Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3230312e3232312e36342e302f32322d3234203d3e203237373839.roa
File: 3230312e3232312e36342e302f32322d3234203d3e203237373839.roa (raw, json)
Hash identifier: DW6jmozfQo4ZSXSAMVqDZBYtxWQnXGzWZAffv2ylK4o=
Subject key identifier: 29:E8:04:01:3C:EC:E8:E2:63:88:F9:42:91:96:59:E2:AB:A0:D9:71
Certificate issuer: /CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
Certificate serial: 19101B563CC91DBA26BFF06ABDF7F26DC09E8AFD
Authority key identifier: 2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3230312e3232312e36342e302f32322d3234203d3e203237373839.roa
Signing time: Tue 04 Feb 2025 20:08:34 +0000
ROA not before: Tue 04 Feb 2025 20:03:34 +0000
ROA not after: Tue 03 Feb 2026 20:08:34 +0000
asID: 27789
IP address blocks: 201.221.64.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:10:1b:56:3c:c9:1d:ba:26:bf:f0:6a:bd:f7:f2:6d:c0:9e:8a:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
Validity
Not Before: Feb 4 20:03:34 2025 GMT
Not After : Feb 3 20:08:34 2026 GMT
Subject: CN=29E804013CECE8E26388F942919659E2ABA0D971
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:31:b5:60:98:97:b2:3c:38:32:2c:3c:99:d7:
88:ac:54:69:7f:46:0c:c7:4a:b6:53:e3:25:d0:3c:
90:94:d7:f9:2a:7b:27:2b:20:1b:fe:22:2c:01:db:
fd:06:4d:d9:10:af:05:f6:d3:8d:42:83:58:3e:4d:
1b:b7:b3:85:b9:db:de:a8:97:36:d5:fe:e2:c7:f8:
df:3f:4f:ac:d0:06:e0:6f:7e:ea:8e:99:3e:96:51:
c1:f4:ce:c3:05:e9:ae:96:4d:0f:a9:8e:fd:eb:9e:
ca:2b:32:60:e1:00:ff:10:be:c6:72:00:f4:9c:88:
74:21:55:58:c8:23:a2:6d:a7:5b:2a:ed:2d:fa:21:
62:32:82:bc:fa:81:c1:b3:7c:30:8c:77:30:52:c3:
2a:56:04:b0:a5:c6:2a:b7:59:30:87:85:52:af:00:
61:b3:24:cd:57:34:fb:dd:cc:8c:6b:0e:a5:c9:92:
c7:60:4f:aa:8c:5b:63:e8:f2:86:22:12:f1:ad:0a:
37:12:5d:bd:63:aa:37:09:a4:0f:4d:88:b3:7d:eb:
67:00:a5:a5:44:a1:15:32:1f:30:78:2f:f5:0f:03:
ba:7a:f8:1e:2f:59:31:da:d4:b7:5b:9c:38:13:ac:
3a:9e:99:8d:2e:e4:b2:00:92:a4:1d:99:70:03:f9:
59:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:E8:04:01:3C:EC:E8:E2:63:88:F9:42:91:96:59:E2:AB:A0:D9:71
X509v3 Authority Key Identifier:
keyid:2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3230312e3232312e36342e302f32322d3234203d3e203237373839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.221.64.0/22
Signature Algorithm: sha256WithRSAEncryption
2a:a7:8c:1c:b3:94:28:c7:1c:ff:3a:87:48:ed:9b:7b:be:1b:
b9:f2:a0:0d:f0:bd:18:d2:76:81:56:e8:55:a5:75:e4:fa:cd:
17:fc:7a:70:07:2a:08:2f:cb:36:60:b7:8d:78:4f:7b:6c:93:
5d:c6:8b:2b:cb:50:7b:af:da:0a:7c:98:9a:d1:25:fb:43:98:
9f:c6:5d:68:2f:1a:e7:82:9f:f4:33:9a:0a:6e:06:dc:75:fa:
b8:27:3b:be:b4:d7:6d:c3:b4:84:1e:97:61:cf:79:20:08:b5:
ee:c6:a3:28:6d:3e:71:a4:f9:98:52:ab:b3:fc:0b:ea:71:cb:
05:89:c3:8b:d3:ed:26:fb:24:09:d6:35:74:ce:47:5d:dd:51:
64:ae:3a:4b:c3:1b:b2:48:eb:65:c7:70:b9:8b:6a:a6:17:36:
6d:56:0a:17:d6:a3:8b:41:f6:82:60:cc:fa:ac:33:c6:6d:6d:
86:bc:99:9b:2f:cc:cd:94:8c:bf:b4:f0:1a:17:48:7b:f5:f3:
56:5b:e2:30:c0:b7:19:0d:19:d8:75:78:bd:f6:6d:68:75:ea:
df:c0:b8:91:d2:75:00:a8:e0:7b:f7:6b:05:5d:a6:ba:0f:dc:
ab:fa:4f:c6:db:8f:74:bf:a9:c8:01:5c:26:de:ff:8f:40:c0:
95:24:49:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:12:33 2025 by rpki-client