Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4FF28C2A9BCF30534EC68F72583E74EB84115B0740831C75BAE56ACB2A958E29/0/3139302e3132342e302e302f32302d3234203d3e203238303531.roa
File: 3139302e3132342e302e302f32302d3234203d3e203238303531.roa (raw, json)
Hash identifier: K0saml8dzZP0OcPtJFpLZ7uaL4j5hHDtq2ZUNMbu6OQ=
Subject key identifier: 3D:28:67:F6:5D:D2:2E:6C:27:44:F6:2E:86:14:7F:36:5C:C5:91:3C
Certificate issuer: /CN=340F738BBE0963168846CC0EBA641A4246C73DA2
Certificate serial: 1E048FDB9D85B93BB7078A02D556634D2FA9EFD4
Authority key identifier: 34:0F:73:8B:BE:09:63:16:88:46:CC:0E:BA:64:1A:42:46:C7:3D:A2
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/340F738BBE0963168846CC0EBA641A4246C73DA2.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4FF28C2A9BCF30534EC68F72583E74EB84115B0740831C75BAE56ACB2A958E29/0/3139302e3132342e302e302f32302d3234203d3e203238303531.roa
Signing time: Tue 04 Feb 2025 18:34:44 +0000
ROA not before: Tue 04 Feb 2025 18:29:44 +0000
ROA not after: Tue 03 Feb 2026 18:34:44 +0000
asID: 28051
IP address blocks: 190.124.0.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:04:8f:db:9d:85:b9:3b:b7:07:8a:02:d5:56:63:4d:2f:a9:ef:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=340F738BBE0963168846CC0EBA641A4246C73DA2
Validity
Not Before: Feb 4 18:29:44 2025 GMT
Not After : Feb 3 18:34:44 2026 GMT
Subject: CN=3D2867F65DD22E6C2744F62E86147F365CC5913C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:5f:8a:23:0c:e0:77:e2:0b:ed:81:00:f5:19:
36:65:e9:15:93:d1:8e:6f:5c:e8:6a:05:e5:c4:4f:
4e:18:e1:eb:8f:ed:11:cb:aa:d6:fb:1c:b8:d8:8a:
ec:95:17:b6:90:05:c9:40:5e:e6:a3:71:60:31:be:
6f:63:37:06:cf:66:33:af:00:ae:e8:b3:81:98:a2:
ce:98:83:d2:71:43:e8:30:17:ed:e6:45:f6:d7:08:
88:2c:d8:f1:e3:3a:7f:7a:a4:34:db:18:28:37:cc:
9c:b4:1d:57:d3:e7:37:f3:09:8c:65:e7:a0:8a:b7:
1e:5c:b4:5b:45:1d:dc:27:05:6d:b0:c8:ab:a8:92:
e5:2f:1c:15:b6:0c:08:cf:ff:7a:38:bd:c4:ba:f8:
4b:c0:06:5a:95:2c:7d:23:2d:23:51:96:59:d2:9c:
b9:5e:b1:87:4b:00:6c:bb:e3:80:d2:ae:57:d1:5e:
83:24:9a:37:bc:b4:64:2b:12:ff:11:c0:b3:80:6b:
22:37:b8:b7:ea:5a:37:69:6d:48:27:12:e1:eb:14:
e3:06:a5:8d:fd:15:34:1b:46:74:2d:fc:e6:21:8d:
a9:3b:da:c2:91:9d:aa:76:ad:36:e0:4e:31:0e:7d:
5d:9b:9b:7d:b1:66:2c:d9:36:82:79:34:a7:74:80:
40:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:28:67:F6:5D:D2:2E:6C:27:44:F6:2E:86:14:7F:36:5C:C5:91:3C
X509v3 Authority Key Identifier:
keyid:34:0F:73:8B:BE:09:63:16:88:46:CC:0E:BA:64:1A:42:46:C7:3D:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/4FF28C2A9BCF30534EC68F72583E74EB84115B0740831C75BAE56ACB2A958E29/0/340F738BBE0963168846CC0EBA641A4246C73DA2.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/340F738BBE0963168846CC0EBA641A4246C73DA2.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4FF28C2A9BCF30534EC68F72583E74EB84115B0740831C75BAE56ACB2A958E29/0/3139302e3132342e302e302f32302d3234203d3e203238303531.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.124.0.0/20
Signature Algorithm: sha256WithRSAEncryption
81:6e:da:fc:14:7c:6c:f3:6f:6c:99:c5:7e:f1:dc:91:9a:e7:
69:13:8f:07:f0:cc:b8:b3:bd:f1:10:3d:6c:30:88:5f:53:93:
3d:94:80:0f:7f:46:cb:f0:e6:90:73:d7:26:d2:6b:cb:a4:87:
a7:0d:f4:40:7c:5f:ad:b0:91:57:d4:32:f0:86:c4:4b:f1:72:
f4:24:73:c9:5a:a2:ac:34:76:5b:4f:25:44:23:80:c0:a6:08:
be:51:e0:82:9a:e5:62:8a:4d:6a:1d:cc:95:24:ff:00:db:72:
b1:3c:17:a1:b6:9b:ee:6c:d3:09:14:c1:a4:21:03:23:26:fe:
f9:62:8d:ac:25:8b:48:35:9b:8b:e2:ee:d5:b3:c0:d0:98:39:
9a:0a:10:c9:b1:a3:54:9d:99:a6:fc:92:e3:b0:e2:f1:82:e2:
e2:d4:ab:a0:19:14:37:0a:a4:5f:82:5f:35:55:34:45:1e:38:
f6:19:a1:0b:b5:32:66:50:0c:17:e3:b6:f2:f8:e9:e0:98:ef:
0e:85:fc:48:26:e2:3b:9b:72:81:7f:c6:73:ad:60:5e:1d:39:
72:95:e0:d1:18:cc:94:73:20:68:88:ce:11:4d:b0:58:ca:f6:
c1:c2:96:2b:a7:3f:83:5b:81:51:4a:cf:e0:7d:c2:cd:dd:86:
f0:b2:96:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 18:46:45 2025 by rpki-client