Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/323830303a3830303a3a2f33362d3438203d3e203236363131.roa
File: 323830303a3830303a3a2f33362d3438203d3e203236363131.roa (raw, json)
Hash identifier: JJJ1igBYPfIiBFviYU9D42m2TjcBH+gOgQ/DUCFbBjk=
Subject key identifier: 7D:1E:80:51:93:36:CA:F4:65:61:C6:84:BE:FD:F1:54:FA:2F:4A:62
Certificate issuer: /CN=43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5
Certificate serial: 4335694EF5A9282B27D1EE3C6D0954B5457F0EFF
Authority key identifier: 43:FF:1C:8A:E0:B4:75:7E:68:ED:D0:8A:E1:AE:B2:AD:AD:86:53:D5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/323830303a3830303a3a2f33362d3438203d3e203236363131.roa
Signing time: Tue 04 Feb 2025 18:05:01 +0000
ROA not before: Tue 04 Feb 2025 18:00:01 +0000
ROA not after: Tue 03 Feb 2026 18:05:01 +0000
asID: 26611
IP address blocks: 2800:800::/36 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:35:69:4e:f5:a9:28:2b:27:d1:ee:3c:6d:09:54:b5:45:7f:0e:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5
Validity
Not Before: Feb 4 18:00:01 2025 GMT
Not After : Feb 3 18:05:01 2026 GMT
Subject: CN=7D1E80519336CAF46561C684BEFDF154FA2F4A62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ae:53:88:fa:76:ba:c9:59:5a:d1:c0:d9:ac:
21:6c:0a:02:c0:af:c2:34:d5:34:dc:91:d4:24:34:
e8:bf:f5:99:32:96:0c:50:ef:f8:74:6c:a1:b2:8a:
1b:88:a1:52:f9:a1:5f:97:15:5a:d7:f7:b2:5b:b4:
4b:fd:7b:35:b6:1b:c3:68:7d:48:7a:93:49:a8:b7:
56:2e:cb:bb:a4:27:67:2f:08:54:5e:b1:a0:ab:16:
cc:1f:e2:a3:ff:f8:88:96:84:ce:9b:0f:59:fa:5d:
d5:e4:a3:e5:ab:b6:84:86:5a:75:60:14:cc:49:1f:
90:10:77:f7:9a:15:f4:ae:a1:fe:26:ef:53:84:fc:
e4:db:57:18:d6:05:8d:82:2d:a5:88:d8:5b:fa:e9:
62:8e:c5:26:bf:7b:7c:23:3d:b7:e8:75:c6:c1:b9:
4c:30:f5:10:e6:4d:07:58:69:fa:1b:e9:d1:90:79:
ce:47:59:aa:98:58:6e:7d:dc:74:69:78:f3:e6:5d:
dd:bb:b4:4d:d8:ac:54:c2:51:16:78:74:75:04:2c:
2f:b2:17:cc:02:09:8d:da:ec:c5:b7:b1:ca:71:8a:
69:ad:9c:52:ff:32:38:c9:e7:d9:6f:81:48:22:d5:
1d:08:1d:ea:f2:e4:9e:0d:06:ad:b4:36:18:a6:38:
b1:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:1E:80:51:93:36:CA:F4:65:61:C6:84:BE:FD:F1:54:FA:2F:4A:62
X509v3 Authority Key Identifier:
keyid:43:FF:1C:8A:E0:B4:75:7E:68:ED:D0:8A:E1:AE:B2:AD:AD:86:53:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/323830303a3830303a3a2f33362d3438203d3e203236363131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2800:800::/36
Signature Algorithm: sha256WithRSAEncryption
40:0c:ea:0e:a4:0e:96:ea:a9:8a:51:c2:20:e0:b1:98:e8:e4:
cd:28:40:a9:57:2f:1f:80:be:2c:fd:0c:cd:e4:b9:fd:f4:90:
e9:8f:ee:f5:46:55:20:86:5a:6c:8d:cc:8e:c7:96:84:55:97:
b6:09:93:67:99:eb:2e:3b:51:47:7c:4c:41:25:01:17:0e:c0:
5d:45:67:98:f2:de:33:ca:48:6c:94:30:df:ed:9f:e3:53:da:
e2:0d:e2:d0:e9:1e:81:81:60:4c:f0:1a:71:0a:d3:fd:b0:91:
c3:60:08:e7:1a:93:5b:3b:ba:1d:f0:f1:01:60:d5:cd:09:77:
bc:fa:2c:de:7a:22:6a:a7:08:7e:46:6a:a2:96:f9:bd:9b:2d:
8a:70:46:3d:36:f3:93:97:0d:74:18:7e:68:b0:12:f5:ca:78:
09:7f:e9:a3:6b:57:ed:73:59:ac:93:dc:51:f4:98:ac:45:4d:
a9:a7:eb:61:bb:42:83:5b:30:55:34:c4:23:44:ae:00:84:c3:
a5:dd:e8:c4:b3:ac:22:87:01:79:16:b5:bf:6e:21:17:0b:7a:
e2:09:ae:72:33:28:a7:47:c0:54:54:ee:e1:bd:46:fa:b9:42:
77:01:93:d7:fb:b8:59:0d:a4:90:ed:6d:55:fb:62:71:ec:bc:
a5:09:64:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:11:04 2025 by rpki-client