Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/496497EF299227274C2063BD972DB97CB241EAC0AA62932C9E772B9D451C778C/0/3136382e302e3232302e302f32342d3234203d3e20323635353034.roa
File: 3136382e302e3232302e302f32342d3234203d3e20323635353034.roa (raw, json)
Hash identifier: BFr++7NQj19kw7qvcwg4PJJtvB6MpVezvYtRZQ/tK5o=
Subject key identifier: 6E:83:11:C2:77:B7:07:C6:1B:D8:FA:28:5A:1B:2C:A5:3F:9F:D9:95
Certificate issuer: /CN=1D60040EDE066CB0A53E8AF443F0D85DA89D7F68
Certificate serial: 1E86B47A2CCFD6C1576774DA00322A3485D8BDCE
Authority key identifier: 1D:60:04:0E:DE:06:6C:B0:A5:3E:8A:F4:43:F0:D8:5D:A8:9D:7F:68
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1D60040EDE066CB0A53E8AF443F0D85DA89D7F68.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/496497EF299227274C2063BD972DB97CB241EAC0AA62932C9E772B9D451C778C/0/3136382e302e3232302e302f32342d3234203d3e20323635353034.roa
Signing time: Tue 04 Feb 2025 18:27:37 +0000
ROA not before: Tue 04 Feb 2025 18:22:37 +0000
ROA not after: Tue 03 Feb 2026 18:27:37 +0000
asID: 265504
IP address blocks: 168.0.220.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:86:b4:7a:2c:cf:d6:c1:57:67:74:da:00:32:2a:34:85:d8:bd:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1D60040EDE066CB0A53E8AF443F0D85DA89D7F68
Validity
Not Before: Feb 4 18:22:37 2025 GMT
Not After : Feb 3 18:27:37 2026 GMT
Subject: CN=6E8311C277B707C61BD8FA285A1B2CA53F9FD995
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ec:4b:07:80:fc:a2:d3:5e:e6:ee:ee:df:43:
95:57:ab:85:19:6b:b9:10:da:33:15:e0:ea:ab:f2:
0a:10:68:be:3c:40:07:f1:08:fb:96:c7:c1:2f:08:
c3:74:71:f2:15:7e:51:f1:c3:85:73:ae:37:31:74:
7a:27:f0:90:5f:b6:50:04:6d:bc:6e:33:d3:87:36:
d9:86:d8:c8:25:df:3f:d4:08:3d:41:f3:62:00:4e:
dd:b5:3b:67:2c:e3:73:e6:df:ce:be:d0:07:a2:e6:
f3:b3:6d:83:79:48:58:3f:96:62:02:af:62:05:44:
2b:55:65:6a:4e:4e:a8:16:17:da:db:b6:e2:eb:a8:
6e:99:c9:7d:a1:a9:25:d9:3e:8c:48:6a:3e:e0:8d:
5b:a0:80:34:bb:cd:e4:47:ac:ae:74:09:d5:11:5f:
67:0b:40:d1:11:15:c1:0f:c6:da:8c:7b:fd:a3:c2:
4f:b9:39:73:ec:37:ff:0f:53:a8:42:41:b5:62:25:
6b:e7:d1:b9:4a:53:cb:b0:52:99:d0:3b:39:c7:c2:
22:b5:74:b8:07:fb:25:81:ea:fd:c7:b9:4b:0d:57:
0d:f0:0e:f9:4a:7c:59:d8:d9:67:52:f1:13:7d:7f:
99:7f:7c:d9:4a:79:e1:11:54:fa:be:d4:a4:aa:9d:
39:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:83:11:C2:77:B7:07:C6:1B:D8:FA:28:5A:1B:2C:A5:3F:9F:D9:95
X509v3 Authority Key Identifier:
keyid:1D:60:04:0E:DE:06:6C:B0:A5:3E:8A:F4:43:F0:D8:5D:A8:9D:7F:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/496497EF299227274C2063BD972DB97CB241EAC0AA62932C9E772B9D451C778C/0/1D60040EDE066CB0A53E8AF443F0D85DA89D7F68.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1D60040EDE066CB0A53E8AF443F0D85DA89D7F68.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/496497EF299227274C2063BD972DB97CB241EAC0AA62932C9E772B9D451C778C/0/3136382e302e3232302e302f32342d3234203d3e20323635353034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.0.220.0/24
Signature Algorithm: sha256WithRSAEncryption
18:a4:3a:79:71:7c:7c:66:30:f1:53:85:1d:99:7b:ce:3c:12:
d2:40:0e:6e:41:d2:0c:ad:5e:6f:13:a3:7f:84:ce:71:17:f7:
6d:f3:79:d9:18:f8:8a:6e:19:61:36:cf:96:47:7e:31:57:54:
68:ad:d9:c8:d8:a7:7f:d3:88:fc:80:a0:ab:ff:31:51:63:3e:
86:4c:16:b5:3f:c1:53:84:fa:98:64:b1:e9:75:fe:b8:1a:2a:
a5:48:de:99:d1:97:4d:10:61:6c:50:00:82:13:77:56:95:19:
fd:be:33:71:f2:45:bc:42:48:3f:c3:fa:f4:2b:40:a0:f9:b2:
e6:dc:6b:37:a0:53:c0:2f:e3:ea:d3:75:b3:05:86:d4:b4:fe:
81:41:bd:56:1b:fa:de:7d:bc:88:66:27:43:26:ae:cb:f0:ff:
e1:ec:6b:8a:fc:ed:2d:b5:b3:39:29:2a:70:73:1d:60:88:b2:
52:eb:44:10:67:ec:0a:66:ad:d6:4e:4b:83:61:94:ef:28:e3:
aa:57:20:01:74:3a:a0:15:45:13:e5:46:1a:86:80:47:94:bf:
95:83:bc:f6:1e:e1:96:76:bd:50:24:27:e6:70:77:86:c2:a0:
42:2e:dd:bf:f0:f6:03:06:71:4f:f5:5f:89:23:bf:7b:8c:69:
65:9d:a0:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:57:44 2025 by rpki-client