Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2583954D10F857B35149AFFDF0098091E3885EFAD57EBE088477A4C4B18E5F8B/0/3230312e3133312e3130322e302f32342d3234203d3e20323633323137.roa
File: 3230312e3133312e3130322e302f32342d3234203d3e20323633323137.roa (raw, json)
Hash identifier: uOFy+I0yNIM/loTZagcvX4ZebH5QnClkTcgUrLWZmBw=
Subject key identifier: DD:36:1E:C1:35:DC:12:DD:F9:5A:9E:AF:4A:76:29:C0:7F:D4:01:5E
Certificate issuer: /CN=F9704454BEEAA5607C017F2A685262F0B549B68B
Certificate serial: 0D9B160325FCEEB77BE53DEBCA4083760E9011DA
Authority key identifier: F9:70:44:54:BE:EA:A5:60:7C:01:7F:2A:68:52:62:F0:B5:49:B6:8B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F9704454BEEAA5607C017F2A685262F0B549B68B.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/2583954D10F857B35149AFFDF0098091E3885EFAD57EBE088477A4C4B18E5F8B/0/3230312e3133312e3130322e302f32342d3234203d3e20323633323137.roa
Signing time: Tue 04 Feb 2025 18:42:14 +0000
ROA not before: Tue 04 Feb 2025 18:37:14 +0000
ROA not after: Tue 03 Feb 2026 18:42:14 +0000
asID: 263217
IP address blocks: 201.131.102.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:9b:16:03:25:fc:ee:b7:7b:e5:3d:eb:ca:40:83:76:0e:90:11:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F9704454BEEAA5607C017F2A685262F0B549B68B
Validity
Not Before: Feb 4 18:37:14 2025 GMT
Not After : Feb 3 18:42:14 2026 GMT
Subject: CN=DD361EC135DC12DDF95A9EAF4A7629C07FD4015E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:38:31:ac:02:21:0e:67:3a:ba:9e:f3:c5:df:
ed:08:1c:d0:09:3e:db:b7:0d:ad:9b:9f:46:c1:26:
59:c7:5a:15:fe:59:55:82:49:fe:ab:5e:f0:ce:a0:
08:64:aa:03:4d:16:18:11:a4:82:94:61:95:6a:6c:
45:ed:8c:2c:7c:42:7d:d5:7b:a2:94:b7:ad:1a:2d:
92:50:97:a7:8c:b4:78:d8:10:1f:45:40:56:45:1f:
c6:75:86:2b:8e:2d:63:a7:78:4d:70:24:43:f5:68:
d3:4f:2c:ad:f2:0f:4b:11:da:d1:fd:5a:77:8c:c9:
31:e8:de:2e:9a:9e:74:65:cf:2d:22:39:93:9e:9c:
28:d6:03:35:08:ae:9c:e4:69:a3:32:c7:86:b0:84:
73:ff:01:59:1a:ee:7d:73:b3:89:81:2b:20:d7:a6:
d9:fc:ea:e1:39:de:a8:9d:ad:a4:c3:38:b3:48:e7:
0e:d4:b0:6e:7c:c8:a0:24:7e:b8:d1:f1:55:d9:ca:
b0:f4:7f:15:53:af:49:68:66:7b:ce:1f:17:87:be:
9e:5b:56:cf:01:54:ee:e9:82:9c:88:46:ef:87:b5:
03:e4:62:c3:5b:ac:15:92:a7:b4:93:be:e8:b6:46:
54:be:9c:90:b5:da:6a:0c:f0:43:a0:a9:b7:9c:36:
41:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:36:1E:C1:35:DC:12:DD:F9:5A:9E:AF:4A:76:29:C0:7F:D4:01:5E
X509v3 Authority Key Identifier:
keyid:F9:70:44:54:BE:EA:A5:60:7C:01:7F:2A:68:52:62:F0:B5:49:B6:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/2583954D10F857B35149AFFDF0098091E3885EFAD57EBE088477A4C4B18E5F8B/0/F9704454BEEAA5607C017F2A685262F0B549B68B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F9704454BEEAA5607C017F2A685262F0B549B68B.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2583954D10F857B35149AFFDF0098091E3885EFAD57EBE088477A4C4B18E5F8B/0/3230312e3133312e3130322e302f32342d3234203d3e20323633323137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.131.102.0/24
Signature Algorithm: sha256WithRSAEncryption
39:e7:4e:5e:f4:7a:a1:cd:17:ff:14:6e:b4:81:50:fd:eb:4a:
83:38:9c:4e:bf:c4:fc:0b:a9:64:da:67:27:a0:1e:96:e1:f6:
93:c7:40:a5:19:a0:3d:c8:f8:2f:01:00:cf:74:3f:a0:49:da:
45:74:91:c4:5b:2a:8a:0b:4b:a0:63:07:20:51:bc:8c:e7:9a:
ad:25:99:cf:60:ce:82:8f:3b:46:cb:da:f7:aa:9d:e9:c8:ce:
5b:2c:88:c3:70:86:0b:17:9a:b3:90:31:97:d0:a3:73:cf:da:
cf:1f:8b:53:7a:8e:30:6c:d3:d4:7d:77:eb:43:37:26:b3:00:
97:21:14:c7:12:ae:16:33:37:26:b5:69:70:64:99:c8:a2:ee:
d6:c1:83:bd:12:a9:ed:82:23:43:3a:6d:82:3e:63:84:60:d7:
82:98:4c:06:ed:da:9b:63:92:9a:e0:55:2d:0f:76:6d:af:8b:
46:46:03:d8:1b:6f:77:92:d6:eb:67:54:37:67:32:ba:d9:65:
fa:1c:d1:e0:77:10:fa:bf:c2:86:9f:21:0f:e5:f1:39:2f:af:
d4:a4:ec:21:cb:d9:ac:10:2a:1c:bf:14:f3:de:f0:f2:a2:6b:
3b:da:a1:ba:8d:2e:c6:d1:ff:e5:1e:3f:00:3f:2b:8e:18:6d:
ab:c8:5d:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:27:09 2025 by rpki-client