Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139312e37312e302e302f31372d3234203d3e203130363230.roa
File: 3139312e37312e302e302f31372d3234203d3e203130363230.roa (raw, json)
Hash identifier: bdL1EFsqe7AoOWSOTEQKCNB7hOi8amKH8rfciZ4gL8M=
Subject key identifier: 9E:96:B4:FE:0B:7C:1F:8B:8B:DA:AE:EA:01:AB:DF:6A:A0:69:EA:F7
Certificate issuer: /CN=43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5
Certificate serial: 098D5AD65C26CB457CBAD5B0F857088859130188
Authority key identifier: 43:FF:1C:8A:E0:B4:75:7E:68:ED:D0:8A:E1:AE:B2:AD:AD:86:53:D5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139312e37312e302e302f31372d3234203d3e203130363230.roa
Signing time: Tue 04 Feb 2025 18:05:16 +0000
ROA not before: Tue 04 Feb 2025 18:00:16 +0000
ROA not after: Tue 03 Feb 2026 18:05:16 +0000
asID: 10620
IP address blocks: 191.71.0.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:8d:5a:d6:5c:26:cb:45:7c:ba:d5:b0:f8:57:08:88:59:13:01:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5
Validity
Not Before: Feb 4 18:00:16 2025 GMT
Not After : Feb 3 18:05:16 2026 GMT
Subject: CN=9E96B4FE0B7C1F8B8BDAAEEA01ABDF6AA069EAF7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ca:1a:52:e4:32:86:d0:dc:b6:48:c2:b8:a3:
64:de:68:a0:20:ed:ac:81:13:bd:c4:c3:53:e2:c7:
8b:2e:6d:72:c1:e2:26:ab:71:f2:a5:ae:fe:25:6e:
3f:d7:12:c0:52:5d:7a:e2:58:ed:40:2b:6d:28:35:
dc:ad:33:aa:0d:7d:ab:35:a4:0f:27:20:fa:dd:28:
c8:ac:f5:6f:00:ca:80:49:aa:70:17:1a:e6:16:94:
7d:f6:ac:3e:8e:9c:89:52:5a:1b:98:58:79:3d:d4:
75:1b:52:c7:02:1b:88:55:27:e8:f4:89:aa:92:d7:
1b:4f:09:fe:de:74:47:ba:de:ab:56:23:92:4e:d6:
7e:d3:2f:2b:56:e4:21:65:20:42:1e:28:5a:34:b2:
b6:fb:7a:e6:5f:48:8f:c6:8d:9b:42:97:65:9e:d1:
fc:36:fa:3e:7b:27:02:b6:bf:91:51:46:86:5a:c7:
0e:82:a9:dd:07:54:51:cc:a4:5d:bb:54:b0:56:f6:
79:1a:a6:63:ec:2f:55:6a:e8:ca:2a:c4:78:50:c5:
3b:6e:79:90:91:30:6f:c7:1d:6b:69:68:4e:ee:fa:
1a:f0:3c:df:d9:74:bf:26:e7:d0:64:46:87:d3:2c:
e3:d4:1c:b5:5d:72:07:2d:33:36:ee:30:84:02:dc:
6c:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:96:B4:FE:0B:7C:1F:8B:8B:DA:AE:EA:01:AB:DF:6A:A0:69:EA:F7
X509v3 Authority Key Identifier:
keyid:43:FF:1C:8A:E0:B4:75:7E:68:ED:D0:8A:E1:AE:B2:AD:AD:86:53:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139312e37312e302e302f31372d3234203d3e203130363230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.71.0.0/17
Signature Algorithm: sha256WithRSAEncryption
a3:96:dc:25:dd:50:78:9f:1b:67:0f:f6:26:c3:bb:09:ef:33:
29:6e:64:3c:e1:e2:89:8c:5e:ea:5c:8c:84:3b:cd:34:f7:7f:
52:43:bc:f3:10:00:cf:23:6d:44:d5:33:5b:9d:ce:8e:8c:3c:
06:bc:c3:36:0c:35:fd:29:36:2f:dc:c2:24:ae:71:ea:97:be:
cc:51:c9:c5:73:15:d7:10:36:80:37:c3:cc:37:e9:f8:03:00:
d5:81:64:8b:24:98:92:cb:b6:b8:d8:3f:bd:3d:89:ce:1c:e1:
52:c7:a3:6f:fc:da:df:b5:ba:75:10:20:e6:9c:fe:75:a6:60:
a2:68:59:98:fc:54:4b:9b:4c:4d:58:aa:3a:2d:d8:96:52:57:
bc:58:20:41:d7:18:3c:a7:10:90:70:98:27:c8:13:98:ab:fe:
5e:31:41:c4:02:20:c1:54:99:20:42:36:0c:86:e8:5d:43:97:
9d:9f:78:19:71:58:1d:c7:e5:88:01:c2:3a:5a:81:d1:97:cf:
e9:ab:eb:ac:73:ea:32:b4:0a:18:73:69:42:e2:f1:9d:76:21:
51:fc:d4:d2:1c:4c:c7:a1:7a:ec:7f:73:f5:e5:5d:e0:ac:78:
2f:2e:1b:c7:42:ed:39:04:86:48:49:89:6e:c0:ef:12:cb:19:
04:4f:1b:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:42:39 2025 by rpki-client