Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2FA9A01EB0CE8B2F041DFC1BCF2D08012BBD0A240A37DAA06510C30AD9CE6160/0/323830313a3131313a343a3a2f34382d3438203d3e203138373437.roa
File: 323830313a3131313a343a3a2f34382d3438203d3e203138373437.roa (raw, json)
Hash identifier: QmqZAUef9vbGdWrCscH5ZLokc/AHvxx2rInnCdR5b7s=
Subject key identifier: EE:E8:C9:8F:82:EF:A0:FA:72:ED:D8:7E:DD:72:9D:68:A0:B3:8D:E6
Certificate issuer: /CN=0E48AFD9B71B883E7D0F953CC116B1F94E953785
Certificate serial: 2F7DD70E9D4A4DC104F33378725E6F6E79C44343
Authority key identifier: 0E:48:AF:D9:B7:1B:88:3E:7D:0F:95:3C:C1:16:B1:F9:4E:95:37:85
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0E48AFD9B71B883E7D0F953CC116B1F94E953785.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/2FA9A01EB0CE8B2F041DFC1BCF2D08012BBD0A240A37DAA06510C30AD9CE6160/0/323830313a3131313a343a3a2f34382d3438203d3e203138373437.roa
Signing time: Tue 04 Feb 2025 18:40:54 +0000
ROA not before: Tue 04 Feb 2025 18:35:54 +0000
ROA not after: Tue 03 Feb 2026 18:40:54 +0000
asID: 18747
IP address blocks: 2801:111:4::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:7d:d7:0e:9d:4a:4d:c1:04:f3:33:78:72:5e:6f:6e:79:c4:43:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0E48AFD9B71B883E7D0F953CC116B1F94E953785
Validity
Not Before: Feb 4 18:35:54 2025 GMT
Not After : Feb 3 18:40:54 2026 GMT
Subject: CN=EEE8C98F82EFA0FA72EDD87EDD729D68A0B38DE6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:ba:8f:a8:de:8d:75:44:42:a8:0f:d7:45:32:
75:45:5f:a2:c2:d7:5b:65:c5:23:1f:cb:b1:9d:c0:
4b:9e:07:0b:0e:98:c2:12:a6:75:a6:7a:46:f4:b6:
69:4b:70:f9:2f:85:26:63:4a:f8:6f:e6:24:b0:70:
47:31:e1:c1:47:94:86:bc:6d:8d:b3:b6:60:b5:e7:
dc:d2:89:c7:58:6c:e1:59:01:d6:b9:e4:f3:dc:e8:
33:10:13:6b:9a:be:8a:4c:49:84:8e:c1:8d:5b:fa:
fa:6d:eb:05:3a:da:46:11:71:2f:f0:91:39:3b:1b:
57:89:27:9b:3d:7e:33:5e:a2:ba:bf:ce:58:c0:36:
54:95:10:db:57:28:62:d7:29:5b:86:df:d6:3f:8c:
5b:8c:79:d0:da:6c:ff:60:ba:8f:e1:43:00:36:98:
45:bf:60:34:1d:07:d5:47:de:81:3b:48:f8:c8:a6:
79:ed:e9:5f:cb:dd:95:4a:67:61:90:b7:74:9a:84:
03:67:2d:63:90:af:18:d8:de:bb:b7:be:8a:55:7d:
da:92:e1:a3:29:2d:45:0a:d2:48:8f:3b:ab:66:45:
4f:db:cc:08:9a:a8:2f:54:40:eb:88:92:88:6e:4d:
1e:2d:2d:28:c4:52:9d:6d:b6:2d:d6:d8:53:7c:6c:
27:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:E8:C9:8F:82:EF:A0:FA:72:ED:D8:7E:DD:72:9D:68:A0:B3:8D:E6
X509v3 Authority Key Identifier:
keyid:0E:48:AF:D9:B7:1B:88:3E:7D:0F:95:3C:C1:16:B1:F9:4E:95:37:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/2FA9A01EB0CE8B2F041DFC1BCF2D08012BBD0A240A37DAA06510C30AD9CE6160/0/0E48AFD9B71B883E7D0F953CC116B1F94E953785.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0E48AFD9B71B883E7D0F953CC116B1F94E953785.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2FA9A01EB0CE8B2F041DFC1BCF2D08012BBD0A240A37DAA06510C30AD9CE6160/0/323830313a3131313a343a3a2f34382d3438203d3e203138373437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2801:111:4::/48
Signature Algorithm: sha256WithRSAEncryption
ca:3f:01:42:9d:3f:c7:5c:6d:ef:46:fb:2a:38:21:68:b5:31:
62:be:0d:ca:db:d3:a9:c7:6a:b0:93:c5:17:df:b1:1b:15:6f:
e9:d1:a4:c4:23:8a:73:ea:c3:6c:54:ea:5e:41:96:57:a9:55:
b1:2c:97:85:35:cb:bd:1b:1b:87:29:69:a6:be:d8:2c:af:54:
77:6f:3e:91:dd:c0:e8:ce:6e:05:56:5d:d7:1c:25:e2:8e:5d:
74:a6:69:81:1b:6a:5b:5d:e7:6a:9d:00:d6:19:5e:9a:01:9f:
f1:c0:b1:37:84:1c:39:ed:5a:07:15:3d:fa:27:49:61:7d:b1:
60:8d:48:a0:10:6a:fb:41:63:fa:81:ca:af:5e:e8:a4:26:4b:
4a:02:6f:96:cd:df:2d:43:fc:63:8a:00:32:05:b7:99:02:cb:
20:83:d8:c6:c9:10:9f:e0:ed:f6:42:04:e9:17:ab:4c:e1:15:
88:29:0e:e3:a2:42:58:24:77:0e:77:b2:a7:ba:ec:c8:76:7d:
a4:8f:35:50:2a:3b:ad:ab:cb:5a:1b:15:d4:c0:0b:db:86:c6:
ea:92:5f:f8:9e:8a:06:2f:cb:52:4f:c3:fa:50:f0:8c:4c:c2:
64:80:2c:73:77:ac:f1:06:29:b6:e6:a7:92:34:0c:4f:20:2e:
1f:4e:1e:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:27:41 2025 by rpki-client