Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/3138312e3138392e3135342e302f32342d3234203d3e203233323433.roa
File: 3138312e3138392e3135342e302f32342d3234203d3e203233323433.roa (raw, json)
Hash identifier: g1JPPpb7gPtCiQsHAyLsY2lBnL8EPGwhNjnDp11zG0g=
Subject key identifier: EA:65:EF:64:94:5F:BA:4D:29:8E:C7:8F:F7:78:6A:13:A5:A3:52:2F
Certificate issuer: /CN=4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0
Certificate serial: 132958233E308F05B40EAB699C30733530D14CD7
Authority key identifier: 4C:C1:00:87:B3:2E:E6:9A:48:8F:5A:E8:AF:A2:EE:2F:50:61:AD:E0
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/3138312e3138392e3135342e302f32342d3234203d3e203233323433.roa
Signing time: Tue 04 Feb 2025 18:15:27 +0000
ROA not before: Tue 04 Feb 2025 18:10:27 +0000
ROA not after: Tue 03 Feb 2026 18:15:27 +0000
asID: 23243
IP address blocks: 181.189.154.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:29:58:23:3e:30:8f:05:b4:0e:ab:69:9c:30:73:35:30:d1:4c:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0
Validity
Not Before: Feb 4 18:10:27 2025 GMT
Not After : Feb 3 18:15:27 2026 GMT
Subject: CN=EA65EF64945FBA4D298EC78FF7786A13A5A3522F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:e4:48:85:f7:c8:e1:0c:3f:c6:2e:ec:e1:13:
88:8a:11:b8:ee:95:2a:af:33:d2:f3:c4:08:e8:45:
23:9f:69:6b:86:82:4a:aa:de:8f:ed:0c:c6:1d:97:
c8:d3:1a:40:97:ff:b9:db:d4:d2:e8:5f:cb:c4:8e:
20:0b:3f:68:a8:c4:05:9a:2a:59:fc:b7:98:e9:51:
49:d1:d2:d8:e5:fc:8d:f8:7d:74:3e:66:a9:78:51:
e8:bc:12:67:d9:ac:24:92:e4:c8:8b:2e:05:bf:e1:
b9:ee:9a:07:7b:7b:a0:e1:67:55:c6:ac:d8:f9:70:
28:11:d7:69:ce:61:3b:8d:ae:15:e0:96:a8:dc:05:
d6:15:78:eb:e9:05:43:91:a5:d3:0e:df:e4:7a:13:
2a:c8:26:63:8c:3a:84:05:5d:76:ad:9a:b2:c7:6f:
92:aa:ea:eb:d1:fd:fa:6f:6c:b1:db:c8:20:5b:c2:
fb:81:e2:e4:e8:86:68:42:92:41:be:04:ca:e9:bc:
1c:72:12:86:0d:c3:b4:73:b8:18:2a:fe:b8:85:70:
4f:53:7a:bf:15:77:af:3a:c4:b9:5e:5f:a9:dd:54:
24:ba:bf:68:1a:d0:4e:b5:b5:cd:0d:d8:fe:36:db:
a2:7c:7b:b7:2d:ea:f0:bb:04:e2:74:ee:22:7b:a8:
b6:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:65:EF:64:94:5F:BA:4D:29:8E:C7:8F:F7:78:6A:13:A5:A3:52:2F
X509v3 Authority Key Identifier:
keyid:4C:C1:00:87:B3:2E:E6:9A:48:8F:5A:E8:AF:A2:EE:2F:50:61:AD:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/3138312e3138392e3135342e302f32342d3234203d3e203233323433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.189.154.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:0b:6c:9c:8d:3e:31:1f:0b:32:6b:8a:5c:20:23:0e:47:31:
59:34:ca:9e:4f:dc:8a:f4:70:ce:07:11:92:42:fa:b9:76:9d:
0e:e5:22:2a:8d:64:ac:c1:90:7c:bd:0f:27:2f:9d:bd:51:62:
b5:73:27:61:67:59:1d:a3:12:da:45:da:5c:5f:46:56:3c:79:
8a:f4:64:42:4c:87:ba:7f:ff:7d:a7:64:8a:45:42:d5:8a:27:
9d:aa:4d:9d:23:1c:b5:c4:24:f0:fd:4f:48:70:b6:19:7a:bf:
73:e0:a6:b7:0f:99:78:6b:ef:50:40:db:d0:56:6e:2e:f8:37:
56:a5:08:0c:96:d9:3e:36:b5:9e:4e:a2:d0:0f:d2:02:ba:de:
d6:88:0b:a2:8a:45:96:e9:94:85:cd:15:77:1f:2a:0f:d1:eb:
b7:b7:48:7d:a3:cc:62:8d:a5:ef:af:15:c0:71:c3:27:44:ea:
12:e5:0f:38:d2:67:88:a1:49:21:a2:93:7f:fb:1b:2f:ad:8f:
2a:6f:b2:5d:b6:23:fe:3f:59:65:33:ba:3c:00:5c:68:cc:e7:
0e:23:03:5e:4a:a4:72:26:03:e9:44:35:ed:40:5b:19:e4:b9:
66:a1:fe:60:9f:a4:e5:ce:a6:53:6f:b9:b3:15:de:81:af:14:
c1:8d:27:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:25:59 2025 by rpki-client