Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/3138392e3230342e3233362e302f32342d3234203d3e203138373334.roa
File: 3138392e3230342e3233362e302f32342d3234203d3e203138373334.roa (raw, json)
Hash identifier: fqO1fd8eytmGELQ3SFPhspUMt1At7IXPSnB8ZSWERTw=
Subject key identifier: 9B:55:91:AA:41:01:FD:2D:A7:6B:33:C9:F7:F3:DC:16:D2:EE:17:2C
Certificate issuer: /CN=7997A25836B429E9E6D15518DC739700B6C9C4FD
Certificate serial: 5CDF8BDD24108EBE5AB3DA4A7413408425F3EC96
Authority key identifier: 79:97:A2:58:36:B4:29:E9:E6:D1:55:18:DC:73:97:00:B6:C9:C4:FD
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/3138392e3230342e3233362e302f32342d3234203d3e203138373334.roa
Signing time: Tue 04 Feb 2025 18:06:50 +0000
ROA not before: Tue 04 Feb 2025 18:01:50 +0000
ROA not after: Tue 03 Feb 2026 18:06:50 +0000
asID: 18734
IP address blocks: 189.204.236.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:df:8b:dd:24:10:8e:be:5a:b3:da:4a:74:13:40:84:25:f3:ec:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7997A25836B429E9E6D15518DC739700B6C9C4FD
Validity
Not Before: Feb 4 18:01:50 2025 GMT
Not After : Feb 3 18:06:50 2026 GMT
Subject: CN=9B5591AA4101FD2DA76B33C9F7F3DC16D2EE172C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:77:ae:d2:ff:3a:04:3f:49:f9:63:3b:6f:36:
54:51:68:0d:26:c9:5b:c5:0c:65:53:7e:18:b1:f6:
38:34:73:76:b3:37:7f:29:03:11:56:b3:55:cb:67:
72:d8:a8:b5:09:e0:5e:f1:1c:76:ed:7b:ff:31:1d:
15:ce:5b:67:3e:02:fe:99:e3:40:52:b7:99:20:05:
28:4b:2f:97:8d:86:d4:36:e1:5c:a1:93:9c:26:b9:
02:0b:60:3b:fa:bf:e8:f5:87:4e:bc:56:d1:13:34:
b1:99:ec:c6:ed:33:a9:eb:10:10:52:b9:b2:fe:8b:
20:f1:23:33:db:b5:cf:67:d9:4e:00:42:2e:a8:8f:
aa:77:ba:40:a4:44:c7:08:ad:80:f5:35:20:30:6c:
a1:96:db:51:f0:c9:aa:be:5b:3a:17:e3:ec:bd:e1:
3b:65:5f:ec:6d:3e:df:f7:4f:b1:cb:08:75:0d:15:
65:b7:dc:4b:3f:49:d7:1d:40:16:b9:36:ea:43:e9:
23:ae:81:9e:ae:c9:0f:85:51:16:fb:d2:40:87:c0:
01:28:a9:f5:b2:21:45:f6:cc:92:df:43:7a:43:d5:
29:28:ce:2b:c4:da:b7:27:77:87:4f:c2:af:fe:df:
67:e9:c5:80:09:13:57:50:ae:4c:8f:ed:e6:27:5b:
a5:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:55:91:AA:41:01:FD:2D:A7:6B:33:C9:F7:F3:DC:16:D2:EE:17:2C
X509v3 Authority Key Identifier:
keyid:79:97:A2:58:36:B4:29:E9:E6:D1:55:18:DC:73:97:00:B6:C9:C4:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/3138392e3230342e3233362e302f32342d3234203d3e203138373334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.204.236.0/24
Signature Algorithm: sha256WithRSAEncryption
00:1b:95:83:2e:10:18:d1:d0:d5:e8:f5:48:67:5f:6b:ac:ba:
2d:0a:d6:e9:8a:df:bd:70:07:2d:9e:52:4f:2f:5d:d6:57:d7:
e5:36:c0:d0:89:c0:a9:67:80:11:dd:7d:3c:df:4c:a5:8d:97:
98:64:ee:39:c9:13:82:17:4e:72:02:07:39:ea:b4:62:c9:3b:
2e:66:80:27:84:c4:7b:a3:96:ea:60:cf:e5:27:2a:8d:e2:5d:
07:25:61:3e:1d:64:70:8b:8d:d3:5c:c1:e7:cd:2b:20:27:58:
8d:6d:ac:02:2f:b4:60:98:8a:7b:58:54:38:f6:9c:c6:50:9d:
87:83:7d:59:e5:50:30:4a:7e:cc:c4:6e:33:b8:00:d8:3e:4b:
06:70:d2:e0:0a:9b:2b:0a:4f:48:9e:91:30:70:c8:89:1e:f8:
54:c2:75:48:2c:44:ad:0c:b5:a7:05:8a:08:dc:82:b5:b2:c4:
5f:64:1b:03:ac:77:aa:c8:14:1b:15:c2:93:66:5b:d4:a1:e0:
17:c2:83:cc:96:ad:96:ea:7e:bf:62:55:4d:ca:59:d1:37:2c:
21:d6:bf:28:0f:5e:35:1d:02:00:ad:b3:11:b8:2b:a6:f9:8c:
ce:a8:b6:4b:af:63:c1:bb:5f:dd:eb:44:2d:e6:ae:f5:07:e6:
6d:8d:28:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:06:17 2025 by rpki-client