Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7067F50E2EB49A8426610765229BE99830AE3B7DBF1C0BE09AF42A129ED3F8FE/0/3138312e3138392e3232342e302f31392d3234203d3e203237363936.roa
File: 3138312e3138392e3232342e302f31392d3234203d3e203237363936.roa (raw, json)
Hash identifier: OScxQidsRlenCqFIlQDs/EodbzF0/vtGHl+DcekDNSg=
Subject key identifier: 0A:86:5C:5E:BE:19:DE:82:AC:7A:66:32:FD:66:CC:F0:4B:55:02:97
Certificate issuer: /CN=995577D85E32451D9695955CFACF83EA0CB6F2A8
Certificate serial: 2F92CED260D81503027F48D8550E4DC7A5C3B094
Authority key identifier: 99:55:77:D8:5E:32:45:1D:96:95:95:5C:FA:CF:83:EA:0C:B6:F2:A8
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/995577D85E32451D9695955CFACF83EA0CB6F2A8.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/7067F50E2EB49A8426610765229BE99830AE3B7DBF1C0BE09AF42A129ED3F8FE/0/3138312e3138392e3232342e302f31392d3234203d3e203237363936.roa
Signing time: Tue 04 Feb 2025 18:29:15 +0000
ROA not before: Tue 04 Feb 2025 18:24:15 +0000
ROA not after: Tue 03 Feb 2026 18:29:15 +0000
asID: 27696
IP address blocks: 181.189.224.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:92:ce:d2:60:d8:15:03:02:7f:48:d8:55:0e:4d:c7:a5:c3:b0:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=995577D85E32451D9695955CFACF83EA0CB6F2A8
Validity
Not Before: Feb 4 18:24:15 2025 GMT
Not After : Feb 3 18:29:15 2026 GMT
Subject: CN=0A865C5EBE19DE82AC7A6632FD66CCF04B550297
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a2:37:74:c9:50:3a:bc:25:9c:57:17:f5:5e:
95:fd:a5:e4:c7:0b:bf:0c:8b:6a:4b:b5:03:cd:49:
15:a9:5c:06:df:e9:8e:85:ab:43:0e:f7:b0:84:9a:
78:de:0a:2b:27:58:ac:33:ef:90:b0:66:e3:a5:98:
01:f5:37:12:d3:19:b6:80:e5:81:b8:e6:f2:9f:c0:
69:2f:1b:9f:2c:e0:62:7f:48:16:af:8d:08:2a:ab:
84:93:24:df:61:5d:af:42:b4:5f:10:c2:64:9e:96:
42:08:53:6d:b8:ab:60:62:5e:b3:d1:46:6d:55:51:
35:1e:92:de:f0:d3:5a:b4:d8:f0:f0:65:be:35:00:
52:40:7e:64:4b:20:73:e6:ea:b2:3c:69:04:47:9c:
fd:f2:de:c8:53:cf:7c:95:d8:3d:44:bd:dd:47:3b:
52:af:e5:b7:14:72:05:36:14:06:68:de:1b:0e:ce:
49:87:13:06:4c:73:84:6f:d6:1f:43:1c:b6:fc:a8:
d7:b0:8a:5c:6b:cb:f9:e7:21:09:71:ef:51:ba:e6:
9c:f0:93:3a:62:85:38:30:1a:60:02:e9:a1:5e:b2:
9d:26:57:59:85:35:f7:a6:26:e8:c5:58:40:a4:05:
76:70:9a:30:24:73:a9:d1:d0:1e:80:70:c7:c4:d0:
75:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:86:5C:5E:BE:19:DE:82:AC:7A:66:32:FD:66:CC:F0:4B:55:02:97
X509v3 Authority Key Identifier:
keyid:99:55:77:D8:5E:32:45:1D:96:95:95:5C:FA:CF:83:EA:0C:B6:F2:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/7067F50E2EB49A8426610765229BE99830AE3B7DBF1C0BE09AF42A129ED3F8FE/0/995577D85E32451D9695955CFACF83EA0CB6F2A8.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/995577D85E32451D9695955CFACF83EA0CB6F2A8.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7067F50E2EB49A8426610765229BE99830AE3B7DBF1C0BE09AF42A129ED3F8FE/0/3138312e3138392e3232342e302f31392d3234203d3e203237363936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.189.224.0/19
Signature Algorithm: sha256WithRSAEncryption
b7:f5:1e:48:89:d1:26:f6:9e:ce:22:81:64:a7:85:b0:b3:89:
59:bc:bf:41:dc:42:a2:07:ea:d7:54:c0:0f:59:9d:fb:ef:5c:
ba:14:2c:f7:00:2f:cc:25:24:9c:4e:f4:4b:db:f4:cc:60:82:
4d:e3:f9:c4:b4:f0:8e:bb:3b:41:a2:74:fc:5f:f7:13:6f:ee:
74:e6:18:83:8f:0b:b4:48:91:54:53:1b:bc:ec:2d:fc:ff:2e:
53:ca:74:ef:b7:77:ab:5c:f8:51:fd:51:c7:b6:b8:fe:70:e1:
6a:09:d3:1d:86:ad:76:e3:ee:15:f9:dd:07:34:f4:ef:af:7e:
b0:68:cf:24:b4:4d:1f:97:bf:74:d9:94:f6:e6:11:55:e5:15:
c5:9c:1d:3d:4d:17:39:fd:c4:57:ee:1e:55:68:b2:bd:e0:00:
ba:06:97:9d:ca:00:0f:67:2c:6c:3c:de:e0:78:91:87:9d:a9:
3a:7e:43:56:68:de:58:62:a2:fa:3b:c9:f1:76:3e:bb:f9:b5:
bb:cd:5d:46:1b:a5:41:05:18:b5:27:15:04:bd:65:c5:7f:fb:
a2:31:f4:6f:c3:a0:ae:7e:a4:a1:25:b0:22:f8:b5:18:d9:0d:
95:b6:a5:6a:b0:c9:7d:e2:57:78:15:c4:1f:24:5b:6a:a0:9b:
08:3c:1c:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:10:45 2025 by rpki-client