Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/724424E852450082B9B54381D3A94A81D59CD4E663DDA85A42C9B05177D783E2/0/3230312e3135382e39392e302f32342d3234203d3e20323732393730.roa
File: 3230312e3135382e39392e302f32342d3234203d3e20323732393730.roa (raw, json)
Hash identifier: yvSEv5Xfx29WmYskueRJZaLzBlNmMLZ3piPORyqzEPc=
Subject key identifier: 43:FB:FC:17:4D:C6:7F:94:33:6F:70:73:44:A8:4B:05:BD:BC:CD:92
Certificate issuer: /CN=AA21B81A35BAF7E5F10E0C8ABE16466745C37BF8
Certificate serial: 38C2E68DA2649A9201E89EB777B4870AB648A0D3
Authority key identifier: AA:21:B8:1A:35:BA:F7:E5:F1:0E:0C:8A:BE:16:46:67:45:C3:7B:F8
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA21B81A35BAF7E5F10E0C8ABE16466745C37BF8.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/724424E852450082B9B54381D3A94A81D59CD4E663DDA85A42C9B05177D783E2/0/3230312e3135382e39392e302f32342d3234203d3e20323732393730.roa
Signing time: Tue 04 Feb 2025 18:44:17 +0000
ROA not before: Tue 04 Feb 2025 18:39:17 +0000
ROA not after: Tue 03 Feb 2026 18:44:17 +0000
asID: 272970
IP address blocks: 201.158.99.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:c2:e6:8d:a2:64:9a:92:01:e8:9e:b7:77:b4:87:0a:b6:48:a0:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AA21B81A35BAF7E5F10E0C8ABE16466745C37BF8
Validity
Not Before: Feb 4 18:39:17 2025 GMT
Not After : Feb 3 18:44:17 2026 GMT
Subject: CN=43FBFC174DC67F94336F707344A84B05BDBCCD92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:47:5b:d1:72:d4:00:b6:8a:32:f0:fb:bc:2f:
57:d7:04:14:0d:48:c8:28:30:dc:f3:14:2d:58:5b:
09:ef:a2:68:e5:90:8f:a8:03:a3:dc:d7:b2:82:7e:
64:b5:b1:f6:99:7f:d4:5b:3b:2f:db:fe:47:2d:2c:
13:76:96:e4:4d:6c:e6:6a:e5:27:aa:cc:64:27:d0:
d0:5a:66:95:b4:6f:cc:50:60:71:13:43:c5:93:86:
7f:4b:cc:d3:28:5e:cf:db:d6:60:c6:e0:53:bc:6e:
54:30:90:b1:ca:88:c7:3c:3b:3a:f0:2d:20:cc:52:
96:00:51:2b:ef:dd:20:a3:34:75:4c:9b:b8:48:73:
f4:24:eb:e6:e8:e2:c0:8d:cb:36:f8:2b:b2:da:c7:
fb:2e:c7:9d:12:66:45:32:91:bd:da:ec:31:4c:d0:
8b:59:7c:22:cf:f0:32:3e:c7:f1:91:17:2b:78:76:
e7:29:f5:f1:9d:37:ef:c1:3c:32:81:d1:35:3c:4d:
7d:b2:0c:7d:27:8b:82:37:8e:70:95:e2:38:09:f4:
22:33:64:12:0e:d5:f6:46:18:7a:a0:9e:4d:3f:ec:
59:b0:21:9a:77:78:68:38:50:11:1c:93:5d:22:ad:
31:9d:8f:45:25:04:8c:f1:8c:fa:40:7e:b8:c7:86:
27:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:FB:FC:17:4D:C6:7F:94:33:6F:70:73:44:A8:4B:05:BD:BC:CD:92
X509v3 Authority Key Identifier:
keyid:AA:21:B8:1A:35:BA:F7:E5:F1:0E:0C:8A:BE:16:46:67:45:C3:7B:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/724424E852450082B9B54381D3A94A81D59CD4E663DDA85A42C9B05177D783E2/0/AA21B81A35BAF7E5F10E0C8ABE16466745C37BF8.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA21B81A35BAF7E5F10E0C8ABE16466745C37BF8.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/724424E852450082B9B54381D3A94A81D59CD4E663DDA85A42C9B05177D783E2/0/3230312e3135382e39392e302f32342d3234203d3e20323732393730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.158.99.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:28:9c:53:d5:9b:60:76:ce:ba:a2:1a:e7:f0:50:b3:82:f5:
df:03:5e:eb:53:b5:6b:24:67:a3:3e:ae:4a:9b:95:c8:35:0a:
41:b6:9b:77:df:db:10:fe:44:78:ee:e5:b8:52:5d:ee:f6:ad:
a7:52:fb:3e:15:2c:87:00:46:e9:45:1b:ee:26:61:71:ef:63:
ab:39:3d:9a:f7:5a:e5:b9:69:e8:bd:7e:37:3a:49:f4:e1:d0:
bb:59:64:2b:b7:92:e0:b4:bf:99:14:37:4f:99:6f:41:a2:17:
91:de:f8:8d:16:04:44:c4:68:0b:e7:11:d7:5b:a7:ae:3c:99:
e1:b5:87:29:a8:b6:3a:eb:08:b1:a2:64:47:ac:4c:91:f4:38:
6e:f6:2d:99:e7:77:f9:c1:39:95:0c:5a:ee:08:7e:a5:4d:69:
66:4f:2e:74:9b:90:56:42:08:6c:15:d4:62:3e:ef:97:f9:84:
58:5b:b7:17:e5:fe:67:7e:ea:1b:4c:03:6e:eb:a0:e8:50:14:
6d:17:de:c5:94:24:bf:01:42:67:58:3e:ca:77:5f:93:b7:d3:
ae:f5:43:3e:16:f5:af:61:37:a8:62:12:7e:1e:7f:5f:a3:06:
6e:0d:52:86:80:6a:d3:fa:51:c8:64:5d:90:4c:3c:65:71:3a:
26:69:fa:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:08:53 2025 by rpki-client