Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/3230302e322e3231362e302f32342d3234203d3e2034393935.roa
File: 3230302e322e3231362e302f32342d3234203d3e2034393935.roa (raw, json)
Hash identifier: +VQdxdvDF/7MPIVMDj9PwiLP5ZkJcz8XwoV0OiKkf50=
Subject key identifier: 25:CB:98:9C:25:53:5C:BF:88:C9:FF:45:55:80:CE:7C:F0:5E:DD:9E
Certificate issuer: /CN=979E05FFEED48A9692454F668B83D49714C9FE39
Certificate serial: 2DF45367A2FF6918C730CD14A990740DF712F4A1
Authority key identifier: 97:9E:05:FF:EE:D4:8A:96:92:45:4F:66:8B:83:D4:97:14:C9:FE:39
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/979E05FFEED48A9692454F668B83D49714C9FE39.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/3230302e322e3231362e302f32342d3234203d3e2034393935.roa
Signing time: Tue 04 Feb 2025 20:03:41 +0000
ROA not before: Tue 04 Feb 2025 19:58:41 +0000
ROA not after: Tue 03 Feb 2026 20:03:41 +0000
asID: 4995
IP address blocks: 200.2.216.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:f4:53:67:a2:ff:69:18:c7:30:cd:14:a9:90:74:0d:f7:12:f4:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=979E05FFEED48A9692454F668B83D49714C9FE39
Validity
Not Before: Feb 4 19:58:41 2025 GMT
Not After : Feb 3 20:03:41 2026 GMT
Subject: CN=25CB989C25535CBF88C9FF455580CE7CF05EDD9E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:cc:0f:4c:53:26:3f:87:09:cb:49:d6:ff:cf:
91:2f:ea:1c:b0:7d:98:b8:6d:15:37:f2:ef:66:3b:
42:6e:8e:c1:ad:a8:45:dd:f0:fc:c3:5f:cf:b1:d1:
ef:2f:dd:1e:e3:cb:da:a0:7c:10:14:74:99:ad:99:
25:bb:19:87:a7:0c:33:89:c1:94:63:a8:be:c7:1d:
fd:68:77:c5:48:bb:a8:ae:d8:e4:fe:38:24:b8:e8:
b7:1f:18:08:7c:91:27:d3:9a:04:d9:ec:8e:84:ee:
13:98:b0:6c:40:20:91:4b:8b:0b:e0:76:ce:21:02:
b4:c8:cc:75:00:f8:7a:5d:cd:f3:0e:a7:47:9a:a4:
48:b0:cb:14:0a:f3:81:5a:11:fb:e1:9e:e8:e8:20:
26:a3:2f:96:44:a1:d8:ca:2f:52:31:7b:12:3a:06:
92:b5:54:6d:c8:3b:f0:ce:5d:92:a2:51:32:fb:9c:
f6:e3:91:3d:85:e5:d0:62:67:fc:82:09:d9:ed:b5:
3e:2a:70:d5:ad:24:a4:17:58:30:7e:07:42:10:a9:
66:a0:aa:7d:bf:b2:1c:9f:fe:50:9c:4f:46:81:91:
7f:b2:b3:b9:8c:54:b1:1a:66:6b:23:fc:0c:ec:c5:
02:42:aa:94:9e:fa:97:8f:13:f7:28:d9:d5:01:43:
11:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:CB:98:9C:25:53:5C:BF:88:C9:FF:45:55:80:CE:7C:F0:5E:DD:9E
X509v3 Authority Key Identifier:
keyid:97:9E:05:FF:EE:D4:8A:96:92:45:4F:66:8B:83:D4:97:14:C9:FE:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/979E05FFEED48A9692454F668B83D49714C9FE39.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/979E05FFEED48A9692454F668B83D49714C9FE39.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/3230302e322e3231362e302f32342d3234203d3e2034393935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.2.216.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:02:ec:5d:2c:79:1e:48:41:3d:e7:c4:fe:7e:ac:fd:82:b0:
cb:04:93:8f:74:f7:bc:78:80:70:73:74:40:80:fa:52:74:3e:
68:be:c9:d1:8a:e5:cc:06:5c:be:56:62:56:4e:9a:a0:68:66:
1b:ef:7f:ea:07:63:cd:fa:13:96:e0:c1:4a:95:56:e5:43:14:
40:c9:4d:f6:09:d2:77:95:c5:1c:35:81:bb:ab:00:39:37:4f:
7d:96:c1:30:19:15:4c:1c:2f:83:f8:e9:7c:88:03:d5:a7:9c:
99:06:45:b4:cc:a3:c7:93:be:8c:9f:13:88:67:d8:99:b4:a2:
9a:67:c5:7b:44:08:17:b3:00:91:f0:8c:3f:3f:31:b7:60:ae:
dd:5c:b3:88:33:65:b2:78:90:2e:1f:00:97:4f:da:e5:34:a4:
5d:41:71:2b:09:ea:46:b3:a4:30:ba:84:72:51:93:9a:39:69:
80:84:e0:d7:62:98:c9:b6:b6:62:21:97:c8:96:92:8e:dc:f8:
32:94:43:94:6b:5d:05:66:96:e5:17:ba:e6:1d:2b:18:20:c0:
0b:ea:e4:f4:0b:e4:c7:65:e4:55:e1:df:c1:79:16:c3:15:1e:
8e:c1:fa:7d:84:23:54:f6:be:5b:dc:fd:b5:07:b9:32:ee:e5:
df:3c:13:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:31:21 2025 by rpki-client