Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5731F0F4A6C326F5122CACD4C64755CE1ABD90445C675B265F73814AE2A937A9/0/3138362e352e3232312e302f32342d3234203d3e20323732383033.roa
File: 3138362e352e3232312e302f32342d3234203d3e20323732383033.roa (raw, json)
Hash identifier: cEoPJ5RnkukpXn+S0TODwONOVHrjd3If4IkBSg1By4I=
Subject key identifier: 3E:5D:2B:67:5E:08:75:01:79:01:84:5B:87:20:32:FF:88:19:FA:57
Certificate issuer: /CN=ED372ACDEFB1DA2C35BDC9B7F4E81F4ED857EB58
Certificate serial: 4ADD6753EDAA69DB5CF91201511C67C025686C5F
Authority key identifier: ED:37:2A:CD:EF:B1:DA:2C:35:BD:C9:B7:F4:E8:1F:4E:D8:57:EB:58
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED372ACDEFB1DA2C35BDC9B7F4E81F4ED857EB58.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5731F0F4A6C326F5122CACD4C64755CE1ABD90445C675B265F73814AE2A937A9/0/3138362e352e3232312e302f32342d3234203d3e20323732383033.roa
Signing time: Fri 13 Dec 2024 17:40:00 +0000
ROA not before: Fri 13 Dec 2024 17:35:00 +0000
ROA not after: Fri 12 Dec 2025 17:40:00 +0000
asID: 272803
IP address blocks: 186.5.221.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:dd:67:53:ed:aa:69:db:5c:f9:12:01:51:1c:67:c0:25:68:6c:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ED372ACDEFB1DA2C35BDC9B7F4E81F4ED857EB58
Validity
Not Before: Dec 13 17:35:00 2024 GMT
Not After : Dec 12 17:40:00 2025 GMT
Subject: CN=3E5D2B675E0875017901845B872032FF8819FA57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:16:46:91:72:6d:2a:21:e8:2b:62:20:97:8d:
3f:2d:f5:0d:9d:18:97:f7:23:92:26:c3:02:2b:3b:
33:07:d0:ac:29:9a:7e:60:f8:93:e0:90:b7:d6:81:
4d:98:c6:db:70:2d:00:af:f1:30:cd:68:5e:97:3b:
8c:c5:4e:64:b4:98:c8:c4:0d:95:b9:5e:23:c5:cc:
e5:0b:f4:a8:83:da:c8:83:57:d0:b7:b8:00:98:65:
3d:20:96:05:a4:74:a7:52:51:96:3b:a5:ce:5f:82:
7f:d1:33:20:2f:64:63:cd:e1:88:b9:da:51:8e:97:
71:cc:f6:8e:05:76:1a:a0:df:37:dd:97:d5:1f:49:
19:84:66:c3:be:9f:68:cc:33:94:af:c2:05:6f:7a:
da:9f:25:e7:1c:cf:87:80:d3:66:a1:21:d5:d9:d9:
4a:da:b2:56:1a:56:0d:1c:5a:f6:f2:4c:bd:a2:f5:
89:18:e2:67:cd:b6:37:ac:a9:4c:80:50:7f:4d:ff:
8f:49:87:ce:26:bb:4c:25:1c:54:24:e5:df:83:7d:
b8:13:6c:19:38:ab:6d:d8:1e:cc:d7:a6:05:f8:5e:
5c:46:64:b3:0c:13:ef:f1:17:5c:44:76:66:c3:f9:
d3:82:f4:19:da:26:e5:d4:ca:ad:08:31:04:c5:4b:
fe:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:5D:2B:67:5E:08:75:01:79:01:84:5B:87:20:32:FF:88:19:FA:57
X509v3 Authority Key Identifier:
keyid:ED:37:2A:CD:EF:B1:DA:2C:35:BD:C9:B7:F4:E8:1F:4E:D8:57:EB:58
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/5731F0F4A6C326F5122CACD4C64755CE1ABD90445C675B265F73814AE2A937A9/0/ED372ACDEFB1DA2C35BDC9B7F4E81F4ED857EB58.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED372ACDEFB1DA2C35BDC9B7F4E81F4ED857EB58.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5731F0F4A6C326F5122CACD4C64755CE1ABD90445C675B265F73814AE2A937A9/0/3138362e352e3232312e302f32342d3234203d3e20323732383033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.5.221.0/24
Signature Algorithm: sha256WithRSAEncryption
be:1b:84:c5:b6:d5:a1:e1:88:d1:80:05:27:d3:6c:53:5e:90:
7b:da:da:74:dd:42:c2:c8:dd:2c:7d:7f:59:16:36:cd:70:06:
59:48:5f:dd:ed:49:9f:e8:4a:e6:55:84:77:99:45:75:20:c2:
a2:19:1a:45:a7:a0:ea:66:d6:18:d5:b6:27:68:18:68:b8:6c:
b5:6d:49:60:9a:71:a0:b8:ae:78:2b:23:00:78:31:43:29:83:
9d:e5:ee:d8:7f:6c:d5:0e:ea:fc:a8:cd:9a:f8:89:c7:a2:4b:
a2:ae:23:76:e6:a6:06:8f:33:02:b3:bb:55:02:12:9e:42:0a:
71:b8:dd:21:b4:21:b4:a9:07:b7:09:f9:bb:22:01:fa:0c:0e:
d0:dc:fc:62:c1:e2:6b:13:e3:74:69:84:1e:79:3b:12:78:b8:
37:be:67:a0:03:b6:84:98:3c:56:1c:f9:d5:14:70:e4:21:ce:
92:cc:0b:ac:24:6b:05:11:80:0e:6c:26:21:a9:06:e1:41:05:
8a:c7:59:87:e0:9b:dd:36:4f:a7:57:ed:52:03:a1:01:47:72:
a5:2b:92:b9:69:6e:15:cf:11:6c:e6:22:83:de:44:f5:92:c0:
1f:0b:7f:dc:c3:b6:d1:b9:ee:97:b8:20:87:b3:fb:21:6a:ea:
e8:b0:9b:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 16:59:09 2025 by rpki-client