Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/37CFF943F3D0FB1389C93A9DA757DDADF3CB337907F05C792CF045EDB30DE20F/0/3138312e3137372e3230382e302f32312d3234203d3e203532333237.roa
File: 3138312e3137372e3230382e302f32312d3234203d3e203532333237.roa (raw, json)
Hash identifier: 9Zmu+Kq1oDOZsE8wYHIdBUc9a455vXOjdKVhC7cgE5o=
Subject key identifier: 6E:72:31:AE:9D:00:D2:E3:EC:5C:B7:19:76:56:C6:12:E6:86:61:DE
Certificate issuer: /CN=0A0D4601A8F3B3F6CC82B6D89FBFE78F28D0DDC5
Certificate serial: 20EB00C0A67D0F509C74B9479F9A971526213534
Authority key identifier: 0A:0D:46:01:A8:F3:B3:F6:CC:82:B6:D8:9F:BF:E7:8F:28:D0:DD:C5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0A0D4601A8F3B3F6CC82B6D89FBFE78F28D0DDC5.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/37CFF943F3D0FB1389C93A9DA757DDADF3CB337907F05C792CF045EDB30DE20F/0/3138312e3137372e3230382e302f32312d3234203d3e203532333237.roa
Signing time: Tue 04 Feb 2025 18:49:08 +0000
ROA not before: Tue 04 Feb 2025 18:44:08 +0000
ROA not after: Tue 03 Feb 2026 18:49:08 +0000
asID: 52327
IP address blocks: 181.177.208.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:eb:00:c0:a6:7d:0f:50:9c:74:b9:47:9f:9a:97:15:26:21:35:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0A0D4601A8F3B3F6CC82B6D89FBFE78F28D0DDC5
Validity
Not Before: Feb 4 18:44:08 2025 GMT
Not After : Feb 3 18:49:08 2026 GMT
Subject: CN=6E7231AE9D00D2E3EC5CB7197656C612E68661DE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:75:7e:54:51:b7:cf:b4:e2:72:0f:09:a4:b7:
b4:81:34:ac:37:93:71:ab:b1:6f:d5:3f:0f:28:e8:
ab:0c:89:e8:3e:79:6c:96:b7:56:0a:7d:55:a9:49:
e9:7d:62:ee:ec:94:79:d0:5c:dd:88:05:5c:aa:5e:
b4:0d:77:b7:07:fa:d9:95:ef:b6:27:a6:47:58:0e:
d4:33:68:09:6e:ff:bd:c7:82:0e:b9:5c:eb:ff:6c:
7b:8f:a4:47:f6:6c:5a:91:d6:8f:30:96:ae:bd:f5:
0f:f5:32:ff:5d:41:5d:00:11:6b:d1:95:7e:af:ef:
f3:56:ee:c3:f0:f2:45:7a:06:30:d5:1d:2a:89:21:
0e:64:84:ec:d5:e8:e5:c9:00:17:28:5e:9c:0e:a8:
18:83:91:f4:47:9a:3b:45:db:f2:62:77:49:0a:48:
58:95:a6:ba:27:7a:0a:8b:b4:ce:a2:0d:1d:b2:28:
59:fe:b0:de:a0:0b:5a:3c:e2:4b:95:d5:8e:71:95:
c5:72:07:8e:86:bf:7c:35:6a:62:33:b9:d4:e0:b2:
5d:9a:04:b0:2b:5a:d6:64:79:3c:c2:d8:c2:0b:fe:
9b:69:a8:47:ee:36:a3:2d:ff:ae:59:2d:40:1e:ce:
c1:9a:94:eb:c0:cc:33:41:6b:63:7f:4c:57:64:26:
df:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:72:31:AE:9D:00:D2:E3:EC:5C:B7:19:76:56:C6:12:E6:86:61:DE
X509v3 Authority Key Identifier:
keyid:0A:0D:46:01:A8:F3:B3:F6:CC:82:B6:D8:9F:BF:E7:8F:28:D0:DD:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/37CFF943F3D0FB1389C93A9DA757DDADF3CB337907F05C792CF045EDB30DE20F/0/0A0D4601A8F3B3F6CC82B6D89FBFE78F28D0DDC5.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0A0D4601A8F3B3F6CC82B6D89FBFE78F28D0DDC5.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/37CFF943F3D0FB1389C93A9DA757DDADF3CB337907F05C792CF045EDB30DE20F/0/3138312e3137372e3230382e302f32312d3234203d3e203532333237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.177.208.0/21
Signature Algorithm: sha256WithRSAEncryption
4e:14:83:c8:c8:09:33:fd:2d:e7:ae:a5:ec:b1:01:e5:ea:61:
26:d9:a8:5c:a1:f3:c0:2f:79:e2:08:16:49:5f:e7:06:6d:cd:
02:57:28:ad:ec:03:ee:06:21:07:b1:68:67:a0:1f:f8:25:06:
31:85:cf:0d:b4:2d:02:97:4c:4a:0a:86:73:00:7f:b5:ca:85:
d8:4a:b4:69:61:8a:4d:a2:02:b7:4f:55:b4:f6:ea:d6:27:49:
d7:24:5a:a9:85:d7:6d:28:51:71:ba:a4:e9:68:70:94:97:d5:
fc:37:df:02:14:68:5c:0c:ea:4e:17:f2:e8:e4:de:7f:71:f0:
d1:14:6f:af:3f:16:11:1f:6d:de:67:d4:f9:af:ed:cd:96:3f:
65:87:bc:68:ae:27:e6:2b:39:d9:8c:bb:c6:d3:7e:de:ae:26:
42:c6:a5:9e:9e:6d:12:17:49:9b:f3:f3:da:09:38:16:f2:3e:
72:af:6f:63:56:c3:a7:be:2a:fa:bd:d8:37:2a:07:42:1c:1c:
0d:12:9a:5b:95:34:6e:0a:01:e7:06:a0:c5:43:0d:57:46:82:
ee:f6:6c:72:07:09:ad:eb:31:fd:6f:25:10:b4:89:98:1d:c9:
b3:45:cb:59:cb:19:73:d1:71:84:70:7a:b0:50:b4:0b:f1:10:
3e:ea:19:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:12:12 2025 by rpki-client