Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/73B6868E56B12C35C63B0AB763023F2508123C311CD7EF4F5161EF6D0A55299E/0/AS27947.roa
File: AS27947.roa (raw, json)
Hash identifier: SFq/V2LFQ1GXw3KFrVpVcp9W0wbIij5ii/n8Q7bCB+o=
Subject key identifier: 88:FD:B5:BA:91:47:50:54:58:47:22:DE:8E:1D:65:30:7E:EE:70:7E
Certificate issuer: /CN=B6F8E7D0BF951583E0959B2A92A8920330CEBE59
Certificate serial: 1709A86C0EC363ED7666AAC8C9392D903736BECC
Authority key identifier: B6:F8:E7:D0:BF:95:15:83:E0:95:9B:2A:92:A8:92:03:30:CE:BE:59
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B6F8E7D0BF951583E0959B2A92A8920330CEBE59.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/73B6868E56B12C35C63B0AB763023F2508123C311CD7EF4F5161EF6D0A55299E/0/AS27947.roa
Signing time: Tue 04 Feb 2025 18:44:13 +0000
ROA not before: Tue 04 Feb 2025 18:39:13 +0000
ROA not after: Tue 03 Feb 2026 18:44:13 +0000
asID: 27947
IP address blocks: 190.152.249.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:09:a8:6c:0e:c3:63:ed:76:66:aa:c8:c9:39:2d:90:37:36:be:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B6F8E7D0BF951583E0959B2A92A8920330CEBE59
Validity
Not Before: Feb 4 18:39:13 2025 GMT
Not After : Feb 3 18:44:13 2026 GMT
Subject: CN=88FDB5BA91475054584722DE8E1D65307EEE707E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:73:6b:54:7e:9e:87:35:72:da:d0:ba:16:83:
29:36:df:10:21:18:81:e9:83:1d:11:47:ea:d2:d6:
e8:3f:21:c8:3a:07:03:52:ee:c7:ba:f8:fb:0c:89:
d7:be:8c:42:21:a9:3b:14:9b:be:4d:4c:22:3b:97:
83:ef:68:66:e1:b6:6f:19:4a:ea:d3:5d:03:85:79:
9c:ce:98:d7:06:2d:0c:d4:4a:88:b2:18:71:32:c7:
bf:20:68:23:d7:aa:b3:c9:bc:15:39:5a:98:70:25:
85:04:9d:07:7a:60:cf:44:8f:34:ad:bd:3f:1f:1f:
c6:1c:50:e7:61:9d:01:a7:53:6d:aa:f2:6c:8e:cd:
02:cc:41:61:69:78:84:c6:36:33:58:35:12:54:ec:
40:a1:91:35:73:b3:3b:52:48:5e:72:b5:95:24:bf:
d9:17:48:62:df:15:76:da:87:b5:4e:aa:2d:19:ca:
e7:61:f6:b5:80:00:5e:fc:76:20:a5:b1:d0:3b:8d:
61:3d:11:90:8c:14:13:6c:16:cd:02:0e:17:b6:a5:
32:c9:f7:97:9a:30:e9:be:f2:ad:ea:1b:ad:48:59:
5d:2b:82:3c:a0:3a:ac:23:1c:66:e8:d0:3b:6f:09:
c7:cc:9f:ff:c2:23:86:54:e8:65:78:70:02:43:5a:
8b:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:FD:B5:BA:91:47:50:54:58:47:22:DE:8E:1D:65:30:7E:EE:70:7E
X509v3 Authority Key Identifier:
keyid:B6:F8:E7:D0:BF:95:15:83:E0:95:9B:2A:92:A8:92:03:30:CE:BE:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/73B6868E56B12C35C63B0AB763023F2508123C311CD7EF4F5161EF6D0A55299E/0/B6F8E7D0BF951583E0959B2A92A8920330CEBE59.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B6F8E7D0BF951583E0959B2A92A8920330CEBE59.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/73B6868E56B12C35C63B0AB763023F2508123C311CD7EF4F5161EF6D0A55299E/0/AS27947.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.152.249.0/24
Signature Algorithm: sha256WithRSAEncryption
34:ac:8a:bd:54:1e:3f:de:88:82:c9:b9:da:0c:78:99:a4:6a:
8f:85:0a:ba:1e:79:67:7b:5a:55:46:bf:98:49:f2:eb:c2:51:
ef:ab:09:4f:07:22:22:98:a6:96:8f:4e:3d:71:41:9b:e1:8d:
04:71:80:7d:14:22:a6:86:22:b3:67:fa:6e:a3:89:b8:1f:7d:
f4:77:c0:69:6a:6f:9e:57:eb:ab:67:59:89:9d:a1:62:2d:0d:
79:73:66:54:fb:ca:c9:95:ae:67:89:f6:04:e7:1c:ab:95:39:
b0:d2:ab:d1:04:6e:c4:64:e7:8c:bb:28:f3:b0:f0:89:27:90:
22:ef:b8:90:47:f4:80:6d:f8:6a:d9:ea:8e:ea:4e:17:d5:82:
33:cb:16:4e:79:3b:00:23:88:92:e9:00:bd:1f:62:60:cf:83:
ec:d1:2e:da:57:ec:38:8e:a4:c2:03:5d:01:1b:8e:a1:63:aa:
d2:a6:a3:13:62:24:df:73:69:82:22:92:e7:89:90:5e:04:dc:
c6:aa:53:b3:07:49:99:b8:d1:63:fc:a8:43:6c:20:91:88:63:
f1:ae:d1:fc:b3:cc:ab:5b:32:87:25:c3:ed:5b:f3:78:5e:b2:
4d:7d:fb:6e:6c:30:cd:50:a8:fc:91:08:6c:55:c7:d8:53:ba:
33:8d:df:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:05:05 2025 by rpki-client