Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6B448B2F99F750DEE4FB3820BFDEEA5C070AC78AC1DDEAE4BA5B472B580DA264/0/3139382e31322e35322e302f32342d3234203d3e203238303735.roa
File: 3139382e31322e35322e302f32342d3234203d3e203238303735.roa (raw, json)
Hash identifier: hKf/Yzo6idP3iSI0pgjUEVlK5J3xf06eCFHcbNdNODo=
Subject key identifier: DB:4A:11:89:80:A6:BB:25:86:6D:A4:AD:10:1E:44:89:61:2A:38:6C
Certificate issuer: /CN=CCC7DFB2C7C9FCF2F114061476ECB87B573A4E18
Certificate serial: 700E0779FE35CB561ECCE4DA1ABB39EEFFFC1662
Authority key identifier: CC:C7:DF:B2:C7:C9:FC:F2:F1:14:06:14:76:EC:B8:7B:57:3A:4E:18
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CCC7DFB2C7C9FCF2F114061476ECB87B573A4E18.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/6B448B2F99F750DEE4FB3820BFDEEA5C070AC78AC1DDEAE4BA5B472B580DA264/0/3139382e31322e35322e302f32342d3234203d3e203238303735.roa
Signing time: Tue 04 Feb 2025 19:59:04 +0000
ROA not before: Tue 04 Feb 2025 19:54:04 +0000
ROA not after: Tue 03 Feb 2026 19:59:04 +0000
asID: 28075
IP address blocks: 198.12.52.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:0e:07:79:fe:35:cb:56:1e:cc:e4:da:1a:bb:39:ee:ff:fc:16:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CCC7DFB2C7C9FCF2F114061476ECB87B573A4E18
Validity
Not Before: Feb 4 19:54:04 2025 GMT
Not After : Feb 3 19:59:04 2026 GMT
Subject: CN=DB4A118980A6BB25866DA4AD101E4489612A386C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:36:39:b1:13:c4:b2:18:c6:41:c6:1d:23:3a:
f5:cc:b3:55:58:bb:f0:16:d3:cf:34:48:77:3e:b6:
0f:8e:06:47:66:a4:00:fb:87:57:fd:a6:ce:92:66:
e5:34:17:cf:3a:f0:62:ab:84:8a:83:14:72:2b:fd:
09:49:c2:66:6f:ef:70:2f:db:53:9a:9c:e7:98:36:
48:e2:50:01:64:57:cb:8d:9a:4c:2f:04:74:3b:d8:
30:e2:e0:5c:68:0b:2c:51:4e:92:07:9a:68:74:12:
15:5c:7e:6b:2d:6d:7b:b7:67:e5:dc:1a:e4:e7:0a:
20:23:f0:ba:6a:95:d4:39:4e:8a:8a:d3:80:bd:3b:
12:5c:c2:4a:66:26:87:26:37:e3:30:ca:dc:ea:8a:
0e:3c:0c:37:db:f7:3d:41:a2:c3:eb:64:81:42:d6:
86:0f:39:98:f5:d4:6e:7c:7a:0c:1e:c2:18:1c:40:
54:13:7b:2e:8d:58:49:a5:14:eb:75:14:ea:37:5f:
92:85:2e:0e:d0:da:1c:8d:1e:8f:39:42:8b:74:bc:
b1:e9:d9:df:4c:6e:de:04:c8:9f:4d:cb:b6:d6:f0:
00:55:8f:5e:a0:16:dd:8a:9a:dd:34:e8:1f:a8:17:
f7:f9:74:17:f9:63:c6:7e:e3:cd:7a:db:33:90:26:
aa:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:4A:11:89:80:A6:BB:25:86:6D:A4:AD:10:1E:44:89:61:2A:38:6C
X509v3 Authority Key Identifier:
keyid:CC:C7:DF:B2:C7:C9:FC:F2:F1:14:06:14:76:EC:B8:7B:57:3A:4E:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/6B448B2F99F750DEE4FB3820BFDEEA5C070AC78AC1DDEAE4BA5B472B580DA264/0/CCC7DFB2C7C9FCF2F114061476ECB87B573A4E18.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CCC7DFB2C7C9FCF2F114061476ECB87B573A4E18.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6B448B2F99F750DEE4FB3820BFDEEA5C070AC78AC1DDEAE4BA5B472B580DA264/0/3139382e31322e35322e302f32342d3234203d3e203238303735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
198.12.52.0/24
Signature Algorithm: sha256WithRSAEncryption
53:b7:a3:b7:44:2e:5a:d7:3c:48:4d:d1:1a:91:ff:cb:e2:91:
8d:55:54:68:f1:8a:63:08:33:53:b6:1b:5b:3a:ff:4e:8b:65:
20:1b:9d:7c:2a:0e:00:48:1d:b1:5d:de:34:fe:24:30:f2:99:
8d:fb:3c:3b:60:18:af:d0:84:e4:40:fb:5f:46:b1:2c:aa:77:
e0:d2:46:99:21:26:ce:45:a3:76:e0:3d:fc:75:16:9b:a7:5e:
c9:ff:c5:18:e4:9a:ba:db:45:37:0d:04:32:c0:03:48:67:90:
e1:39:4f:86:58:fa:53:93:36:fd:ba:9b:ad:e8:e1:9b:19:9d:
0c:76:a4:39:74:58:49:21:10:86:31:33:2e:f0:cc:3d:65:85:
61:79:6e:49:94:2c:0f:c4:ac:dc:18:cc:33:53:bb:7f:3a:56:
f9:da:ab:eb:6a:0e:2a:a9:2b:9c:66:58:f0:e8:97:08:55:7e:
17:7b:16:81:aa:70:da:6b:81:76:80:63:f4:38:62:29:7d:38:
c6:2b:09:59:29:10:54:fc:56:7c:6c:29:11:a8:a8:aa:94:11:
23:b4:18:43:95:5c:0e:91:ef:02:63:b3:16:3c:2b:d5:72:5e:
c7:ac:b4:2b:6f:b5:d5:de:f2:e4:e7:b5:7d:17:7a:00:93:cd:
32:af:e6:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:08:05 2025 by rpki-client