Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/583869DF9D6A8CD6686F11C2A1040F7FE8AB686AB267D2871BE97291B398F1CA/0/3135372e3130302e302e302f31362d3234203d3e203233323136.roa
File: 3135372e3130302e302e302f31362d3234203d3e203233323136.roa (raw, json)
Hash identifier: zBbuCyyrKq4LJYSS+TJf15UC8lONwV/HaPXTHb6amXY=
Subject key identifier: A5:09:B5:AD:AF:8C:10:49:6E:36:B0:A4:FF:78:A5:65:B8:8B:D4:23
Certificate issuer: /CN=77570511D6CF51E3ABAFB2F756FE17F5291D8648
Certificate serial: 4E70DC7673DE67C59F00DC3FE775C157179050C3
Authority key identifier: 77:57:05:11:D6:CF:51:E3:AB:AF:B2:F7:56:FE:17:F5:29:1D:86:48
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/77570511D6CF51E3ABAFB2F756FE17F5291D8648.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/583869DF9D6A8CD6686F11C2A1040F7FE8AB686AB267D2871BE97291B398F1CA/0/3135372e3130302e302e302f31362d3234203d3e203233323136.roa
Signing time: Tue 04 Feb 2025 20:08:30 +0000
ROA not before: Tue 04 Feb 2025 20:03:30 +0000
ROA not after: Tue 03 Feb 2026 20:08:30 +0000
asID: 23216
IP address blocks: 157.100.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:70:dc:76:73:de:67:c5:9f:00:dc:3f:e7:75:c1:57:17:90:50:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77570511D6CF51E3ABAFB2F756FE17F5291D8648
Validity
Not Before: Feb 4 20:03:30 2025 GMT
Not After : Feb 3 20:08:30 2026 GMT
Subject: CN=A509B5ADAF8C10496E36B0A4FF78A565B88BD423
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:08:4f:38:95:9f:29:53:a5:a1:96:5e:4c:09:
4a:14:79:2a:61:04:dd:07:3d:ea:c4:19:e4:47:92:
b8:6a:8d:67:db:4c:0f:b6:c8:ad:8a:32:95:9e:af:
d6:5c:3b:45:dc:b9:fa:76:24:87:9d:81:9b:0a:15:
ed:61:26:5e:0d:52:1d:c2:3c:c2:75:e7:c3:16:cc:
62:c1:e4:af:42:2b:f7:05:2a:5c:b0:7b:16:f4:f4:
7c:52:9a:51:7d:19:d6:e6:15:29:3b:a2:40:b9:51:
d4:ee:e9:12:fe:88:ae:10:ac:0b:b9:de:c1:e1:f6:
f0:a5:81:f6:23:8d:ea:38:2d:47:58:91:16:20:f8:
cb:b7:4a:46:ed:e2:ae:74:9e:52:72:96:aa:3a:e2:
26:fa:6f:20:ba:4a:d8:25:6e:af:a0:ce:fd:0f:5d:
2f:25:a8:15:dc:d1:03:e5:30:e0:84:4e:94:85:47:
17:1f:12:16:2e:4c:ac:a9:52:1e:c9:22:9a:60:df:
e0:13:64:ef:9b:7f:f9:2f:47:18:a5:1e:c5:17:62:
b8:33:8e:51:1a:e3:71:ba:af:9e:ff:47:e1:e0:07:
84:ac:a1:e2:3b:6b:66:55:a6:e8:8b:53:cc:bb:4a:
c1:cd:cf:36:fa:62:d8:62:de:00:8b:33:7f:86:cb:
b1:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:09:B5:AD:AF:8C:10:49:6E:36:B0:A4:FF:78:A5:65:B8:8B:D4:23
X509v3 Authority Key Identifier:
keyid:77:57:05:11:D6:CF:51:E3:AB:AF:B2:F7:56:FE:17:F5:29:1D:86:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/583869DF9D6A8CD6686F11C2A1040F7FE8AB686AB267D2871BE97291B398F1CA/0/77570511D6CF51E3ABAFB2F756FE17F5291D8648.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/77570511D6CF51E3ABAFB2F756FE17F5291D8648.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/583869DF9D6A8CD6686F11C2A1040F7FE8AB686AB267D2871BE97291B398F1CA/0/3135372e3130302e302e302f31362d3234203d3e203233323136.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.100.0.0/16
Signature Algorithm: sha256WithRSAEncryption
85:45:a3:1f:b9:df:f1:c4:de:81:9c:7f:ca:a9:93:e3:2e:d6:
76:1b:0f:65:66:71:20:99:c4:08:cb:4a:ac:5a:e6:d7:5b:16:
8b:dd:a1:0b:05:76:c2:dc:a0:a3:be:bf:54:cf:ed:5d:26:de:
b6:e2:02:93:1f:24:0f:3d:26:ec:ac:88:c3:93:32:7c:f4:78:
38:00:86:1a:28:05:6d:00:8b:0d:06:a7:96:2c:21:d7:14:f1:
2f:c9:f8:d0:c1:cb:c3:5b:18:07:0b:16:87:c3:0c:6a:03:85:
eb:76:a9:ba:58:09:96:be:72:b0:12:4e:f6:d7:fc:2f:00:68:
3f:bf:df:21:ca:b2:b3:21:78:ed:f7:60:78:4f:1b:9e:da:c7:
87:74:b4:15:4d:cb:ff:a7:90:5c:85:62:17:fb:60:f2:1d:2a:
e6:69:6d:ca:9d:b9:88:2e:44:23:98:05:99:01:c0:de:29:8d:
ef:a5:fd:91:1b:62:f9:5a:08:36:c9:4a:33:14:09:ce:fd:96:
ad:43:59:7a:63:0b:f4:d1:d6:60:55:fb:09:5c:9f:6e:51:47:
0e:f3:a7:fa:37:fd:b7:e8:c8:99:6c:fe:3e:ef:f8:cb:be:89:
79:82:8e:0c:b1:0e:c4:cf:da:8d:77:02:c0:e1:f0:6d:bd:91:
df:8c:c8:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:20:22 2025 by rpki-client