Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/27AB8D80C7EA697B279078E4FC1BF9B06B500440CEED2249A17E22839C706E27/0/3134382e3232322e3133382e302f32342d3234203d3e20323732383832.roa
File: 3134382e3232322e3133382e302f32342d3234203d3e20323732383832.roa (raw, json)
Hash identifier: oFjDCeWhs9OHk3+y2h80e4GcNN1HaFFkvo5GZABO+Aw=
Subject key identifier: 89:CA:9A:FA:23:CE:C9:5D:20:F8:FB:68:61:17:9B:EA:76:D4:22:25
Certificate issuer: /CN=E1DA54DE44605C6B48DAD8F6926D71AD2BBAF8F3
Certificate serial: 0B2F125A2E3A8258B98249D9FE8C9F4DE1B51CFA
Authority key identifier: E1:DA:54:DE:44:60:5C:6B:48:DA:D8:F6:92:6D:71:AD:2B:BA:F8:F3
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E1DA54DE44605C6B48DAD8F6926D71AD2BBAF8F3.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/27AB8D80C7EA697B279078E4FC1BF9B06B500440CEED2249A17E22839C706E27/0/3134382e3232322e3133382e302f32342d3234203d3e20323732383832.roa
Signing time: Tue 07 Jan 2025 23:05:01 +0000
ROA not before: Tue 07 Jan 2025 23:00:01 +0000
ROA not after: Tue 06 Jan 2026 23:05:01 +0000
asID: 272882
IP address blocks: 148.222.138.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:2f:12:5a:2e:3a:82:58:b9:82:49:d9:fe:8c:9f:4d:e1:b5:1c:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E1DA54DE44605C6B48DAD8F6926D71AD2BBAF8F3
Validity
Not Before: Jan 7 23:00:01 2025 GMT
Not After : Jan 6 23:05:01 2026 GMT
Subject: CN=89CA9AFA23CEC95D20F8FB6861179BEA76D42225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:41:ef:6f:c5:fc:5c:f1:67:fd:14:15:26:7c:
83:05:74:6a:8c:5d:08:cd:92:ff:2f:69:95:b2:3d:
fc:35:8a:96:fd:97:34:ce:7a:00:f1:12:d2:b8:e0:
0e:08:f1:ad:50:06:0e:46:d6:ca:bc:3c:39:19:09:
cb:df:64:17:37:27:4c:14:24:62:2b:70:cc:75:ee:
88:20:79:3c:01:ac:27:fb:cd:76:6d:21:53:22:47:
c7:df:26:a2:9f:2c:72:6c:6f:7a:1f:12:2c:5b:f7:
8d:37:5a:fa:24:08:bb:65:a3:31:bb:17:73:db:10:
66:1e:70:25:ed:61:fa:e4:12:08:63:3f:1a:d2:af:
d7:96:bc:fe:04:f6:11:4a:dc:46:ef:7e:3b:6a:e2:
d1:37:49:5d:32:f5:f7:0d:03:87:ad:13:6f:86:9b:
ad:60:96:d9:03:68:b9:40:ff:ec:03:cb:53:db:4f:
f5:48:76:c7:92:69:cb:c7:4e:f0:56:fb:22:af:7d:
38:aa:87:c1:52:c3:1a:aa:c4:71:32:4e:86:5f:11:
61:8b:77:4d:16:67:67:92:ef:0f:19:1d:4f:a4:87:
a9:30:a9:4d:54:d6:bf:e8:5a:9f:6f:1b:39:53:4b:
fc:8d:b0:09:6c:0e:21:b6:f6:1b:32:4d:fd:63:cc:
b1:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:CA:9A:FA:23:CE:C9:5D:20:F8:FB:68:61:17:9B:EA:76:D4:22:25
X509v3 Authority Key Identifier:
keyid:E1:DA:54:DE:44:60:5C:6B:48:DA:D8:F6:92:6D:71:AD:2B:BA:F8:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/27AB8D80C7EA697B279078E4FC1BF9B06B500440CEED2249A17E22839C706E27/0/E1DA54DE44605C6B48DAD8F6926D71AD2BBAF8F3.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E1DA54DE44605C6B48DAD8F6926D71AD2BBAF8F3.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/27AB8D80C7EA697B279078E4FC1BF9B06B500440CEED2249A17E22839C706E27/0/3134382e3232322e3133382e302f32342d3234203d3e20323732383832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
