Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48044E016419A1717271FACDC7E8A502FF765D56CDD622F0B18F766E5F5B3C98/0/3135322e3233312e31382e302f32342d3234203d3e203532353035.roa
File: 3135322e3233312e31382e302f32342d3234203d3e203532353035.roa (raw, json)
Hash identifier: MuAKM8g47vyJqn1rcUcxrWaKLx2kz1gsTrG216F8eAI=
Subject key identifier: F7:FA:52:71:F0:EE:D1:2D:C2:A5:D5:7A:2C:CB:99:30:85:94:2C:11
Certificate issuer: /CN=482CDECDAA775F6FDA4C78CADBB70FB3AC9936A7
Certificate serial: 7E068209AE1C2F21B867813B6B847F7E4CA0D0BD
Authority key identifier: 48:2C:DE:CD:AA:77:5F:6F:DA:4C:78:CA:DB:B7:0F:B3:AC:99:36:A7
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/482CDECDAA775F6FDA4C78CADBB70FB3AC9936A7.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/48044E016419A1717271FACDC7E8A502FF765D56CDD622F0B18F766E5F5B3C98/0/3135322e3233312e31382e302f32342d3234203d3e203532353035.roa
Signing time: Sun 12 May 2024 21:50:00 +0000
ROA not before: Sun 12 May 2024 21:45:00 +0000
ROA not after: Sun 11 May 2025 21:50:00 +0000
asID: 52505
IP address blocks: 152.231.18.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:06:82:09:ae:1c:2f:21:b8:67:81:3b:6b:84:7f:7e:4c:a0:d0:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=482CDECDAA775F6FDA4C78CADBB70FB3AC9936A7
Validity
Not Before: May 12 21:45:00 2024 GMT
Not After : May 11 21:50:00 2025 GMT
Subject: CN=F7FA5271F0EED12DC2A5D57A2CCB993085942C11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:08:85:f8:d8:4d:b7:3f:3a:6c:9f:5d:de:42:
d4:a4:49:57:33:40:ab:eb:e5:b7:d6:7b:88:5e:c9:
11:9f:e5:d5:30:b0:42:65:5a:90:12:47:07:4c:c0:
3f:96:f3:d0:2f:2a:ff:fa:0e:98:08:30:6b:7d:6e:
b7:59:4e:05:6d:98:fc:9c:56:c5:7a:0f:73:fd:21:
ec:51:2f:f1:bf:c1:fe:59:ac:17:a6:ec:57:23:9b:
37:6c:df:c5:38:cb:1a:37:23:0d:42:ba:c4:46:23:
cf:74:f7:9d:15:9d:b5:ca:f1:f5:b5:0b:05:c0:13:
1c:51:55:71:78:6b:f9:24:e4:02:64:42:77:0a:95:
e7:20:4f:5d:e8:fc:d1:18:01:1c:b8:a1:e7:37:10:
6a:4f:70:c5:26:cc:a3:04:ea:ba:84:35:fd:a8:a0:
67:b9:92:5a:a1:c8:c8:ad:86:7b:d4:17:af:bc:ff:
e5:ae:59:ac:d7:9c:dd:c5:23:b2:0f:13:17:a5:9f:
d2:37:b5:86:dd:ad:5f:96:82:cf:57:a6:37:65:76:
f7:07:02:0a:f2:81:b9:07:62:fd:ea:09:1e:53:ea:
eb:72:c7:06:fd:ba:02:5b:1f:5d:17:96:cd:30:59:
7c:89:41:80:2d:1a:40:94:94:a4:fa:50:fa:10:93:
fa:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:FA:52:71:F0:EE:D1:2D:C2:A5:D5:7A:2C:CB:99:30:85:94:2C:11
X509v3 Authority Key Identifier:
keyid:48:2C:DE:CD:AA:77:5F:6F:DA:4C:78:CA:DB:B7:0F:B3:AC:99:36:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/48044E016419A1717271FACDC7E8A502FF765D56CDD622F0B18F766E5F5B3C98/0/482CDECDAA775F6FDA4C78CADBB70FB3AC9936A7.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/482CDECDAA775F6FDA4C78CADBB70FB3AC9936A7.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/48044E016419A1717271FACDC7E8A502FF765D56CDD622F0B18F766E5F5B3C98/0/3135322e3233312e31382e302f32342d3234203d3e203532353035.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.231.18.0/24
Signature Algorithm: sha256WithRSAEncryption
72:b7:c5:42:a6:30:94:d8:0e:b0:67:9a:92:99:30:1d:2e:a3:
52:94:3c:06:6f:69:9e:fd:eb:51:50:35:bd:57:31:e9:95:aa:
64:77:5a:7b:28:0d:96:26:fe:2f:0f:eb:83:97:40:cf:eb:7d:
de:c2:c4:b7:a8:89:d4:81:33:4f:59:8a:c9:9e:7e:50:f8:77:
eb:5a:da:39:3c:94:7f:d9:4e:b2:d9:2c:5e:f5:9f:e5:00:a2:
2b:25:47:97:cc:9d:96:a1:aa:23:5f:78:7e:dc:1d:31:34:54:
71:07:fb:a5:f4:8b:6c:77:b5:32:1a:c6:33:b6:57:18:9c:b6:
b4:23:99:f7:c2:36:00:f2:13:1c:fe:f2:78:ae:e7:48:a6:d1:
de:0b:79:7f:36:b3:11:53:87:ee:a7:d5:ad:ac:c0:a1:e0:fe:
32:19:86:d0:a8:77:32:5b:f7:17:16:67:8f:46:53:e3:70:d9:
22:8e:53:87:a3:4c:68:78:e9:d5:4f:a7:24:98:4c:3a:de:ec:
0a:f0:41:14:74:81:50:69:f5:d0:1c:39:2d:70:56:d0:d7:05:
39:f2:a6:a6:d2:eb:81:bd:7d:95:f5:5d:88:d0:bf:ea:e6:78:
6d:b7:c1:ef:55:18:e9:70:f9:f6:a5:f1:b9:80:2c:f5:66:55:
11:b2:be:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:09:16 2025 by rpki-client