Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5388144CC1445D19AB568D3704F57C4106F4A596E0BD94D573BB0465BC96EA87/0/3230312e3133312e34392e302f32342d3234203d3e203237393839.roa
File: 3230312e3133312e34392e302f32342d3234203d3e203237393839.roa (raw, json)
Hash identifier: t5Yygeg7fRc+HKiC11K6szZcfX+T4s6L8OEESiCAWUE=
Subject key identifier: CB:E5:82:CA:A4:9C:7B:2D:02:76:EE:5C:BF:70:41:D3:34:70:60:16
Certificate issuer: /CN=D2FB795817082A32A8F3E5DAE437DE6D0CA85E1D
Certificate serial: 2A8EAAAD5CD0251E6B88B32705D0C0BA15B7F156
Authority key identifier: D2:FB:79:58:17:08:2A:32:A8:F3:E5:DA:E4:37:DE:6D:0C:A8:5E:1D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2FB795817082A32A8F3E5DAE437DE6D0CA85E1D.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5388144CC1445D19AB568D3704F57C4106F4A596E0BD94D573BB0465BC96EA87/0/3230312e3133312e34392e302f32342d3234203d3e203237393839.roa
Signing time: Tue 04 Feb 2025 18:48:34 +0000
ROA not before: Tue 04 Feb 2025 18:43:34 +0000
ROA not after: Tue 03 Feb 2026 18:48:34 +0000
asID: 27989
IP address blocks: 201.131.49.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:8e:aa:ad:5c:d0:25:1e:6b:88:b3:27:05:d0:c0:ba:15:b7:f1:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2FB795817082A32A8F3E5DAE437DE6D0CA85E1D
Validity
Not Before: Feb 4 18:43:34 2025 GMT
Not After : Feb 3 18:48:34 2026 GMT
Subject: CN=CBE582CAA49C7B2D0276EE5CBF7041D334706016
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:7f:cf:66:a1:da:c7:a2:79:3d:7d:28:67:70:
4a:66:23:2f:7b:e2:20:f0:ce:a7:19:5a:7c:ca:af:
fc:e4:50:cb:1e:e3:27:c5:a9:41:92:d1:97:71:0f:
1a:b3:79:11:ee:11:96:21:cd:55:68:13:07:3b:5c:
f2:aa:3e:03:37:ae:20:8b:2d:58:9d:df:40:e8:c7:
52:d5:62:2b:4b:b2:e1:bc:ea:e1:d7:1a:41:b2:65:
36:30:9f:99:8b:a1:69:e6:24:08:33:e8:8d:53:f1:
95:9f:bf:82:83:12:a4:69:cd:1d:6a:11:34:b0:04:
da:db:50:52:f9:18:c6:01:ff:b1:35:6f:27:56:b3:
af:bf:5d:af:81:82:c8:74:8d:de:69:3c:6e:81:ba:
03:f8:2d:3a:19:1c:c1:26:c2:e5:e7:6c:07:96:3d:
31:22:81:63:a8:2e:3e:67:51:a2:59:d5:5c:c1:fb:
6e:5a:f7:0a:ac:98:ec:97:53:7e:fd:a4:e9:0e:9f:
08:3e:5f:46:81:37:8a:0a:10:a8:ab:9a:86:ab:5d:
18:ee:92:1e:e5:df:32:ed:07:f6:f4:a7:c5:12:37:
ea:ad:80:03:7e:e4:74:8f:a8:b4:f9:2c:f7:4c:4b:
b4:30:cd:8c:31:fb:cd:c3:53:df:f0:cb:4c:51:21:
1c:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:E5:82:CA:A4:9C:7B:2D:02:76:EE:5C:BF:70:41:D3:34:70:60:16
X509v3 Authority Key Identifier:
keyid:D2:FB:79:58:17:08:2A:32:A8:F3:E5:DA:E4:37:DE:6D:0C:A8:5E:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/5388144CC1445D19AB568D3704F57C4106F4A596E0BD94D573BB0465BC96EA87/0/D2FB795817082A32A8F3E5DAE437DE6D0CA85E1D.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2FB795817082A32A8F3E5DAE437DE6D0CA85E1D.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5388144CC1445D19AB568D3704F57C4106F4A596E0BD94D573BB0465BC96EA87/0/3230312e3133312e34392e302f32342d3234203d3e203237393839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.131.49.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:88:36:42:4b:9d:2d:df:27:be:d0:0f:13:91:d7:8d:24:ec:
61:ca:df:2b:03:85:84:0e:2a:04:8d:74:18:84:b4:3b:05:4d:
cb:78:96:7f:57:ec:2a:24:74:0d:8b:3e:30:4d:bc:22:bc:5e:
bd:59:0a:45:7e:4e:2d:1a:1c:fb:37:a7:65:fc:13:0a:62:c3:
45:3b:e4:a0:0e:5e:a8:fe:31:52:fb:e3:fd:65:d8:59:5a:61:
e0:91:7b:2a:00:9b:2d:ee:81:3e:82:cc:1a:ff:54:e8:64:54:
2d:43:e5:e2:a6:d8:bd:54:31:90:62:90:9f:0d:73:20:f2:c4:
c7:19:b4:ff:0d:6a:ce:ff:45:f0:d1:dc:58:a4:20:92:77:b4:
69:e2:80:57:08:f8:a3:ea:1c:0c:22:5b:3d:15:eb:7f:48:4e:
04:66:f6:2a:cd:83:c2:ad:96:63:84:3c:0d:f2:55:7f:8c:27:
61:44:9c:37:d6:a1:5f:20:e3:27:64:a9:56:50:54:ba:14:cb:
c4:cc:29:a3:f7:9b:39:5b:90:e7:55:90:b7:8e:3d:8f:5d:a2:
03:88:ed:b0:52:bb:87:bf:1d:98:e5:5e:24:02:d7:66:75:1f:
fe:f7:49:e3:eb:ed:98:5d:4b:f9:11:87:0d:74:62:0d:ff:65:
9c:c6:5a:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:36:24 2025 by rpki-client