Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/3136382e3139352e3130382e302f32322d3232203d3e203238313134.roa
File: 3136382e3139352e3130382e302f32322d3232203d3e203238313134.roa (raw, json)
Hash identifier: gJxCFkqGKOGP6OnBaNyRh6KwBoTMLGnBHA+0OgcZIAE=
Subject key identifier: 7E:87:98:64:93:64:9C:16:38:BC:C6:8C:9E:C0:BF:BB:4C:E4:95:E9
Certificate issuer: /CN=6B07BD31AD3335573775A9552187C8DA46C5971C
Certificate serial: 1C58927579EA8AAF64BE015C6A1445DF3BDDE097
Authority key identifier: 6B:07:BD:31:AD:33:35:57:37:75:A9:55:21:87:C8:DA:46:C5:97:1C
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6B07BD31AD3335573775A9552187C8DA46C5971C.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/3136382e3139352e3130382e302f32322d3232203d3e203238313134.roa
Signing time: Tue 04 Feb 2025 18:07:42 +0000
ROA not before: Tue 04 Feb 2025 18:02:42 +0000
ROA not after: Tue 03 Feb 2026 18:07:42 +0000
asID: 28114
IP address blocks: 168.195.108.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:58:92:75:79:ea:8a:af:64:be:01:5c:6a:14:45:df:3b:dd:e0:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6B07BD31AD3335573775A9552187C8DA46C5971C
Validity
Not Before: Feb 4 18:02:42 2025 GMT
Not After : Feb 3 18:07:42 2026 GMT
Subject: CN=7E87986493649C1638BCC68C9EC0BFBB4CE495E9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:29:c7:48:25:d7:bc:79:c2:c9:5f:fa:8d:b2:
36:98:a2:44:14:dd:c9:00:02:e7:57:60:82:83:5b:
df:ab:63:f0:06:6a:e9:14:7e:56:83:dd:e9:9c:a6:
74:6d:e8:ea:39:e9:64:2c:f2:96:c3:3d:8d:22:45:
26:6f:9b:4d:2e:ff:13:41:c6:f0:1f:0d:a2:3e:4b:
85:88:22:aa:eb:b4:09:bc:7c:f1:fa:66:94:2e:17:
f7:bc:b8:5d:38:20:1c:4e:f7:d9:93:5c:f8:50:3d:
5a:fd:a3:be:e8:e6:59:77:fa:15:fe:66:ac:4f:9f:
65:29:a9:cc:6a:a2:68:a7:ba:93:79:5d:5f:16:cc:
45:69:7f:ee:69:be:4b:4b:38:41:72:bd:41:ee:00:
b8:a7:15:b0:a7:dc:97:37:cc:e8:65:a8:e5:72:c3:
8c:06:82:ba:15:f0:bb:75:9f:ee:e1:88:4b:ef:22:
e2:a2:13:2c:f4:ed:35:b9:fc:55:5e:c4:79:fd:e6:
6b:46:af:79:c1:db:55:76:aa:2f:23:45:2a:4a:2c:
2b:23:3b:e2:81:42:fd:15:c6:eb:24:fa:02:f7:d7:
46:b8:a8:b7:3b:f9:09:31:93:0b:0a:04:3a:0e:9b:
f9:db:fb:4d:c9:43:77:f1:01:ec:8a:eb:86:05:d7:
f6:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:87:98:64:93:64:9C:16:38:BC:C6:8C:9E:C0:BF:BB:4C:E4:95:E9
X509v3 Authority Key Identifier:
keyid:6B:07:BD:31:AD:33:35:57:37:75:A9:55:21:87:C8:DA:46:C5:97:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/6B07BD31AD3335573775A9552187C8DA46C5971C.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6B07BD31AD3335573775A9552187C8DA46C5971C.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/3136382e3139352e3130382e302f32322d3232203d3e203238313134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.195.108.0/22
Signature Algorithm: sha256WithRSAEncryption
71:20:8c:71:4d:f9:5b:37:39:0b:03:66:e0:47:66:2d:ed:4e:
aa:28:67:ae:84:66:1a:f4:19:84:c5:36:af:de:32:ac:32:25:
49:2c:a6:1b:d5:e4:2f:45:26:7f:5f:55:37:2f:17:97:14:88:
81:56:ac:1d:dc:58:9d:13:5c:17:d9:df:15:16:eb:0f:f6:c4:
91:3c:ef:c2:22:d4:fd:44:73:0b:6e:99:51:5d:7c:59:1e:14:
59:41:32:5e:a6:f3:96:a2:1d:00:4c:04:8e:6d:ef:b1:72:ea:
d9:74:77:f6:a2:29:f7:c5:d8:c8:da:73:6a:04:82:aa:66:45:
45:98:35:61:09:27:6b:30:88:5e:ae:51:df:b0:f6:7b:1e:60:
51:90:aa:c2:e1:1e:cd:6f:06:d5:46:a5:01:d1:c7:b2:0c:b1:
1a:71:a2:41:96:67:33:30:5e:f0:0c:77:b5:41:08:9c:d4:f3:
1e:2a:c5:22:8a:c0:b0:13:79:75:5d:ba:7d:7d:85:65:84:5d:
8f:6c:ee:c3:bc:7e:cc:bd:56:e0:6e:7e:56:34:91:96:2a:5c:
d2:b9:e5:dd:78:3a:b0:bf:9b:85:8f:6d:32:73:a6:d0:0a:f2:
8a:c3:3f:94:71:ad:ef:d2:85:6f:ac:19:87:67:21:ac:4e:e8:
59:87:09:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:27:18 2025 by rpki-client