7:F9:F7:8C:37:91:DB
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8A1267DCB4DC6FFA9FCDD7FEA9D7F9F78C3791DB.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/23B7C697E988C14728015F75AD4BD621755BB39870EA2831B3CD053B988533F1/0/3134382e3230382e3133362e302f32342d3234203d3e20323730313439.roa
Signing time: Tue 04 Feb 2025 18:08:40 +0000
ROA not before: Tue 04 Feb 2025 18:03:40 +0000
ROA not after: Tue 03 Feb 2026 18:08:40 +0000
asID: 270149
IP address blocks: 148.208.136.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:8c:94:05:8c:3f:a3:e5:8c:ec:88:37:1e:eb:08:74:19:90:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8A1267DCB4DC6FFA9FCDD7FEA9D7F9F78C3791DB
Validity
Not Before: Feb 4 18:03:40 2025 GMT
Not After : Feb 3 18:08:40 2026 GMT
Subject: CN=852F4CF0D83A1060BC00582FF377A244F3D1B8F4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:0d:c6:79:6d:53:6b:f6:9f:b4:77:4a:97:b7:
ec:6d:7d:83:4e:20:da:5b:fa:80:00:14:d9:68:03:
b1:32:7d:af:f6:1b:1d:f6:67:d2:e0:11:19:cd:24:
fd:21:2a:db:aa:73:a4:70:5b:8b:ca:a3:07:e6:d3:
32:d7:3c:c8:cb:bf:32:46:4e:21:10:45:f8:72:2a:
f0:dc:e7:85:86:7e:5e:fe:f5:e2:39:d7:f7:71:24:
36:d1:e6:9a:3c:05:13:d6:4c:b4:b2:1a:49:31:15:
e1:a0:3c:bc:a0:57:03:bf:12:29:96:19:ca:d7:0f:
9c:4f:52:66:91:f5:15:8c:4f:97:5a:a2:ad:97:d5:
23:88:f4:ab:56:72:0f:62:c9:81:85:02:7d:2a:ff:
9f:9e:49:cd:4b:be:e7:47:22:05:fe:9d:0a:1d:7d:
d3:e5:2d:9f:d7:76:6d:1d:2f:9a:d1:cb:07:50:88:
05:4a:25:a9:64:29:8c:bd:be:9a:9b:34:c5:5b:a3:
77:fd:d4:43:ad:e1:45:fc:2d:01:7d:d7:cc:98:2e:
d4:4a:4e:58:9a:6c:a8:d1:37:b3:ad:1d:d2:d6:6a:
5a:7e:49:9b:57:86:47:1d:09:6e:22:bd:a5:94:f6:
b1:ca:53:6b:03:3a:79:b7:bb:7f:df:fc:18:4d:10:
7b:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:2F:4C:F0:D8:3A:10:60:BC:00:58:2F:F3:77:A2:44:F3:D1:B8:F4
X509v3 Authority Key Identifier:
keyid:8A:12:67:DC:B4:DC:6F:FA:9F:CD:D7:FE:A9:D7:F9:F7:8C:37:91:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/23B7C697E988C14728015F75AD4BD621755BB39870EA2831B3CD053B988533F1/0/8A1267DCB4DC6FFA9FCDD7FEA9D7F9F78C3791DB.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8A1267DCB4DC6FFA9FCDD7FEA9D7F9F78C3791DB.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/23B7C697E988C14728015F75AD4BD621755BB39870EA2831B3CD053B988533F1/0/3134382e3230382e3133362e302f32342d3234203d3e20323730313439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
148.208.136.0/24
Signature Algorithm: sha256WithRSAEncryption
07:14:40:6a:5b:17:3f:f4:c5:44:4b:7a:07:43:3b:31:81:32:
89:7d:78:b3:fb:a0:d3:9a:81:9a:f3:d6:81:7b:c2:34:7c:80:
a1:65:7b:d5:9f:a6:16:82:9b:4e:e8:e7:76:1d:ba:96:7f:bd:
ce:dd:b6:07:d1:b6:a7:5a:80:56:6b:f9:df:14:1c:9d:92:cd:
8d:9a:25:fd:b9:da:b5:ac:02:70:55:6c:64:0a:e1:1a:df:ab:
28:91:4a:26:16:28:01:8e:02:51:71:da:76:bf:d3:2d:bd:3b:
08:bc:9c:74:ce:08:c8:52:c0:be:5b:a8:be:89:3a:e5:21:82:
06:4a:2e:13:4c:9c:f8:ce:bd:d5:03:7d:0d:bf:b4:b8:09:59:
00:c5:6b:a1:b1:14:d5:ec:96:38:1c:7d:fc:d3:5d:f0:dd:5f:
09:bd:c7:e2:5c:ed:14:13:2b:a8:ff:0e:5e:b2:c5:c6:dc:6c:
db:9b:bb:9c:ba:3c:e7:cf:75:32:41:b1:54:f5:2e:f3:ea:ba:
76:5d:a3:f4:d0:3f:3b:92:43:89:c8:1c:1f:05:51:6e:f2:3a:
bf:f4:f6:0d:a5:17:1e:71:56:7d:cd:e6:30:8f:fc:e3:91:43:
4c:94:b2:1b:0c:cf:20:65:f2:11:bf:dd:40:4b:e9:95:64:ba:
c8:1f:4a:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:36:25 2025 by rpki-client