148.222.138.0/24
Signature Algorithm: sha256WithRSAEncryption
54:d8:26:96:6e:41:2b:b2:33:64:6a:a6:86:ef:a0:3b:bb:20:
7c:62:ef:cf:11:81:ad:39:20:9c:f0:61:71:89:be:6b:31:4c:
91:3c:90:4d:e4:df:91:ff:d6:03:bf:c8:3c:d4:b6:d7:91:ce:
27:cb:c3:0b:f6:f4:f2:99:24:47:25:52:e2:f3:be:5b:d1:c0:
53:77:7f:f8:7f:45:ce:5f:95:bb:7e:ee:6e:0b:9c:80:53:01:
c2:cd:a8:20:e2:a8:90:78:e5:65:02:3e:6b:8f:44:d9:cd:2d:
e2:28:36:74:b6:39:42:d3:58:99:4f:55:63:6d:05:6d:0c:de:
94:09:8c:e3:f7:72:78:c1:27:90:8b:cb:04:79:47:9f:0e:45:
92:43:b2:68:d3:fc:19:e4:2e:1a:36:8e:ef:2e:8f:3f:6a:9c:
9a:63:5d:bb:a4:36:e1:b8:18:a2:55:28:64:e9:f4:53:f9:05:
c1:d3:9b:e4:68:e1:01:37:55:10:3d:ff:1c:3d:e9:c8:7f:c8:
c9:0e:f1:da:22:dc:a0:e6:b2:fd:b5:77:d5:f7:dd:f0:35:f0:
46:d2:16:75:6f:52:b5:bf:cc:e7:ef:08:08:bb:07:35:75:98:
0d:ca:33:0c:e6:cb:4c:17:2f:31:90:75:a7:52:db:97:91:92:
1c:bd:e4:7f
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUCy8SWi46gli5gknZ/oyfTeG1HPowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTFEQTU0REU0NDYwNUM2QjQ4REFEOEY2OTI2RDcxQUQy
QkJBRjhGMzAeFw0yNTAxMDcyMzAwMDFaFw0yNjAxMDYyMzA1MDFaMDMxMTAvBgNV
BAMTKDg5Q0E5QUZBMjNDRUM5NUQyMEY4RkI2ODYxMTc5QkVBNzZENDIyMjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3Qe9vxfxc8Wf9FBUmfIMFdGqM
XQjNkv8vaZWyPfw1ipb9lzTOegDxEtK44A4I8a1QBg5G1sq8PDkZCcvfZBc3J0wU
JGIrcMx17oggeTwBrCf7zXZtIVMiR8ffJqKfLHJsb3ofEixb9403WvokCLtlozG7
F3PbEGYecCXtYfrkEghjPxrSr9eWvP4E9hFK3Ebvfjtq4tE3SV0y9fcNA4etE2+G
m61gltkDaLlA/+wDy1PbT/VIdseSacvHTvBW+yKvfTiqh8FSwxqqxHEyToZfEWGL
d00WZ2eS7w8ZHU+kh6kwqU1U1r/oWp9vGzlTS/yNsAlsDiG29hsyTf1jzLFjAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUicqa+iPOyV0g+PtoYReb6nbUIiUwHwYDVR0j
BBgwFoAU4dpU3kRgXGtI2tj2km1xrSu6+PMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yN0FCOEQ4MEM3RUE2OTdCMjc5MDc4RTRGQzFCRjlCMDZC
NTAwNDQwQ0VFRDIyNDlBMTdFMjI4MzlDNzA2RTI3LzAvRTFEQTU0REU0NDYwNUM2
QjQ4REFEOEY2OTI2RDcxQUQyQkJBRjhGMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FMURBNTRERTQ0NjA1QzZCNDhE
QUQ4RjY5MjZENzFBRDJCQkFGOEYzLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMjdBQjhEODBDN0VBNjk3QjI3OTA3OEU0RkMxQkY5QjA2QjUwMDQ0MENF
RUQyMjQ5QTE3RTIyODM5QzcwNkUyNy8wLzMxMzQzODJlMzIzMjMyMmUzMTMzMzgy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3MzIzODM4MzIucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACU
3oowDQYJKoZIhvcNAQELBQADggEBAFTYJpZuQSuyM2RqpobvoDu7IHxi788Rga05
IJzwYXGJvmsxTJE8kE3k35H/1gO/yDzUtteRzifLwwv29PKZJEclUuLzvlvRwFN3
f/h/Rc5flbt+7m4LnIBTAcLNqCDiqJB45WUCPmuPRNnNLeIoNnS2OULTWJlPVWNt
BW0M3pQJjOP3cnjBJ5CLywR5R58ORZJDsmjT/BnkLho2ju8ujz9qnJpjXbukNuG4
GKJVKGTp9FP5BcHTm+Ro4QE3VRA9/xw96ch/yMkO8doi3KDmsv21d9X33fA18EbS
FnVvUrW/zOfvCAi7BzV1mA3KMwzmy0wXLzGQdadS25eRkhy95H8=
-----END CERTIFICATE-----
Generated at Sat Apr 5 12:02:33 2025 by rpki-client