Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8715877014D6A3562B90597EC394B914F16FD3A53C58939A770388B3FE7D727A/0/3132382e3230312e32312e302f32342d3234203d3e20323635373430.roa
File: 3132382e3230312e32312e302f32342d3234203d3e20323635373430.roa (raw, json)
Hash identifier: qTvdfSriRxHc7wkHNo0IAN/Qx1468+njGOKpm1whrOc=
Subject key identifier: 8B:02:04:C6:28:85:D6:BF:4F:53:07:F0:B9:61:2D:AD:D0:D6:DE:18
Certificate issuer: /CN=25AA12EC2868B90A693EEAD25632B15E24525ED3
Certificate serial: 07DEB0E6C0E55341E3A2184E819941564A9DDDB7
Authority key identifier: 25:AA:12:EC:28:68:B9:0A:69:3E:EA:D2:56:32:B1:5E:24:52:5E:D3
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25AA12EC2868B90A693EEAD25632B15E24525ED3.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8715877014D6A3562B90597EC394B914F16FD3A53C58939A770388B3FE7D727A/0/3132382e3230312e32312e302f32342d3234203d3e20323635373430.roa
Signing time: Tue 04 Feb 2025 18:34:58 +0000
ROA not before: Tue 04 Feb 2025 18:29:58 +0000
ROA not after: Tue 03 Feb 2026 18:34:58 +0000
asID: 265740
IP address blocks: 128.201.21.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:de:b0:e6:c0:e5:53:41:e3:a2:18:4e:81:99:41:56:4a:9d:dd:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25AA12EC2868B90A693EEAD25632B15E24525ED3
Validity
Not Before: Feb 4 18:29:58 2025 GMT
Not After : Feb 3 18:34:58 2026 GMT
Subject: CN=8B0204C62885D6BF4F5307F0B9612DADD0D6DE18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:94:e9:90:67:bb:0a:16:6d:c3:79:7c:09:af:
10:f1:02:05:44:a7:cd:53:de:f2:bd:3f:55:a5:8d:
7f:8d:5b:62:41:f0:33:23:de:70:30:1e:f7:8f:69:
4d:75:4f:85:7f:0a:a7:fe:16:3e:99:3a:5d:3f:e7:
83:02:10:b7:98:fa:eb:11:bc:ba:5a:a1:43:18:cf:
a6:ab:00:00:83:d9:9a:09:86:c6:69:2d:2d:1b:4b:
0d:eb:86:01:78:0f:4b:a0:4a:a6:06:54:30:68:5b:
44:c0:ed:bc:cd:54:1b:7f:e3:cd:77:d3:6c:e9:b9:
e1:79:2e:58:d6:8b:17:39:d3:fb:75:79:e1:3f:1f:
d5:81:ec:30:9e:ba:78:d7:17:8a:7c:16:e4:89:ae:
ac:01:7d:06:1c:66:39:10:79:a3:c0:de:13:65:29:
8b:69:81:e8:a5:e4:f1:51:b5:51:bc:fd:14:93:76:
d9:d4:42:84:f4:66:a5:d3:2e:0a:4f:40:83:64:c4:
cc:55:f0:c9:f8:fb:85:24:92:db:51:fb:17:50:bf:
e0:d7:ec:f4:2d:89:09:36:4f:93:bd:75:0c:4b:c0:
97:aa:ed:77:99:46:bb:03:0c:ec:b6:28:b3:c3:b1:
b8:bc:72:f6:c2:25:11:07:a0:a1:b9:12:c2:9b:78:
0b:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:02:04:C6:28:85:D6:BF:4F:53:07:F0:B9:61:2D:AD:D0:D6:DE:18
X509v3 Authority Key Identifier:
keyid:25:AA:12:EC:28:68:B9:0A:69:3E:EA:D2:56:32:B1:5E:24:52:5E:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/8715877014D6A3562B90597EC394B914F16FD3A53C58939A770388B3FE7D727A/0/25AA12EC2868B90A693EEAD25632B15E24525ED3.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25AA12EC2868B90A693EEAD25632B15E24525ED3.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8715877014D6A3562B90597EC394B914F16FD3A53C58939A770388B3FE7D727A/0/3132382e3230312e32312e302f32342d3234203d3e20323635373430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
128.201.21.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:97:bd:d1:e2:d6:97:ba:49:c5:9f:33:0a:ee:34:fa:41:71:
cc:bf:f1:39:79:ba:0e:f6:d5:ca:31:fe:06:2c:43:07:0d:4c:
6f:86:5c:41:5d:f3:b6:84:65:19:78:67:ad:61:e8:5c:36:e3:
81:be:28:29:0d:5d:13:55:7d:7d:4f:ac:87:34:ff:98:eb:d4:
ab:e9:19:96:be:f6:c4:d2:15:61:4b:a3:cf:a0:72:1c:25:d2:
41:5b:9c:1c:ae:47:7e:0c:40:71:c0:39:f6:8a:78:98:b5:da:
92:7a:3b:9f:9d:49:ce:e9:7e:94:90:ea:5a:bc:d7:9e:0d:54:
c5:27:0d:70:12:69:78:03:0b:e0:e6:7c:a8:e5:ce:8c:e5:7d:
71:3e:11:d5:7b:bc:c4:6d:a9:c8:dc:6c:34:94:41:dc:71:d5:
ba:88:6e:2f:cd:a0:f0:2c:5f:f8:58:89:bf:c1:48:e4:a7:fb:
a7:51:35:dc:81:02:32:63:d0:5d:6d:c2:41:fd:1f:35:63:b0:
3b:c0:74:bf:5d:b5:85:59:a3:69:2e:67:92:9c:e9:b3:6d:f8:
f2:3f:83:75:03:00:cb:b3:6c:3f:6c:d4:ce:40:14:a1:66:d9:
bc:13:ed:7b:68:ea:26:76:9b:02:2e:5a:14:49:af:84:21:ea:
cc:aa:f4:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:23:17 2025 by rpki-client