Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5D8F51B1D1657BF366614511A20581BDED03B32FBCD5E9D471AF986BA436211B/0/323830333a626130303a6430303a3a2f34302d3430203d3e203532323836.roa
File: 323830333a626130303a6430303a3a2f34302d3430203d3e203532323836.roa (raw, json)
Hash identifier: yLeJDByfeW4za+Lzh1FtMnVNMfYOQgoZ3XGqNydpGN0=
Subject key identifier: EE:6C:18:78:5C:99:83:EB:60:B0:4A:43:99:2B:D3:54:9B:88:8C:D2
Certificate issuer: /CN=241DE049AC3C932631785D79E6569AB7CF57A340
Certificate serial: 455B47DE0714C046DF8F2517696319320355244B
Authority key identifier: 24:1D:E0:49:AC:3C:93:26:31:78:5D:79:E6:56:9A:B7:CF:57:A3:40
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/241DE049AC3C932631785D79E6569AB7CF57A340.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5D8F51B1D1657BF366614511A20581BDED03B32FBCD5E9D471AF986BA436211B/0/323830333a626130303a6430303a3a2f34302d3430203d3e203532323836.roa
Signing time: Tue 04 Feb 2025 18:01:11 +0000
ROA not before: Tue 04 Feb 2025 17:56:11 +0000
ROA not after: Tue 03 Feb 2026 18:01:11 +0000
asID: 52286
IP address blocks: 2803:ba00:d00::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:5b:47:de:07:14:c0:46:df:8f:25:17:69:63:19:32:03:55:24:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=241DE049AC3C932631785D79E6569AB7CF57A340
Validity
Not Before: Feb 4 17:56:11 2025 GMT
Not After : Feb 3 18:01:11 2026 GMT
Subject: CN=EE6C18785C9983EB60B04A43992BD3549B888CD2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:2b:71:09:e9:26:96:c4:b9:dc:80:89:a7:66:
9a:39:79:d1:dc:65:22:87:c5:91:d2:ac:ce:4e:53:
a1:1e:3d:5d:07:7b:a8:13:5e:a6:6c:15:a3:0d:9e:
48:f4:30:66:67:16:e9:43:8a:16:ad:d3:20:10:d4:
fa:6b:77:09:a1:db:35:3f:1a:c7:7b:8c:22:9f:b8:
d0:9f:67:76:9b:4b:25:2b:c4:40:fe:c7:84:b8:d0:
9b:85:12:c1:0b:fc:35:aa:0d:2f:8f:ea:9d:82:73:
65:22:b6:2c:d6:dc:03:75:ff:75:7f:53:5e:5e:db:
79:cb:dd:3a:7e:07:4d:07:b0:e7:60:05:8c:63:2c:
ba:9f:51:a7:2e:42:b9:6e:5c:c0:d4:60:2f:12:cd:
91:76:c9:c8:9f:3d:a7:1c:91:cb:b4:e6:6a:5d:98:
aa:d8:88:da:a5:f8:64:61:87:1e:85:8c:5e:8e:98:
0c:90:c4:c7:a6:a2:b4:1e:95:17:9d:2b:36:4a:a4:
be:26:de:88:af:d2:17:9b:ff:26:6b:0e:da:65:01:
2e:02:2d:b2:85:4f:21:05:08:33:5a:2c:69:af:d3:
f5:4c:08:50:e4:65:d2:e8:19:3d:bf:c6:33:d4:8b:
64:d1:df:a1:ad:dc:88:ef:59:4a:02:c5:00:86:25:
86:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:6C:18:78:5C:99:83:EB:60:B0:4A:43:99:2B:D3:54:9B:88:8C:D2
X509v3 Authority Key Identifier:
keyid:24:1D:E0:49:AC:3C:93:26:31:78:5D:79:E6:56:9A:B7:CF:57:A3:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/5D8F51B1D1657BF366614511A20581BDED03B32FBCD5E9D471AF986BA436211B/0/241DE049AC3C932631785D79E6569AB7CF57A340.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/241DE049AC3C932631785D79E6569AB7CF57A340.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5D8F51B1D1657BF366614511A20581BDED03B32FBCD5E9D471AF986BA436211B/0/323830333a626130303a6430303a3a2f34302d3430203d3e203532323836.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:ba00:d00::/40
Signature Algorithm: sha256WithRSAEncryption
21:6a:18:0d:14:eb:e6:fc:20:b1:f5:09:be:f9:bb:de:79:a1:
91:e3:ed:89:d2:85:08:38:6a:f3:19:36:d5:9c:09:e4:18:7f:
48:1d:94:63:25:0b:28:77:55:b9:d8:7b:f8:22:d2:87:5f:7e:
74:cd:ce:f9:b4:80:bf:43:73:0e:3c:2b:6a:e7:4c:9b:80:25:
5d:4a:44:6f:2e:e6:23:8a:de:9f:68:98:23:1e:52:d1:d6:e7:
27:27:7b:3d:77:a8:b0:91:5a:1b:f1:72:08:66:84:f4:a8:4e:
4a:6c:60:fa:f7:c4:74:16:6d:f0:8e:06:bf:70:aa:9e:be:53:
31:22:65:0b:55:bc:e1:7e:1a:3e:20:3d:1e:ec:a4:85:3a:6b:
1f:d3:9b:1b:98:8c:95:d0:88:04:21:6f:81:30:0f:68:ff:1f:
0b:95:a8:49:d2:20:6b:05:b4:94:de:97:1d:37:4d:f7:0c:3a:
33:7c:cc:ea:94:5b:5f:e7:f1:76:53:21:9c:95:99:63:32:30:
df:af:01:2d:cf:97:03:db:1c:0e:bb:eb:ef:3c:53:e4:ce:47:
c2:2d:4b:5d:75:54:ff:e0:cf:3a:f0:dd:98:a1:19:df:e2:cb:
f3:a8:e1:40:28:23:af:6c:d8:76:2d:8f:16:69:7d:7f:56:07:
4c:4f:3b:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:09:52 2025 by rpki-client