Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5B996C1AF21FC5FB59BE1C349AAA90661D63D6846477746596187E432F8F5F23/0/3139322e3138382e3139362e302f32342d3234203d3e203631343638.roa
File: 3139322e3138382e3139362e302f32342d3234203d3e203631343638.roa (raw, json)
Hash identifier: h9dnycYTAdoEnbn7gYFcGHL6rZq1LrBoefqpnJS58ME=
Subject key identifier: 01:90:F8:EB:5D:27:C1:44:3F:03:9C:58:5E:6E:06:0E:33:54:80:29
Certificate issuer: /CN=962E09CED777E3B6E30D51D97754EF33B1DFD373
Certificate serial: 1AEE0DF6B114EB8E66FC459FC34FBA6388E421CC
Authority key identifier: 96:2E:09:CE:D7:77:E3:B6:E3:0D:51:D9:77:54:EF:33:B1:DF:D3:73
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/962E09CED777E3B6E30D51D97754EF33B1DFD373.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5B996C1AF21FC5FB59BE1C349AAA90661D63D6846477746596187E432F8F5F23/0/3139322e3138382e3139362e302f32342d3234203d3e203631343638.roa
Signing time: Tue 04 Feb 2025 18:37:34 +0000
ROA not before: Tue 04 Feb 2025 18:32:34 +0000
ROA not after: Tue 03 Feb 2026 18:37:34 +0000
asID: 61468
IP address blocks: 192.188.196.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:ee:0d:f6:b1:14:eb:8e:66:fc:45:9f:c3:4f:ba:63:88:e4:21:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=962E09CED777E3B6E30D51D97754EF33B1DFD373
Validity
Not Before: Feb 4 18:32:34 2025 GMT
Not After : Feb 3 18:37:34 2026 GMT
Subject: CN=0190F8EB5D27C1443F039C585E6E060E33548029
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b0:83:f3:da:bc:71:29:2a:11:72:d3:f3:fc:
0f:73:8b:95:31:5c:1d:d1:da:b4:0f:3b:cf:86:56:
64:14:ab:65:50:5e:b3:d2:d7:11:69:59:0a:bd:bf:
b6:9d:15:b8:51:62:09:95:69:65:a7:7c:54:18:cc:
c1:6b:f7:16:b4:cd:af:8f:30:ba:bf:f6:3d:b9:71:
16:3b:4d:b4:34:72:d0:0a:d2:45:45:6f:63:76:e9:
53:82:f0:fa:1d:8e:cc:df:ba:13:ea:44:bf:ef:0f:
28:66:a1:dd:68:d1:76:f5:7c:e5:be:d0:ee:ab:d3:
8f:78:90:aa:10:72:47:09:d0:56:08:4d:7f:77:1f:
23:c1:52:d0:dc:11:26:a9:0d:05:7c:94:49:85:1f:
bb:f3:0c:a0:d3:3f:f5:2a:43:45:a8:0a:a7:e2:32:
8f:66:63:5a:a0:7b:64:47:05:78:8f:77:e0:55:25:
15:92:a8:71:b2:8a:ce:c8:8f:ec:d9:10:5d:ea:2f:
24:5e:54:4e:10:63:40:08:de:7e:7c:8e:a2:b0:e5:
4f:f4:7e:3d:61:51:05:24:b9:c5:94:20:a6:bc:1a:
b2:1e:38:34:8e:5b:c1:4e:87:09:c9:e4:4c:b9:66:
ae:2b:3a:3f:f2:5d:51:a9:03:ca:d2:37:ea:6b:c6:
e0:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:90:F8:EB:5D:27:C1:44:3F:03:9C:58:5E:6E:06:0E:33:54:80:29
X509v3 Authority Key Identifier:
keyid:96:2E:09:CE:D7:77:E3:B6:E3:0D:51:D9:77:54:EF:33:B1:DF:D3:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/5B996C1AF21FC5FB59BE1C349AAA90661D63D6846477746596187E432F8F5F23/0/962E09CED777E3B6E30D51D97754EF33B1DFD373.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/962E09CED777E3B6E30D51D97754EF33B1DFD373.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5B996C1AF21FC5FB59BE1C349AAA90661D63D6846477746596187E432F8F5F23/0/3139322e3138382e3139362e302f32342d3234203d3e203631343638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.188.196.0/24
Signature Algorithm: sha256WithRSAEncryption
74:1b:cd:b2:28:b2:f8:5c:e9:58:55:19:ec:c9:29:f6:a7:4f:
6d:3f:e0:be:47:6f:58:31:cd:25:13:27:5c:55:71:12:62:05:
08:0c:d5:65:6b:67:3c:c2:60:d0:09:fe:60:48:e1:c1:91:c3:
c5:b5:55:86:e7:e1:18:3a:e9:ed:7e:a9:47:44:72:e5:0f:54:
4a:99:e8:d4:2b:ae:97:e4:fc:fc:0b:7e:e9:c6:a6:5f:83:a6:
2f:81:a2:0a:23:46:93:8d:f6:c0:9c:87:37:52:91:9e:64:57:
1c:8f:43:dc:92:d7:0f:0b:21:65:90:50:a8:fb:aa:18:dc:f5:
2b:d2:6b:19:c1:ea:b6:4e:c2:08:69:e8:9e:38:13:0b:43:0b:
e8:cd:df:bd:72:7a:27:22:07:4c:57:e7:fc:be:48:36:fa:5e:
c6:b9:31:c4:74:6e:22:e8:e7:d7:8c:21:5a:1a:87:8a:a7:df:
9c:2d:53:e4:18:f3:18:32:46:ee:54:30:2d:cc:ed:fb:67:3e:
f9:2a:55:cc:20:b5:86:69:76:22:d8:76:eb:7f:bc:ba:16:3b:
6a:3e:02:cf:6f:c5:f9:fc:19:5f:19:f2:86:41:0e:f6:0c:32:
70:41:39:9f:21:f4:eb:9f:cf:0f:1b:89:5f:88:c3:49:47:51:
ca:7a:07:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:56:44 2025 by rpki-client