Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/23CF7BCF3FD63282E1D70369DF92D59DA09BA872CB25EF30AAAD8D94B9FC4A0C/0/323830313a3137393a313a3a2f34382d3438203d3e203139343239.roa
File: 323830313a3137393a313a3a2f34382d3438203d3e203139343239.roa (raw, json)
Hash identifier: vpwvYFz1D7YztYRxKQoTwiGZug7Ik+2tkNsPOXhFnt8=
Subject key identifier: A7:54:F7:38:A3:DF:11:58:6C:49:63:40:B6:3E:99:A9:0C:69:B0:40
Certificate issuer: /CN=AF6194751787595EA94DB6C60FC31E072349AB64
Certificate serial: 01C14C7CE99B7EFE01173C04F8154988384C4BAC
Authority key identifier: AF:61:94:75:17:87:59:5E:A9:4D:B6:C6:0F:C3:1E:07:23:49:AB:64
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF6194751787595EA94DB6C60FC31E072349AB64.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/23CF7BCF3FD63282E1D70369DF92D59DA09BA872CB25EF30AAAD8D94B9FC4A0C/0/323830313a3137393a313a3a2f34382d3438203d3e203139343239.roa
Signing time: Tue 04 Feb 2025 18:01:45 +0000
ROA not before: Tue 04 Feb 2025 17:56:45 +0000
ROA not after: Tue 03 Feb 2026 18:01:45 +0000
asID: 19429
IP address blocks: 2801:179:1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:c1:4c:7c:e9:9b:7e:fe:01:17:3c:04:f8:15:49:88:38:4c:4b:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AF6194751787595EA94DB6C60FC31E072349AB64
Validity
Not Before: Feb 4 17:56:45 2025 GMT
Not After : Feb 3 18:01:45 2026 GMT
Subject: CN=A754F738A3DF11586C496340B63E99A90C69B040
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:95:24:b3:4f:f5:5e:38:8b:4a:63:5c:1a:80:
e6:fb:dd:09:78:31:b1:56:02:3d:43:35:99:41:ff:
e1:32:45:07:8a:b3:d8:a4:d7:b7:e6:0d:61:de:9b:
e3:27:63:b7:de:33:bf:bf:a0:ad:70:9f:1d:9b:49:
ec:8e:3c:29:89:2b:ee:b9:a6:8d:2e:cd:a9:f6:0d:
aa:c5:00:81:13:ae:28:93:9d:48:d2:ab:ef:92:d0:
7b:12:69:95:3a:cf:77:04:52:4c:6a:5b:88:13:16:
67:03:7b:d5:41:10:9a:6c:c8:85:2f:7e:09:dd:1f:
5d:da:eb:72:b8:85:9a:bd:d2:3d:cc:90:10:b6:86:
2b:78:d2:d4:3c:55:40:11:c1:bd:0a:b6:f7:51:ee:
47:50:4a:a5:23:a7:d3:0c:2a:a4:4e:e4:8e:87:7b:
de:75:ce:a0:fe:f1:e8:c8:f3:3c:ed:f1:97:54:a4:
a5:36:e2:55:fe:29:d0:a0:03:b0:12:db:d9:6a:b5:
8f:0a:08:a2:7d:fd:b8:27:ca:e7:49:dd:16:cd:85:
45:83:3d:f6:9b:fd:9a:dd:43:46:d1:a5:7e:68:f0:
bb:50:1b:d2:f9:ee:3a:f7:d7:c9:6c:d1:99:1b:5a:
ea:8c:50:0d:83:f4:37:32:5c:52:9d:13:db:2f:22:
55:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:54:F7:38:A3:DF:11:58:6C:49:63:40:B6:3E:99:A9:0C:69:B0:40
X509v3 Authority Key Identifier:
keyid:AF:61:94:75:17:87:59:5E:A9:4D:B6:C6:0F:C3:1E:07:23:49:AB:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/23CF7BCF3FD63282E1D70369DF92D59DA09BA872CB25EF30AAAD8D94B9FC4A0C/0/AF6194751787595EA94DB6C60FC31E072349AB64.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF6194751787595EA94DB6C60FC31E072349AB64.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/23CF7BCF3FD63282E1D70369DF92D59DA09BA872CB25EF30AAAD8D94B9FC4A0C/0/323830313a3137393a313a3a2f34382d3438203d3e203139343239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2801:179:1::/48
Signature Algorithm: sha256WithRSAEncryption
01:7a:29:1b:fa:9c:43:e9:3e:bd:c1:d3:04:61:5a:9b:90:0d:
f2:d0:df:e5:46:2f:51:35:60:e5:78:a7:ba:81:19:37:b6:2b:
d7:57:68:f2:ee:27:cf:32:18:c6:65:c9:de:d8:4f:70:c0:f0:
18:76:5d:21:81:61:dc:58:c7:54:8e:a5:54:82:55:45:89:03:
d6:14:17:f1:5c:3e:fe:7f:61:58:00:61:56:c3:1d:a8:52:9a:
ba:6d:1b:be:a6:62:a2:31:4b:de:7b:fa:22:0c:53:1d:59:bf:
3f:3e:4f:64:d9:8e:3d:28:03:c4:7b:33:23:1f:60:78:fc:61:
41:5c:5b:92:5a:0d:46:f0:bc:f1:9d:34:f4:b2:10:5e:59:d0:
e3:57:6d:2f:55:01:0f:57:c7:04:a0:24:46:c4:77:d0:66:69:
50:33:2c:ce:51:86:fb:a0:87:96:e7:90:92:86:90:d3:f9:d9:
3e:6c:96:1d:de:b3:d1:ee:66:5c:84:dd:3e:e5:8d:b9:17:b9:
58:07:7a:75:ae:fb:7b:be:8e:09:70:f1:1a:f2:cc:11:75:83:
b4:12:94:a5:95:95:9c:8a:c3:b5:1f:cd:51:10:64:ef:94:47:
db:dd:41:33:84:ee:3d:6e:92:26:da:ed:b7:13:a1:ef:79:1d:
a3:41:ec:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:49:29 2025 by rpki-client