Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/3133382e39372e35362e302f32322d3232203d3e203237363935.roa
File: 3133382e39372e35362e302f32322d3232203d3e203237363935.roa (raw, json)
Hash identifier: pdbgpUClgh63QF7xEu2DoPEPfb5GE8NZL40DWC1g2ng=
Subject key identifier: CB:9E:0A:72:CA:9B:40:5B:C3:A0:8B:23:56:EF:10:F2:2E:A0:64:57
Certificate issuer: /CN=34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7
Certificate serial: 48F98290146ABE2B2830FBCC04F2C8ED0C05AD62
Authority key identifier: 34:03:9F:5B:AD:EC:D4:DF:B4:2E:3F:4E:0C:5E:CE:97:A3:01:80:A7
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/3133382e39372e35362e302f32322d3232203d3e203237363935.roa
Signing time: Mon 16 Dec 2024 19:20:03 +0000
ROA not before: Mon 16 Dec 2024 19:15:03 +0000
ROA not after: Mon 15 Dec 2025 19:20:03 +0000
asID: 27695
IP address blocks: 138.97.56.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:f9:82:90:14:6a:be:2b:28:30:fb:cc:04:f2:c8:ed:0c:05:ad:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7
Validity
Not Before: Dec 16 19:15:03 2024 GMT
Not After : Dec 15 19:20:03 2025 GMT
Subject: CN=CB9E0A72CA9B405BC3A08B2356EF10F22EA06457
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:0c:a4:9b:2e:89:ec:44:17:1a:c4:47:52:81:
13:05:8c:27:53:28:25:ef:10:91:68:9a:f1:43:68:
e0:9b:70:ed:06:9b:ff:3d:17:57:33:00:7e:be:1d:
dd:4c:3e:10:e1:69:4b:3a:f9:a5:4e:e9:3a:23:0d:
d3:fc:9e:ce:da:ec:d0:d0:07:59:7b:aa:f5:28:0a:
c5:94:55:0a:4a:fc:4f:d4:48:d4:f7:e9:c4:e0:50:
10:71:06:0f:94:a3:a9:65:8e:49:2a:35:b0:b3:c6:
da:ba:59:b3:f3:50:01:97:5d:7a:1b:90:5a:0e:9e:
50:d6:36:0d:39:88:b0:dc:bb:1d:9a:fa:0f:db:8a:
45:cd:85:b7:43:a5:a4:04:28:a3:bd:0d:2b:7e:0c:
42:be:4b:fb:b4:33:b8:c2:34:bc:b2:3d:47:dc:53:
b8:a1:cd:cf:5c:59:02:02:1f:6f:ae:86:57:87:d4:
79:68:72:5a:41:ad:a5:eb:c0:d2:24:1c:4d:83:91:
30:d0:aa:e0:2d:55:08:27:69:fe:cb:91:d0:20:ff:
01:35:10:aa:ff:58:8c:a2:53:0d:ac:10:ed:4e:2f:
55:06:33:45:06:72:db:a9:4e:bd:6a:d7:1a:15:a8:
b9:27:1a:7e:61:2a:3d:e3:b0:2c:14:e1:3c:75:5b:
a8:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:9E:0A:72:CA:9B:40:5B:C3:A0:8B:23:56:EF:10:F2:2E:A0:64:57
X509v3 Authority Key Identifier:
keyid:34:03:9F:5B:AD:EC:D4:DF:B4:2E:3F:4E:0C:5E:CE:97:A3:01:80:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/3133382e39372e35362e302f32322d3232203d3e203237363935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.97.56.0/22
Signature Algorithm: sha256WithRSAEncryption
5d:1c:85:d9:99:10:56:0c:da:51:97:0d:b1:fa:2f:21:4f:47:
3d:ff:d5:11:45:30:50:38:77:9a:29:c4:68:3b:59:34:c9:63:
0e:a8:2c:43:9b:35:71:05:d5:b5:4b:cb:74:20:14:3b:a1:b5:
d6:09:7b:c9:d8:98:15:f0:d1:84:1f:65:bf:7d:79:89:35:cf:
ae:2a:43:e3:c5:bd:f0:75:99:ce:b0:23:57:90:8e:fc:4c:05:
b2:90:d4:3c:2e:eb:71:bb:88:6a:fa:f1:f0:60:6a:9e:1a:8e:
dc:99:06:d2:a3:65:ed:33:9c:bd:7b:0f:6c:ee:a4:29:a8:62:
bf:6b:1f:05:c3:13:e4:c9:3f:e9:86:9b:c1:b2:12:52:b9:3a:
d0:f6:c2:f0:51:f5:3f:32:d7:4c:2d:ad:14:5c:2c:0c:08:f1:
94:6f:47:fd:d6:ad:78:62:73:19:c5:9a:d1:90:53:20:63:4b:
47:d1:79:29:f5:70:f4:fa:1d:78:0f:8e:46:82:94:cf:0f:1b:
23:c9:5b:ac:55:6e:a9:2e:10:dc:c6:d1:40:6c:7c:47:c2:0f:
2a:2f:17:d7:79:6a:49:67:9a:6a:9d:59:14:22:8c:30:d3:aa:
ca:79:74:a9:ec:c6:08:8e:eb:97:ef:79:98:7a:75:de:1d:68:
b4:f8:02:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:01:43 2025 by rpki-client