Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/28814650B74090E589468FE4EC142C9DEB755DF0F513353E597BF686E05AC9FA/0/3136382e3139352e3138362e302f32332d3234203d3e20323634373631.roa
File: 3136382e3139352e3138362e302f32332d3234203d3e20323634373631.roa (raw, json)
Hash identifier: khsRBGicaGQO8GXnoGzLk9pH5Xq6znXDUhSq7Exk4VA=
Subject key identifier: 47:E7:61:4E:9F:21:7D:B5:83:30:33:C6:57:FD:19:B5:B1:92:E9:5F
Certificate issuer: /CN=76ED1487236321BE3ADB764A2ADE56DE8EB91D48
Certificate serial: 5192EA143AF28D01527F4D0C2408734FB727C2D5
Authority key identifier: 76:ED:14:87:23:63:21:BE:3A:DB:76:4A:2A:DE:56:DE:8E:B9:1D:48
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/76ED1487236321BE3ADB764A2ADE56DE8EB91D48.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/28814650B74090E589468FE4EC142C9DEB755DF0F513353E597BF686E05AC9FA/0/3136382e3139352e3138362e302f32332d3234203d3e20323634373631.roa
Signing time: Tue 04 Feb 2025 18:55:53 +0000
ROA not before: Tue 04 Feb 2025 18:50:53 +0000
ROA not after: Tue 03 Feb 2026 18:55:53 +0000
asID: 264761
IP address blocks: 168.195.186.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:92:ea:14:3a:f2:8d:01:52:7f:4d:0c:24:08:73:4f:b7:27:c2:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76ED1487236321BE3ADB764A2ADE56DE8EB91D48
Validity
Not Before: Feb 4 18:50:53 2025 GMT
Not After : Feb 3 18:55:53 2026 GMT
Subject: CN=47E7614E9F217DB5833033C657FD19B5B192E95F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:f0:5e:f8:96:ad:40:a9:74:98:1a:df:1c:8a:
fc:82:67:09:d2:50:34:6f:ad:18:2f:81:0a:0c:4b:
66:2a:ee:88:bf:ee:74:68:85:17:b9:52:bf:f6:36:
4b:ae:be:cc:4e:b3:13:25:94:d4:ff:83:39:7d:30:
9b:ee:02:70:b2:53:16:9e:1c:32:e3:b2:4a:61:84:
e9:36:d9:93:10:fd:f3:89:ab:7b:05:59:be:a2:11:
94:e7:34:fc:d3:da:94:bc:08:fa:33:40:83:e6:fc:
b4:1c:62:0c:84:27:83:59:06:36:6c:07:ce:56:71:
3c:19:1a:2b:8a:7d:92:6d:fd:4d:1b:68:6a:2f:42:
ef:f1:54:c2:20:96:5c:e2:ae:02:a5:5c:e7:2a:40:
63:d7:65:84:2b:63:91:d4:30:a0:25:db:2c:e6:f2:
91:3a:c2:2c:75:88:b1:cc:72:9c:33:a8:76:81:aa:
4c:83:2f:c6:ff:c4:4f:58:26:4d:f2:b9:d0:50:2f:
54:4e:32:b9:5d:3a:36:5d:ba:86:14:12:7a:80:b8:
07:ec:c9:2f:fd:58:91:9c:f0:78:70:a1:b9:b0:68:
57:16:11:0d:e3:10:71:2a:ac:44:a7:57:e5:f6:ac:
f4:43:3c:77:6a:15:d8:b0:45:49:bd:d4:75:f8:5d:
00:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:E7:61:4E:9F:21:7D:B5:83:30:33:C6:57:FD:19:B5:B1:92:E9:5F
X509v3 Authority Key Identifier:
keyid:76:ED:14:87:23:63:21:BE:3A:DB:76:4A:2A:DE:56:DE:8E:B9:1D:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/28814650B74090E589468FE4EC142C9DEB755DF0F513353E597BF686E05AC9FA/0/76ED1487236321BE3ADB764A2ADE56DE8EB91D48.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/76ED1487236321BE3ADB764A2ADE56DE8EB91D48.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/28814650B74090E589468FE4EC142C9DEB755DF0F513353E597BF686E05AC9FA/0/3136382e3139352e3138362e302f32332d3234203d3e20323634373631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.195.186.0/23
Signature Algorithm: sha256WithRSAEncryption
b3:bc:57:ac:f9:11:1a:d4:e5:52:57:b5:db:71:52:86:5a:08:
60:f0:a9:e9:c9:22:6a:0a:b2:ac:5d:ae:87:da:92:90:91:06:
f7:6a:de:8f:8e:ee:fc:f5:50:66:23:5c:39:e2:3b:4f:fb:cb:
84:f8:a1:a3:c0:2d:9f:60:84:32:4d:df:02:d2:1c:61:8f:a3:
2f:bf:51:40:5d:1c:d7:02:fa:68:ff:e8:f4:69:1a:0a:0e:21:
25:dd:e4:20:72:91:f5:8a:22:b1:dd:66:25:19:00:33:e4:95:
77:39:67:89:d1:83:2f:f2:1b:59:45:f3:e5:e5:9d:81:41:e6:
09:e8:4b:e6:21:f1:63:be:6a:93:a9:2b:53:df:b0:e1:e2:78:
eb:17:41:a7:cf:d8:71:89:4e:42:6e:1e:86:d0:dc:24:0d:f8:
e0:85:2a:2b:cc:fa:da:4a:c2:8b:96:78:53:23:64:9d:a7:6f:
cb:3c:f6:52:36:92:2f:4e:02:f1:9d:ea:81:6b:db:de:bc:67:
ad:4b:99:3a:5e:82:22:c6:a3:bd:51:7f:0e:2b:14:2e:51:3f:
be:86:41:c9:df:bc:5e:29:bc:11:b4:6c:f1:49:2f:ab:42:17:
1d:ae:52:22:20:bb:77:53:34:ce:2c:d5:54:a4:a5:1e:81:24:
34:b2:65:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:38:27 2025 by rpki-client