Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/467C65C09C24020154AD4A1D2F9284450A66D9C01DB93037BB3AA11728BA0E4A/0/3138312e3138392e3136302e302f32322d3234203d3e20323634383330.roa
File: 3138312e3138392e3136302e302f32322d3234203d3e20323634383330.roa (raw, json)
Hash identifier: Wuv7DqeXJRZHyktpLyvgUpk9KUe4JSC2R56va9OcXoA=
Subject key identifier: 40:F5:06:8D:5D:28:F5:5B:F4:38:4A:CF:F6:04:F8:C3:93:D1:4E:F7
Certificate issuer: /CN=1348AF2A0BC4B75B217B2CDA6041046B9818FA85
Certificate serial: 0B8F13AB0999A4CDB8367223362DA268C47B7598
Authority key identifier: 13:48:AF:2A:0B:C4:B7:5B:21:7B:2C:DA:60:41:04:6B:98:18:FA:85
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1348AF2A0BC4B75B217B2CDA6041046B9818FA85.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/467C65C09C24020154AD4A1D2F9284450A66D9C01DB93037BB3AA11728BA0E4A/0/3138312e3138392e3136302e302f32322d3234203d3e20323634383330.roa
Signing time: Tue 04 Feb 2025 18:01:05 +0000
ROA not before: Tue 04 Feb 2025 17:56:05 +0000
ROA not after: Tue 03 Feb 2026 18:01:05 +0000
asID: 264830
IP address blocks: 181.189.160.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:8f:13:ab:09:99:a4:cd:b8:36:72:23:36:2d:a2:68:c4:7b:75:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1348AF2A0BC4B75B217B2CDA6041046B9818FA85
Validity
Not Before: Feb 4 17:56:05 2025 GMT
Not After : Feb 3 18:01:05 2026 GMT
Subject: CN=40F5068D5D28F55BF4384ACFF604F8C393D14EF7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:5b:d5:c8:78:d4:0c:05:57:30:45:2b:23:14:
2a:c0:af:4b:94:84:bf:d0:a3:19:f2:dd:8a:3d:0a:
34:8b:9f:da:30:43:41:05:77:3f:17:4c:17:bd:38:
34:9e:56:5f:d0:8c:18:a4:c8:a1:a6:f8:19:f2:d6:
40:cb:99:af:30:26:ee:88:07:26:05:3c:0f:9c:79:
86:34:9f:04:0b:c0:5b:fc:be:61:07:30:2d:5a:58:
34:15:15:e3:c8:d6:91:41:a7:5e:56:d2:64:13:51:
f9:a3:db:b8:1f:f2:01:68:f2:d1:b4:62:68:20:aa:
a7:27:97:d7:98:87:af:08:0e:27:e4:c9:c2:fc:07:
78:39:ed:e4:6c:fe:fc:6b:c3:97:ae:5e:00:ad:6d:
a7:3a:a8:a0:e8:50:2f:20:04:22:7c:70:b1:45:3d:
41:92:a5:c5:f6:c3:43:09:78:3b:62:7b:e7:73:8d:
c8:6b:83:d6:2e:2e:ed:ae:68:7c:10:2f:52:5c:7f:
2d:7b:4b:0a:5b:ee:1f:b1:04:24:35:55:96:5c:fe:
c0:c1:cb:fa:85:c9:c4:84:a5:f9:67:8f:7f:ce:de:
ec:b8:13:73:4c:af:20:17:87:bd:cd:9c:1d:fb:55:
ce:9d:12:46:25:50:25:fd:84:65:9c:26:36:a2:f9:
7f:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:F5:06:8D:5D:28:F5:5B:F4:38:4A:CF:F6:04:F8:C3:93:D1:4E:F7
X509v3 Authority Key Identifier:
keyid:13:48:AF:2A:0B:C4:B7:5B:21:7B:2C:DA:60:41:04:6B:98:18:FA:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/467C65C09C24020154AD4A1D2F9284450A66D9C01DB93037BB3AA11728BA0E4A/0/1348AF2A0BC4B75B217B2CDA6041046B9818FA85.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1348AF2A0BC4B75B217B2CDA6041046B9818FA85.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/467C65C09C24020154AD4A1D2F9284450A66D9C01DB93037BB3AA11728BA0E4A/0/3138312e3138392e3136302e302f32322d3234203d3e20323634383330.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.189.160.0/22
Signature Algorithm: sha256WithRSAEncryption
03:8e:39:ed:cf:e6:8b:3c:63:7f:e2:ec:c2:b0:29:c2:a1:9b:
6f:ba:69:03:17:ad:10:35:ee:94:78:0f:4f:b7:ee:6d:ec:2f:
ad:55:7b:00:ef:fe:7d:6c:0d:9b:c7:f6:04:a7:45:93:dd:08:
87:e0:48:1f:64:b3:d3:90:db:54:fb:14:32:1a:75:24:e8:a7:
37:53:c6:df:b3:3e:5c:34:3e:49:f8:d7:31:f5:bf:27:c3:23:
0e:c1:ea:2b:20:9c:51:ee:32:f5:a2:f9:f2:18:b9:d7:64:0c:
21:84:4c:30:cf:26:0f:70:65:48:08:8e:71:ef:9c:ad:e9:f1:
6b:44:c0:2d:86:c8:90:d6:ea:5c:61:77:08:ae:09:82:2e:e1:
8e:68:3d:59:22:73:88:a5:6a:5d:97:06:49:3a:ff:ad:c7:81:
75:ef:f0:03:b7:be:21:1a:e9:e3:01:f2:a8:df:66:07:f6:c4:
49:91:84:9e:01:49:a8:aa:d4:57:a8:2f:fb:22:7a:44:75:46:
cd:82:68:fc:82:7f:57:fe:7c:97:db:eb:7e:e2:ad:9a:15:6e:
0f:fc:2a:1f:34:4f:9d:27:73:50:6d:fe:ad:ab:ac:5f:c9:7d:
17:45:32:0e:d4:c9:c2:68:aa:78:d7:57:c8:4a:aa:12:7d:0a:
90:35:ac:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:34:53 2025 by rpki-client