Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/870C83D25E7FA67388832052309332085572C074B86F60E54C9F48F630BD5AA6/0/3230372e3234382e322e302f32342d3234203d3e203634313339.roa
File: 3230372e3234382e322e302f32342d3234203d3e203634313339.roa (raw, json)
Hash identifier: V55XtgN0zsln22jUdhSt5EqnUfIQWp3txP6D7zS/+4M=
Subject key identifier: 2B:5B:F0:89:1F:E9:CF:1A:3D:5B:26:44:FB:43:A9:6B:80:08:CD:DF
Certificate issuer: /CN=367EAE467C8B549D5E6615661A70C865954F55EE
Certificate serial: 2947744A0F5FCF830C07315D80071FB785C9F5F4
Authority key identifier: 36:7E:AE:46:7C:8B:54:9D:5E:66:15:66:1A:70:C8:65:95:4F:55:EE
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/367EAE467C8B549D5E6615661A70C865954F55EE.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/870C83D25E7FA67388832052309332085572C074B86F60E54C9F48F630BD5AA6/0/3230372e3234382e322e302f32342d3234203d3e203634313339.roa
Signing time: Tue 04 Feb 2025 20:01:53 +0000
ROA not before: Tue 04 Feb 2025 19:56:53 +0000
ROA not after: Tue 03 Feb 2026 20:01:53 +0000
asID: 64139
IP address blocks: 207.248.2.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:47:74:4a:0f:5f:cf:83:0c:07:31:5d:80:07:1f:b7:85:c9:f5:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=367EAE467C8B549D5E6615661A70C865954F55EE
Validity
Not Before: Feb 4 19:56:53 2025 GMT
Not After : Feb 3 20:01:53 2026 GMT
Subject: CN=2B5BF0891FE9CF1A3D5B2644FB43A96B8008CDDF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:7b:f1:0b:ad:5a:5b:53:e4:77:b1:60:32:ca:
74:3c:7e:dd:75:67:1e:c2:06:96:47:06:a7:64:46:
e3:4d:2a:93:42:ed:b9:11:be:83:29:ac:de:7b:04:
0c:6d:2d:c8:06:2f:cc:70:32:d4:9d:2c:49:b6:16:
d1:18:6a:dc:75:50:f4:8e:23:b8:c4:55:13:34:39:
5b:96:f7:91:41:72:5c:44:ff:4b:5a:ab:7f:d9:42:
e8:b6:46:19:f7:bf:bb:6d:35:e9:a2:13:b0:ab:79:
55:5e:8e:1b:d3:1c:02:df:77:ec:bf:6c:2b:f9:24:
f8:e5:d5:6b:fa:a7:93:3e:27:8f:8c:56:82:eb:da:
dc:06:e4:bb:20:07:b3:6e:d2:1d:a9:a6:57:4f:d2:
a3:a7:2a:1a:98:41:c4:73:e8:eb:dd:09:97:42:56:
46:ea:8b:f6:d4:9c:b7:39:d6:49:64:54:96:58:b2:
45:d3:c1:2f:7f:78:28:1d:1b:2d:d1:0b:19:0e:b9:
9e:24:ab:50:a6:fb:4f:6a:9e:76:ee:ba:70:a5:38:
90:2e:c7:62:9a:ea:cc:ff:1a:33:60:dc:e2:ed:bc:
70:a3:7e:cb:98:c4:23:77:a5:cb:98:8e:9f:63:cd:
9e:d9:42:83:68:13:75:1e:57:c8:6d:f4:4d:28:02:
7a:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:5B:F0:89:1F:E9:CF:1A:3D:5B:26:44:FB:43:A9:6B:80:08:CD:DF
X509v3 Authority Key Identifier:
keyid:36:7E:AE:46:7C:8B:54:9D:5E:66:15:66:1A:70:C8:65:95:4F:55:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/870C83D25E7FA67388832052309332085572C074B86F60E54C9F48F630BD5AA6/0/367EAE467C8B549D5E6615661A70C865954F55EE.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/367EAE467C8B549D5E6615661A70C865954F55EE.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/870C83D25E7FA67388832052309332085572C074B86F60E54C9F48F630BD5AA6/0/3230372e3234382e322e302f32342d3234203d3e203634313339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
207.248.2.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:eb:90:81:02:fe:3a:77:0f:c0:85:bc:3f:15:2e:13:9b:64:
32:a4:d5:92:3a:6a:87:93:6a:34:9f:e7:44:63:b1:ff:83:9d:
78:3f:8d:3d:f6:fb:13:9d:68:37:9f:a5:32:7d:fc:16:87:49:
0f:e5:21:14:01:69:e9:0a:fd:6c:0b:5e:ac:b5:92:14:82:c6:
ba:a4:eb:ba:fc:51:4a:ca:e3:b2:cb:99:b5:6e:4f:8b:a4:a8:
62:0a:39:71:78:d6:74:a9:b4:70:3d:7d:0e:7c:5b:ce:0e:37:
59:1d:ba:b7:b1:65:49:a1:99:9d:7f:82:f4:ed:2b:d7:bb:7d:
1c:83:ec:6a:13:fc:32:1b:47:17:2b:65:64:18:65:58:75:69:
43:c1:b9:3a:07:33:05:b2:67:89:00:f8:0d:24:92:e5:0b:7d:
6c:bd:cd:9a:6a:04:c7:2e:b2:44:71:24:50:16:c3:ff:e8:ed:
11:c1:6a:45:f1:ad:7f:54:d5:4d:4b:15:46:3b:2a:78:7a:76:
91:34:f4:00:f3:cf:2d:a1:8e:a8:46:c7:8a:ef:24:b7:05:21:
3f:c0:8b:0d:a1:b3:fc:d8:81:fa:c3:51:66:21:40:e4:05:81:
50:8d:7c:45:cf:18:84:48:93:94:37:f4:c7:84:6f:60:f5:a1:
49:a3:d4:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:04:43 2025 by rpki-client