Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6DC0BA0077798E66B34D8EB5770883BB0362200C80B60219BEB1731BF09A351A/0/3134382e3231332e302e302f31362d3136203d3e203135323336.roa
File: 3134382e3231332e302e302f31362d3136203d3e203135323336.roa (raw, json)
Hash identifier: PNHheHHKKIrnYG2Di54LN5/XQ5u8gjN4bA9Vg3pimiM=
Subject key identifier: 99:FA:F7:EF:A6:8C:3B:F4:E1:4A:C4:08:EA:E3:CA:26:53:90:D1:29
Certificate issuer: /CN=8FEDCCEF4A56BC01B91FF3CDE88401CC6FAEDA89
Certificate serial: 19D28F6E5FDD7B3DDC671A12565AEBBEB6BDE7DF
Authority key identifier: 8F:ED:CC:EF:4A:56:BC:01:B9:1F:F3:CD:E8:84:01:CC:6F:AE:DA:89
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8FEDCCEF4A56BC01B91FF3CDE88401CC6FAEDA89.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/6DC0BA0077798E66B34D8EB5770883BB0362200C80B60219BEB1731BF09A351A/0/3134382e3231332e302e302f31362d3136203d3e203135323336.roa
Signing time: Tue 04 Feb 2025 18:24:31 +0000
ROA not before: Tue 04 Feb 2025 18:19:31 +0000
ROA not after: Tue 03 Feb 2026 18:24:31 +0000
asID: 15236
IP address blocks: 148.213.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:d2:8f:6e:5f:dd:7b:3d:dc:67:1a:12:56:5a:eb:be:b6:bd:e7:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8FEDCCEF4A56BC01B91FF3CDE88401CC6FAEDA89
Validity
Not Before: Feb 4 18:19:31 2025 GMT
Not After : Feb 3 18:24:31 2026 GMT
Subject: CN=99FAF7EFA68C3BF4E14AC408EAE3CA265390D129
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ad:b8:33:66:e2:5a:af:e4:d8:77:bc:5c:71:
6b:82:3c:8d:af:71:c5:f0:97:c8:48:99:a1:8b:1b:
82:44:6c:0e:d7:1d:73:83:84:c4:53:5d:35:a9:df:
57:f9:c6:12:5b:a9:a8:68:10:3c:cc:3c:b5:8d:24:
28:7e:30:4f:67:66:8a:95:5e:f5:a2:0f:7f:44:99:
28:c0:7d:e8:37:05:7f:90:7b:09:1a:87:cd:69:ce:
b3:45:43:35:3a:97:a9:12:04:11:a5:f5:37:38:79:
28:cb:9f:5b:36:da:f6:d8:f0:e2:47:12:74:cc:27:
c5:59:9e:3a:da:a5:23:c3:47:c3:84:2b:1c:fa:3a:
e6:b4:83:c6:ec:7a:84:ab:4b:c6:b4:d5:6c:e9:14:
4a:b5:3b:92:39:0d:c4:eb:ea:77:fd:b2:05:49:e6:
d5:9c:e8:af:50:7f:83:7d:dc:46:d8:7d:d5:da:b6:
7b:b1:f9:80:1c:ed:03:bc:16:8b:68:37:99:ba:b4:
17:57:fe:46:a5:46:54:18:88:cc:3e:f1:1c:eb:c2:
54:64:37:ed:9b:fc:10:28:61:33:9a:98:4f:53:17:
ca:63:5b:d1:d1:12:f9:27:3f:2c:ca:47:ba:37:7c:
47:0b:38:2c:cd:d0:02:28:fc:cb:7a:d9:29:01:d8:
35:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:FA:F7:EF:A6:8C:3B:F4:E1:4A:C4:08:EA:E3:CA:26:53:90:D1:29
X509v3 Authority Key Identifier:
keyid:8F:ED:CC:EF:4A:56:BC:01:B9:1F:F3:CD:E8:84:01:CC:6F:AE:DA:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/6DC0BA0077798E66B34D8EB5770883BB0362200C80B60219BEB1731BF09A351A/0/8FEDCCEF4A56BC01B91FF3CDE88401CC6FAEDA89.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8FEDCCEF4A56BC01B91FF3CDE88401CC6FAEDA89.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6DC0BA0077798E66B34D8EB5770883BB0362200C80B60219BEB1731BF09A351A/0/3134382e3231332e302e302f31362d3136203d3e203135323336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
148.213.0.0/16
Signature Algorithm: sha256WithRSAEncryption
57:09:81:d7:49:72:8d:7d:fc:73:87:8b:b7:56:e8:aa:fd:10:
bf:a1:93:ad:45:4b:ea:cd:66:95:d9:19:92:62:0d:91:7f:e5:
38:b1:2c:8a:14:13:fa:53:97:22:8f:a2:1e:77:7b:be:70:4a:
fd:40:66:91:dc:88:c3:04:26:fc:25:d6:63:53:c4:d0:df:62:
05:34:4f:79:77:a6:e6:ab:70:d6:08:cd:1a:4f:45:c9:65:3a:
ef:38:fb:fd:ff:8d:a0:27:a0:ae:f9:36:e0:9a:f2:c8:73:ee:
3a:53:86:3b:f0:a2:55:b8:50:71:0e:53:1c:ed:ba:e3:47:bb:
a8:5f:fc:dd:56:02:25:82:9e:5d:97:21:42:96:55:97:cb:4d:
29:54:02:c4:ea:a2:d4:5d:77:71:89:f1:33:20:e4:90:7a:92:
0e:51:e9:38:bd:37:6c:2d:bb:a5:be:c0:1c:74:9f:50:8e:4d:
19:ed:98:03:6b:fb:41:35:34:dd:24:df:14:ef:cc:64:05:16:
cf:25:7b:fb:f2:4e:28:6a:7d:17:35:ab:b4:b4:94:6f:fc:10:
4d:ec:8b:4d:f0:5f:83:81:eb:ae:87:88:27:3f:b1:99:b6:13:
77:01:4e:dd:f3:9b:e9:0e:f6:46:5a:23:b4:7c:eb:19:51:c0:
e2:7d:82:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:07:40 2025 by rpki-client