Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/3136332e3234372e36342e302f32342d3234203d3e203137313437.roa
File: 3136332e3234372e36342e302f32342d3234203d3e203137313437.roa (raw, json)
Hash identifier: oqYplV129cBZAL0noEkr7J7InZpwzx5PEhoZ6FEgDms=
Subject key identifier: CD:44:0A:17:20:0F:5E:95:FB:34:EE:81:A1:AF:A7:E8:19:B6:46:70
Certificate issuer: /CN=D0B428B65F4DBA16E44F7C7412B71C126F71DC6B
Certificate serial: 6456659AF60FA14EF0A86218C4AAAA624584D7A8
Authority key identifier: D0:B4:28:B6:5F:4D:BA:16:E4:4F:7C:74:12:B7:1C:12:6F:71:DC:6B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/3136332e3234372e36342e302f32342d3234203d3e203137313437.roa
Signing time: Tue 04 Feb 2025 18:26:03 +0000
ROA not before: Tue 04 Feb 2025 18:21:03 +0000
ROA not after: Tue 03 Feb 2026 18:26:03 +0000
asID: 17147
IP address blocks: 163.247.64.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:56:65:9a:f6:0f:a1:4e:f0:a8:62:18:c4:aa:aa:62:45:84:d7:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D0B428B65F4DBA16E44F7C7412B71C126F71DC6B
Validity
Not Before: Feb 4 18:21:03 2025 GMT
Not After : Feb 3 18:26:03 2026 GMT
Subject: CN=CD440A17200F5E95FB34EE81A1AFA7E819B64670
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:94:92:d3:24:56:be:57:17:2c:47:b2:37:ad:
80:bd:d2:5f:f2:30:2e:a3:67:75:ca:d6:4e:db:7b:
89:a1:8d:2a:d7:69:95:68:9b:64:13:c0:c4:8b:7d:
5e:fa:b4:73:47:cd:97:b8:51:75:d3:5b:6f:86:dd:
b0:3d:7f:a1:b7:73:f7:07:f2:ed:1e:8e:44:b9:6f:
1e:8c:22:4c:30:02:a5:0e:1f:f9:ce:24:61:f3:e6:
17:be:c7:6f:6d:64:3e:7e:12:c8:98:28:00:e8:26:
e9:86:55:4a:47:cf:b8:57:d2:ce:25:80:19:57:58:
fc:5d:3e:cc:99:e2:bf:b9:3b:32:ad:28:75:f9:9f:
0c:48:97:ed:89:a6:bb:95:d3:c7:6b:c7:fe:73:d1:
b1:96:e7:c6:8b:17:6c:50:96:a3:5e:a6:d5:a2:75:
5f:99:2c:0c:80:05:fb:01:ca:1d:86:42:be:52:53:
f6:89:56:2b:10:9c:00:00:1c:f0:3d:90:36:74:ac:
96:13:47:09:a5:57:9e:34:62:f7:2c:fd:01:7f:46:
fc:4a:37:ac:50:ff:64:9a:87:94:e3:c1:e1:06:36:
e8:c0:c4:8a:81:da:bd:c8:d1:29:9c:cb:67:66:88:
fb:b6:e9:57:80:f3:57:db:26:52:27:d1:27:5d:78:
bf:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:44:0A:17:20:0F:5E:95:FB:34:EE:81:A1:AF:A7:E8:19:B6:46:70
X509v3 Authority Key Identifier:
keyid:D0:B4:28:B6:5F:4D:BA:16:E4:4F:7C:74:12:B7:1C:12:6F:71:DC:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/3136332e3234372e36342e302f32342d3234203d3e203137313437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.247.64.0/24
Signature Algorithm: sha256WithRSAEncryption
d6:4e:c4:fb:66:2d:9a:c4:b1:7b:f9:93:04:e4:f0:76:0b:1e:
e1:ed:bc:6b:47:df:cf:e2:68:4c:83:b2:f6:0d:b0:ee:79:4e:
9d:89:80:91:15:55:30:0b:5e:d4:90:52:d4:ae:5d:1c:74:7f:
2b:90:5a:68:28:d6:fc:5f:cd:34:2c:c1:67:f8:9c:ca:31:2e:
cb:b1:45:a8:36:18:d4:f7:10:dc:b5:dc:59:63:0a:14:06:58:
90:3d:b2:af:cd:5b:f5:f7:9d:6e:11:2b:1b:60:0b:db:c1:f9:
eb:6b:5a:5f:e6:82:d7:55:9e:50:58:d2:71:02:2c:a6:4b:68:
8c:a7:63:3d:3a:c4:8a:1d:17:50:fa:ac:2c:bc:1f:f2:de:e1:
54:25:0b:45:4d:ba:0e:ef:14:b2:32:5e:5f:0b:ad:8c:6b:fc:
30:bf:c4:6a:6c:ad:e5:c2:f6:bb:d7:99:19:c9:47:f5:77:37:
e4:52:01:77:dc:a3:70:b1:1a:a5:3e:d7:8e:43:61:a3:c2:bd:
5f:ef:7b:01:d7:f9:5f:8d:25:7d:9a:40:f8:59:9e:2a:10:54:
d6:e0:90:c8:cc:d7:d9:7a:b3:82:a4:57:08:58:f0:62:05:51:
03:98:76:48:37:f7:8d:ac:d1:3a:27:da:c9:54:ee:9e:98:77:
5b:89:f9:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:59:12 2025 by rpki-client