Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/3230302e322e3230392e302f32342d3234203d3e2034393935.roa
File: 3230302e322e3230392e302f32342d3234203d3e2034393935.roa (raw, json)
Hash identifier: EW8pYlw4yuOPiIoqfAcIASaGptw+FXOaSI1EJ4fxRqY=
Subject key identifier: DA:09:EE:C3:8F:64:EF:B9:22:E9:05:9C:DE:04:10:6B:4B:22:48:B6
Certificate issuer: /CN=979E05FFEED48A9692454F668B83D49714C9FE39
Certificate serial: 2BF7CEF2528C49B28CFC72D1DB24AAF4E1E3FCF9
Authority key identifier: 97:9E:05:FF:EE:D4:8A:96:92:45:4F:66:8B:83:D4:97:14:C9:FE:39
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/979E05FFEED48A9692454F668B83D49714C9FE39.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/3230302e322e3230392e302f32342d3234203d3e2034393935.roa
Signing time: Tue 04 Feb 2025 20:03:37 +0000
ROA not before: Tue 04 Feb 2025 19:58:37 +0000
ROA not after: Tue 03 Feb 2026 20:03:37 +0000
asID: 4995
IP address blocks: 200.2.209.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:f7:ce:f2:52:8c:49:b2:8c:fc:72:d1:db:24:aa:f4:e1:e3:fc:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=979E05FFEED48A9692454F668B83D49714C9FE39
Validity
Not Before: Feb 4 19:58:37 2025 GMT
Not After : Feb 3 20:03:37 2026 GMT
Subject: CN=DA09EEC38F64EFB922E9059CDE04106B4B2248B6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:1c:d9:ab:c9:e5:4a:ee:f1:a8:73:93:c3:bf:
c1:5e:25:f5:3b:ab:3a:d9:72:99:7f:00:f4:2e:ec:
9d:a4:0d:a9:63:a9:ee:a4:1c:95:cb:bb:1a:98:b7:
39:77:bf:b0:b1:76:69:55:22:85:c1:f1:ac:81:1a:
e6:ef:a4:f5:02:c9:e0:d1:62:69:88:2d:cb:82:95:
10:10:47:fd:78:1f:01:d7:57:28:8a:08:27:11:a3:
1a:73:68:6d:9b:20:ec:68:5a:63:d1:22:db:ec:75:
9b:be:83:8e:d9:52:60:89:7d:b4:62:16:5e:07:19:
cb:a7:51:f2:f2:4b:9e:20:c8:eb:48:a1:6e:a4:4a:
1c:91:88:2a:13:e2:4e:cf:89:ac:40:a3:28:6c:7a:
d9:ec:53:00:ce:a7:c0:45:02:86:3c:66:02:8a:d2:
cf:2e:77:3f:8d:ef:00:b1:30:9d:f1:32:55:68:d5:
0a:8d:92:a3:a4:93:5f:60:1a:91:94:e6:20:c0:ee:
8c:51:6d:17:dc:ce:e1:e9:07:6d:5b:75:6a:71:c8:
bd:25:21:7a:ce:10:2d:3e:2f:a3:a5:13:cc:29:c3:
66:de:ef:72:3d:1a:82:48:80:e0:68:98:15:f8:97:
3b:76:1f:88:6c:d9:f6:e1:2e:ad:06:7c:0c:8d:8b:
58:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:09:EE:C3:8F:64:EF:B9:22:E9:05:9C:DE:04:10:6B:4B:22:48:B6
X509v3 Authority Key Identifier:
keyid:97:9E:05:FF:EE:D4:8A:96:92:45:4F:66:8B:83:D4:97:14:C9:FE:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/979E05FFEED48A9692454F668B83D49714C9FE39.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/979E05FFEED48A9692454F668B83D49714C9FE39.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/3230302e322e3230392e302f32342d3234203d3e2034393935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.2.209.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:e8:93:14:e3:a9:dc:1a:cb:e9:e3:2b:a5:f7:e0:d7:ca:f0:
81:e0:bb:05:2e:b2:aa:eb:65:eb:c4:e5:41:8c:f2:5c:3d:d8:
7f:a6:e6:e1:e3:b3:29:0f:50:9b:c5:e2:d8:34:5e:5e:8f:54:
88:d8:f1:08:a2:d2:b3:5c:c6:07:90:96:66:35:d3:ed:53:67:
13:42:e8:aa:a2:f2:c1:a3:45:9b:9f:bf:8b:b7:17:59:00:3f:
bc:9b:ce:e7:64:2a:fe:59:5a:9f:96:77:4b:ad:8a:5e:37:a5:
b6:7c:77:a3:03:6a:93:b5:88:5b:29:a2:a5:d5:f2:ea:7f:2f:
e5:c5:3b:d0:8c:21:73:7d:0f:dc:91:cf:0f:4e:53:61:0c:90:
b9:cf:f9:a5:b4:3b:e3:46:08:5f:95:66:8e:ae:ab:01:ec:06:
61:13:d3:93:d5:42:9f:fc:bb:c9:75:c1:a6:c3:34:03:3d:ac:
9c:5e:e3:32:2e:bc:07:1d:b7:39:16:a1:d6:78:68:3e:e9:9a:
2d:0d:1a:31:5b:54:db:e6:ed:a0:f8:6d:8d:c1:19:d0:49:75:
12:d3:db:6c:1d:97:28:27:81:a2:5d:cd:1c:0a:cc:9b:a3:96:
20:26:d4:65:ad:21:49:52:c2:8c:3d:19:fb:d6:29:cd:53:40:
b9:22:fb:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:32:51 2025 by rpki-client