Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e39362e302f32312d3234203d3e20323632313636.roa
File: 3136382e3233342e39362e302f32312d3234203d3e20323632313636.roa (raw, json)
Hash identifier: +dnDGq3dpKHiTd9k9dd1mHCuOlYbGl6ht8hfuV3DSKs=
Subject key identifier: FC:EF:72:93:8B:23:D8:E1:BA:DC:17:7B:35:C0:61:02:64:15:4C:BC
Certificate issuer: /CN=0D1797043F7F529F13952CEE646AE7365392BBC3
Certificate serial: 7CDDDD595A14AB689C1E6E904D09036EE1651BE9
Authority key identifier: 0D:17:97:04:3F:7F:52:9F:13:95:2C:EE:64:6A:E7:36:53:92:BB:C3
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D1797043F7F529F13952CEE646AE7365392BBC3.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e39362e302f32312d3234203d3e20323632313636.roa
Signing time: Tue 04 Feb 2025 17:59:43 +0000
ROA not before: Tue 04 Feb 2025 17:54:43 +0000
ROA not after: Tue 03 Feb 2026 17:59:43 +0000
asID: 262166
IP address blocks: 168.234.96.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:dd:dd:59:5a:14:ab:68:9c:1e:6e:90:4d:09:03:6e:e1:65:1b:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0D1797043F7F529F13952CEE646AE7365392BBC3
Validity
Not Before: Feb 4 17:54:43 2025 GMT
Not After : Feb 3 17:59:43 2026 GMT
Subject: CN=FCEF72938B23D8E1BADC177B35C0610264154CBC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:58:b9:94:02:83:b0:3d:1f:08:16:f4:c0:41:
e3:c5:3f:96:84:61:d6:30:f9:63:68:72:81:43:a9:
c8:76:95:ec:50:82:20:af:29:01:bf:d0:7c:86:fe:
d8:69:7b:d8:bd:f5:55:7a:76:f7:cf:5c:00:7d:96:
e3:8f:db:11:7c:02:12:88:f8:ef:c6:fc:0e:69:64:
30:86:ea:8f:cf:99:96:b0:aa:2b:06:ec:23:26:6a:
f7:17:4e:80:8d:0e:67:c9:65:e7:52:ff:4e:cf:59:
d2:1b:42:c7:15:a0:ce:e4:af:c6:80:7f:05:7c:6d:
c2:55:8c:da:3e:e4:5c:ca:27:c4:4e:8b:bf:aa:2b:
23:cc:d1:d5:64:07:e4:8b:61:47:49:3c:1d:b1:91:
e5:71:40:05:fe:d8:cb:c6:32:2e:ae:ba:20:5a:73:
2f:1a:0d:cf:c6:e1:c6:91:58:cd:75:d5:bc:a3:3f:
4c:4f:41:4d:b9:11:08:1f:62:64:0d:43:0b:9e:06:
79:a2:76:a5:75:c2:d4:fa:65:8e:e7:52:2b:e4:da:
9d:04:a3:1e:9f:65:fd:1c:c9:39:d5:3a:60:f9:ea:
be:28:60:17:10:e4:cd:42:75:24:85:fa:a7:7e:09:
07:db:4b:3a:97:39:1d:e8:55:4f:e8:b0:9e:3c:f8:
95:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:EF:72:93:8B:23:D8:E1:BA:DC:17:7B:35:C0:61:02:64:15:4C:BC
X509v3 Authority Key Identifier:
keyid:0D:17:97:04:3F:7F:52:9F:13:95:2C:EE:64:6A:E7:36:53:92:BB:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/0D1797043F7F529F13952CEE646AE7365392BBC3.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D1797043F7F529F13952CEE646AE7365392BBC3.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e39362e302f32312d3234203d3e20323632313636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.234.96.0/21
Signature Algorithm: sha256WithRSAEncryption
7d:2e:ed:6d:b8:3e:b5:8b:69:8d:45:a1:e0:ae:42:05:b2:f0:
23:8b:53:c4:99:f7:dd:fc:16:c6:fe:3c:a5:59:b4:28:2d:37:
9e:2b:2e:40:93:97:fd:1a:96:57:32:5b:73:ab:7a:6e:f1:08:
50:7b:dd:e7:e2:e4:76:b6:06:22:75:11:7a:e0:88:18:97:cd:
71:88:8c:84:cc:46:91:c4:a8:64:75:a9:e1:bf:23:96:46:fb:
99:22:56:7d:02:2d:4c:25:be:4e:0a:14:b5:c7:56:e6:e9:04:
8a:60:cf:66:85:de:73:57:ab:6f:61:97:69:6a:da:0a:60:b6:
1b:9c:09:ca:63:d8:78:dc:7e:ea:a8:3b:04:2f:6d:6d:d9:59:
a3:18:b2:a9:a6:68:69:d0:54:9d:69:ce:0d:c8:1d:2e:ce:89:
ae:71:78:b8:ad:85:5e:e3:0c:b3:8f:55:5b:94:60:2e:2c:ec:
c8:66:dc:4f:a3:8b:3e:5e:c4:12:37:67:3b:db:91:d1:7c:2c:
52:e0:41:4c:e4:15:a7:ff:92:a2:8e:95:ca:e7:91:25:bf:17:
ef:d2:47:c5:e0:e5:f5:76:0f:64:ec:fb:d8:a7:2b:16:a8:51:
91:10:ae:7e:a0:9c:cd:cb:76:fa:54:e2:10:f0:60:f3:10:80:
0d:61:45:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:18:46 2025 by rpki-client