Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2B4205FE62AEF214048E4D7C4F59B26453B8EB549F43F98BF53F3D442E6BE522/0/3138392e35312e3136382e302f32322d3232203d3e20323730313131.roa
File: 3138392e35312e3136382e302f32322d3232203d3e20323730313131.roa (raw, json)
Hash identifier: FqkUcHFFW3z4v01V0UWwzIfaUHVP3QaJtb8yvz8IeHQ=
Subject key identifier: 68:CC:0B:96:F2:6C:D4:1F:C2:2C:F4:DE:37:80:2B:05:D2:D7:13:BE
Certificate issuer: /CN=C5AF8630C728235D6D2C519F20712CEDAD9E5B6B
Certificate serial: 305C848616641D377D0654E0E5342DCDD015B217
Authority key identifier: C5:AF:86:30:C7:28:23:5D:6D:2C:51:9F:20:71:2C:ED:AD:9E:5B:6B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C5AF8630C728235D6D2C519F20712CEDAD9E5B6B.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/2B4205FE62AEF214048E4D7C4F59B26453B8EB549F43F98BF53F3D442E6BE522/0/3138392e35312e3136382e302f32322d3232203d3e20323730313131.roa
Signing time: Tue 04 Feb 2025 18:30:15 +0000
ROA not before: Tue 04 Feb 2025 18:25:15 +0000
ROA not after: Tue 03 Feb 2026 18:30:15 +0000
asID: 270111
IP address blocks: 189.51.168.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:5c:84:86:16:64:1d:37:7d:06:54:e0:e5:34:2d:cd:d0:15:b2:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C5AF8630C728235D6D2C519F20712CEDAD9E5B6B
Validity
Not Before: Feb 4 18:25:15 2025 GMT
Not After : Feb 3 18:30:15 2026 GMT
Subject: CN=68CC0B96F26CD41FC22CF4DE37802B05D2D713BE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:32:15:72:92:e1:c0:e9:fd:9f:74:c9:b4:47:
2c:8b:e9:ee:e3:2a:16:23:df:c8:57:dd:49:db:83:
9a:9e:ae:ad:f4:7a:05:24:43:09:9c:24:13:ee:40:
7d:d3:94:bb:71:ee:b2:ca:fd:c6:f7:ee:bb:61:c2:
e2:8a:12:b9:e2:40:5e:df:ee:61:b8:1b:e6:da:f7:
cb:a5:a5:23:2d:6c:24:ab:71:be:64:ea:5c:8f:a4:
75:5b:b7:22:52:73:cf:37:7b:48:c5:b0:8e:24:52:
3f:ab:49:85:2c:97:dc:1d:b1:fc:bf:57:f8:56:8e:
be:da:a4:06:da:af:81:e1:30:aa:ee:45:2a:96:64:
ce:40:0e:00:24:55:fd:d6:af:cd:a7:77:6c:a9:bb:
5f:6c:ec:2e:2f:22:41:f8:c7:fc:cd:d6:d7:9b:9b:
96:b2:2a:86:e1:ca:f3:7a:26:fd:73:14:66:8c:91:
4e:26:7c:b4:b4:5c:57:d5:44:ba:d4:46:bc:0b:9a:
36:f1:4c:43:c3:8d:26:44:c1:55:b2:b7:3f:5f:55:
e1:ff:9c:01:fe:7d:04:ab:80:e3:01:f4:18:6a:0e:
ab:c8:b8:9c:bc:cf:88:59:0e:e2:88:d3:7f:a1:95:
88:5d:37:8a:43:34:35:37:65:d4:29:4e:ba:0a:69:
3d:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:CC:0B:96:F2:6C:D4:1F:C2:2C:F4:DE:37:80:2B:05:D2:D7:13:BE
X509v3 Authority Key Identifier:
keyid:C5:AF:86:30:C7:28:23:5D:6D:2C:51:9F:20:71:2C:ED:AD:9E:5B:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/2B4205FE62AEF214048E4D7C4F59B26453B8EB549F43F98BF53F3D442E6BE522/0/C5AF8630C728235D6D2C519F20712CEDAD9E5B6B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C5AF8630C728235D6D2C519F20712CEDAD9E5B6B.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2B4205FE62AEF214048E4D7C4F59B26453B8EB549F43F98BF53F3D442E6BE522/0/3138392e35312e3136382e302f32322d3232203d3e20323730313131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.51.168.0/22
Signature Algorithm: sha256WithRSAEncryption
4f:28:77:14:f4:a8:9d:47:fe:f4:10:fd:96:27:b4:e2:14:ec:
3e:c6:3d:51:0f:17:ac:dd:59:91:96:6d:f1:52:5d:87:a6:46:
28:e3:04:49:e0:50:a0:b8:15:90:fa:b4:f7:14:96:50:1b:8c:
5a:9c:ba:a3:1d:07:14:50:75:7f:d3:a1:cb:50:69:81:42:0c:
1d:a7:44:6b:1e:71:68:fe:22:6e:ae:87:d7:10:63:dd:e2:c4:
6c:dd:75:37:c5:5e:88:45:1f:9f:14:de:c6:ef:19:94:27:eb:
1b:25:8f:2b:12:97:98:98:e7:48:2b:52:eb:f8:71:ab:65:86:
2a:ce:bb:db:ec:26:be:b5:49:21:40:5f:a3:ee:4f:89:d4:b5:
69:a8:c4:06:40:ee:12:e5:51:ae:fe:5d:c7:36:bc:9d:da:96:
9f:55:f0:80:ef:81:fe:67:08:31:51:fb:d4:51:8d:84:cf:e3:
fe:cc:c7:1c:e1:1b:32:c0:07:00:92:71:9b:2b:cb:8f:1a:87:
29:3f:fb:f7:f4:67:f8:4d:dc:09:f8:62:69:e4:da:56:ff:e5:
2a:77:35:d4:fd:cb:8f:b5:01:7f:a5:ec:dd:74:d1:cd:7b:34:
90:1a:c1:12:92:30:61:92:20:34:b1:a1:98:43:11:31:73:6f:
44:fa:c8:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:59:06 2025 by rpki-client