Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/3139302e31342e31352e302f32342d3234203d3e203233323433.roa
File: 3139302e31342e31352e302f32342d3234203d3e203233323433.roa (raw, json)
Hash identifier: +3VsPSTy23iURbuWkPV3K5Lpg5gpDqtmVO0d/LBRq7s=
Subject key identifier: 68:8E:62:05:CA:09:F1:E4:55:F6:6D:AA:53:E3:4A:CA:B1:75:F5:24
Certificate issuer: /CN=4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0
Certificate serial: 04337566395528525D18DE1D13BF8D5ED7B38E77
Authority key identifier: 4C:C1:00:87:B3:2E:E6:9A:48:8F:5A:E8:AF:A2:EE:2F:50:61:AD:E0
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/3139302e31342e31352e302f32342d3234203d3e203233323433.roa
Signing time: Tue 04 Feb 2025 18:15:23 +0000
ROA not before: Tue 04 Feb 2025 18:10:23 +0000
ROA not after: Tue 03 Feb 2026 18:15:23 +0000
asID: 23243
IP address blocks: 190.14.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:33:75:66:39:55:28:52:5d:18:de:1d:13:bf:8d:5e:d7:b3:8e:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0
Validity
Not Before: Feb 4 18:10:23 2025 GMT
Not After : Feb 3 18:15:23 2026 GMT
Subject: CN=688E6205CA09F1E455F66DAA53E34ACAB175F524
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:be:75:c4:19:a6:4b:3e:27:8e:e8:37:03:60:
60:bf:81:63:fe:78:6a:a3:4b:ef:a9:c4:5b:e6:e7:
a7:ee:c1:c4:f7:a5:3a:aa:5c:28:17:b9:81:87:d1:
37:25:46:cd:dd:0a:99:42:cf:3c:97:90:70:3d:e8:
34:23:a6:19:a6:7a:13:db:81:ee:a4:18:f1:39:b5:
4e:28:2d:eb:0a:c0:0d:f3:51:f8:67:d5:1f:67:78:
6a:24:7f:28:7b:b8:8d:48:74:a9:e1:ab:bf:a5:2f:
aa:e6:4f:1f:da:37:bc:c9:aa:4b:ff:86:6c:ca:db:
ca:1f:7e:72:f4:3a:77:0d:34:92:25:78:7e:81:8d:
4a:25:d8:f7:0f:1c:8d:a4:14:8b:01:bd:81:2c:73:
2d:79:97:e5:b4:87:ef:3f:4e:d3:40:bb:9a:fb:4d:
8d:fe:73:93:49:61:da:84:ba:d5:8d:06:1c:26:07:
14:59:6e:90:f3:2a:fd:a1:4a:94:5c:c2:e6:ca:6f:
dc:2f:ae:dc:e8:62:74:cc:95:b2:2f:2c:89:96:fa:
5e:73:06:b1:bf:ad:f1:cf:73:a6:01:ce:4e:68:84:
75:78:b6:40:bf:39:8c:36:04:33:47:5e:92:c1:6e:
41:80:fb:51:93:01:03:28:2a:f0:00:dc:a6:24:bd:
fd:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:8E:62:05:CA:09:F1:E4:55:F6:6D:AA:53:E3:4A:CA:B1:75:F5:24
X509v3 Authority Key Identifier:
keyid:4C:C1:00:87:B3:2E:E6:9A:48:8F:5A:E8:AF:A2:EE:2F:50:61:AD:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/3139302e31342e31352e302f32342d3234203d3e203233323433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.14.15.0/24
Signature Algorithm: sha256WithRSAEncryption
96:7c:1f:4f:12:0e:f5:3d:81:7a:84:f5:24:78:d5:33:44:02:
79:01:cd:b9:2a:93:21:c3:e2:65:c7:d2:c8:e0:a8:65:12:a7:
89:c8:45:70:ba:05:51:f3:c7:49:ff:68:16:cb:3d:c8:35:70:
e8:0e:11:26:bd:03:bf:df:46:32:92:2b:92:6b:2d:b4:02:23:
af:bd:ee:55:36:d6:33:fd:1f:c4:8a:b1:5d:3f:03:cf:c3:5c:
4f:7c:d3:05:37:5e:b4:c4:2a:3d:86:68:2d:0b:d8:df:90:68:
db:a2:3b:e5:1e:bc:ea:68:d7:0f:d4:dc:b9:ce:e8:20:eb:9b:
b5:30:70:00:c1:09:65:ab:81:97:d2:0f:b6:7a:e0:02:8c:32:
f0:58:24:6c:c1:cb:95:18:bb:dd:7d:77:df:cd:9c:58:af:b2:
d9:03:6c:54:d2:85:3b:58:85:46:70:01:6e:ba:2d:05:8b:7a:
a5:0b:db:6e:db:a4:b0:77:8a:f0:e4:4e:80:d3:04:26:58:67:
11:3b:60:32:38:47:c4:8c:87:bf:31:8f:94:52:57:dd:fa:c6:
b6:08:49:b0:4a:66:6b:d9:fd:e7:27:17:aa:9f:95:e0:ac:cf:
32:9b:5c:64:cd:b9:00:c1:96:08:60:b3:8f:f3:a8:47:d0:19:
27:45:d4:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:07:13 2025 by rpki-client