Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6B448B2F99F750DEE4FB3820BFDEEA5C070AC78AC1DDEAE4BA5B472B580DA264/0/3133312e37322e302e302f32322d3234203d3e203238303735.roa
File: 3133312e37322e302e302f32322d3234203d3e203238303735.roa (raw, json)
Hash identifier: iqeIERWoIfm3RjG6VIR3NsRK2YnaW2ALf7L6n+lFuPg=
Subject key identifier: BB:24:22:CF:65:0F:8F:3F:7B:16:68:1E:F6:ED:99:A7:AE:42:46:B4
Certificate issuer: /CN=CCC7DFB2C7C9FCF2F114061476ECB87B573A4E18
Certificate serial: 6BA028CEA51524A86A48467FE23197C2717C69CE
Authority key identifier: CC:C7:DF:B2:C7:C9:FC:F2:F1:14:06:14:76:EC:B8:7B:57:3A:4E:18
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CCC7DFB2C7C9FCF2F114061476ECB87B573A4E18.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/6B448B2F99F750DEE4FB3820BFDEEA5C070AC78AC1DDEAE4BA5B472B580DA264/0/3133312e37322e302e302f32322d3234203d3e203238303735.roa
Signing time: Tue 04 Feb 2025 19:58:59 +0000
ROA not before: Tue 04 Feb 2025 19:53:59 +0000
ROA not after: Tue 03 Feb 2026 19:58:59 +0000
asID: 28075
IP address blocks: 131.72.0.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:a0:28:ce:a5:15:24:a8:6a:48:46:7f:e2:31:97:c2:71:7c:69:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CCC7DFB2C7C9FCF2F114061476ECB87B573A4E18
Validity
Not Before: Feb 4 19:53:59 2025 GMT
Not After : Feb 3 19:58:59 2026 GMT
Subject: CN=BB2422CF650F8F3F7B16681EF6ED99A7AE4246B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:2a:9c:f1:d0:86:ca:85:80:8e:4d:b4:89:29:
2d:9a:cb:50:66:b6:54:e7:5f:ec:4a:3d:82:f3:9f:
8b:68:c1:cc:b5:09:1b:44:ed:a0:0a:55:52:f3:20:
c2:ee:c0:0b:a5:cb:29:4c:ef:7c:21:5b:08:1e:83:
1f:2f:65:b8:3d:5a:a4:c5:7f:a4:2d:41:df:ad:45:
a1:0f:9f:71:48:53:1b:34:9e:7c:f9:15:82:62:3e:
17:97:03:07:4c:88:63:c3:2c:32:6d:d6:bc:0b:8e:
10:eb:ff:2c:d3:08:8f:3c:d4:da:10:76:ea:f2:eb:
c1:d6:00:39:39:96:ab:bc:c3:84:8a:b5:22:64:1b:
65:63:3b:1d:85:ec:fd:70:c8:50:78:82:30:d9:83:
74:1e:7f:78:ec:5d:f8:1c:91:45:fb:2a:c8:49:d8:
f2:9d:ef:2a:e4:68:a4:45:13:11:fb:d8:f5:5a:d8:
22:1e:c6:51:8e:69:da:96:63:fc:4a:a4:98:15:9c:
2a:93:77:29:a2:dc:26:5f:c7:80:e8:02:bf:bf:5a:
2d:6e:3b:a9:e3:cb:c7:02:85:1d:af:39:c6:d0:76:
42:65:73:c0:bf:6f:e9:02:53:ce:cb:5e:ae:82:ea:
11:b5:c8:bc:22:71:37:66:77:97:16:80:6d:07:c3:
dc:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:24:22:CF:65:0F:8F:3F:7B:16:68:1E:F6:ED:99:A7:AE:42:46:B4
X509v3 Authority Key Identifier:
keyid:CC:C7:DF:B2:C7:C9:FC:F2:F1:14:06:14:76:EC:B8:7B:57:3A:4E:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/6B448B2F99F750DEE4FB3820BFDEEA5C070AC78AC1DDEAE4BA5B472B580DA264/0/CCC7DFB2C7C9FCF2F114061476ECB87B573A4E18.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CCC7DFB2C7C9FCF2F114061476ECB87B573A4E18.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6B448B2F99F750DEE4FB3820BFDEEA5C070AC78AC1DDEAE4BA5B472B580DA264/0/3133312e37322e302e302f32322d3234203d3e203238303735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.72.0.0/22
Signature Algorithm: sha256WithRSAEncryption
86:bc:21:b1:fd:38:51:31:a9:b0:a2:57:63:e1:07:7e:cc:7a:
3a:59:77:3e:86:9c:d7:9f:80:35:4e:7a:b6:02:e3:02:de:88:
55:75:55:3d:49:75:5f:07:0f:7d:5b:80:12:92:53:13:45:83:
56:f8:a6:10:3e:bb:00:5e:0b:56:16:2c:db:30:85:f0:36:73:
96:4c:de:88:cf:63:fa:c5:6e:44:9c:6d:6b:d5:6e:cd:c3:c7:
9e:b1:98:06:8e:41:9b:e7:9b:72:fb:5e:df:65:4b:57:e9:3e:
2f:8a:9f:a9:43:9b:e7:33:bd:02:a1:ec:92:9a:fe:85:56:86:
aa:e1:3d:6e:a9:71:5a:ea:e0:d3:b9:61:2f:ce:50:37:15:e9:
1e:37:13:cc:41:f8:d3:15:8a:cc:d4:c7:4a:49:9d:be:a1:5d:
b3:93:c1:32:93:0a:41:34:4c:72:2d:ec:b6:e2:4f:4d:7c:e6:
7d:f5:ca:8e:03:1b:d8:7f:e7:5c:ff:91:9d:e6:8b:ca:dd:90:
f2:d3:98:ba:de:0b:9a:ec:49:8b:5a:c6:4f:96:42:a9:32:b5:
30:7a:8a:ff:d5:cd:e9:02:f4:13:b6:ba:80:f8:6a:f3:0d:de:
20:73:28:f4:1d:4e:8f:d6:e1:85:91:4d:54:25:63:13:fc:a0:
03:01:d4:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:08:54 2025 by rpki-client