Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/88D7B05E68A363B604AA1DBA9B3665F8C3F55B13B2B284317471F87709EEA0D8/0/3132382e3230312e38302e302f32342d3234203d3e20323635373431.roa
File: 3132382e3230312e38302e302f32342d3234203d3e20323635373431.roa (raw, json)
Hash identifier: CE/c9ODIt4Wk+j5DtnZcLvRc3UPTTcdSqTqgyHeW590=
Subject key identifier: 4B:26:95:2E:47:A2:C0:FD:37:D4:4A:37:FC:1F:72:31:E9:2F:BD:21
Certificate issuer: /CN=7116290D7EB961DBB2AE7C4F1070543D6F8030A9
Certificate serial: 223DAF55F5E3B5371D0585DC8626A9054AAF2EDD
Authority key identifier: 71:16:29:0D:7E:B9:61:DB:B2:AE:7C:4F:10:70:54:3D:6F:80:30:A9
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7116290D7EB961DBB2AE7C4F1070543D6F8030A9.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/88D7B05E68A363B604AA1DBA9B3665F8C3F55B13B2B284317471F87709EEA0D8/0/3132382e3230312e38302e302f32342d3234203d3e20323635373431.roa
Signing time: Sat 15 Feb 2025 00:09:52 +0000
ROA not before: Sat 15 Feb 2025 00:04:52 +0000
ROA not after: Sat 14 Feb 2026 00:09:52 +0000
asID: 265741
IP address blocks: 128.201.80.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:3d:af:55:f5:e3:b5:37:1d:05:85:dc:86:26:a9:05:4a:af:2e:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7116290D7EB961DBB2AE7C4F1070543D6F8030A9
Validity
Not Before: Feb 15 00:04:52 2025 GMT
Not After : Feb 14 00:09:52 2026 GMT
Subject: CN=4B26952E47A2C0FD37D44A37FC1F7231E92FBD21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:d7:f0:6d:a2:ce:cd:63:4b:2e:a5:7d:05:21:
76:43:80:09:bf:89:aa:3b:f3:df:a9:c9:cd:09:37:
45:9b:b4:f6:41:22:61:68:80:10:c3:e3:04:ec:3e:
6b:a9:d0:83:da:4f:a2:06:a1:3c:45:26:a7:2f:2f:
52:1f:aa:0b:79:50:d9:95:d8:00:c4:ea:8f:00:9d:
e3:a9:78:04:e1:7c:48:6e:28:7a:89:58:1b:fb:25:
c7:0c:c6:69:47:ff:c5:25:1a:1c:14:91:65:c1:a8:
ed:4a:c7:93:7f:07:d1:ad:0f:36:8e:bb:16:2b:4d:
42:3f:64:0f:2a:2f:1c:d6:d8:92:e1:0b:18:c5:ee:
6f:36:50:98:0f:a3:f9:02:77:6f:77:c2:56:45:d1:
9d:0b:20:80:6c:61:86:d1:c0:2c:ec:aa:23:96:d4:
29:f0:91:d3:97:dd:71:5e:b4:5e:9b:d2:5b:40:fa:
52:04:a6:7a:63:a5:e5:c0:6b:e9:e7:0a:bf:67:05:
fb:aa:0f:ec:9b:74:18:e5:f6:7e:75:85:18:23:47:
54:84:e5:61:9d:80:a9:d1:b2:0b:1d:73:97:a6:4c:
0a:14:31:21:60:6e:50:f4:27:47:d8:f6:8f:1e:6b:
56:91:10:f0:58:22:8d:5e:71:87:38:8a:cd:29:9c:
e2:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:26:95:2E:47:A2:C0:FD:37:D4:4A:37:FC:1F:72:31:E9:2F:BD:21
X509v3 Authority Key Identifier:
keyid:71:16:29:0D:7E:B9:61:DB:B2:AE:7C:4F:10:70:54:3D:6F:80:30:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/88D7B05E68A363B604AA1DBA9B3665F8C3F55B13B2B284317471F87709EEA0D8/0/7116290D7EB961DBB2AE7C4F1070543D6F8030A9.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7116290D7EB961DBB2AE7C4F1070543D6F8030A9.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/88D7B05E68A363B604AA1DBA9B3665F8C3F55B13B2B284317471F87709EEA0D8/0/3132382e3230312e38302e302f32342d3234203d3e20323635373431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
128.201.80.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:67:88:6b:29:82:f8:90:b9:fb:95:82:eb:3a:eb:c7:be:32:
ef:bc:9a:b0:f8:49:67:d6:77:d7:b2:d8:44:e0:c6:4e:ac:67:
2c:21:02:ee:eb:ce:ad:bf:81:5c:32:b2:2b:e4:8f:f1:3e:b4:
5f:5d:af:3e:7a:fa:f1:6e:a4:1d:82:31:2a:d4:94:eb:d3:6f:
ec:4e:2a:5e:f6:94:0e:78:fa:1b:ab:99:c2:e8:4f:e3:7c:85:
7e:dc:82:e7:e4:5d:0d:6b:0f:97:69:55:ec:18:82:3b:2c:f4:
85:bf:ae:1f:da:d8:85:d6:37:aa:c5:32:54:35:8a:34:00:03:
ee:08:7e:40:0e:0d:40:66:11:c3:72:d2:07:a0:21:9b:5b:dc:
37:78:f7:c9:d7:6b:65:39:85:f1:3e:d0:34:11:75:0d:b6:14:
2b:ad:83:bc:be:d6:52:f0:72:4f:dd:1a:37:86:a8:24:8b:f2:
f9:d6:02:b8:7a:80:29:7a:b5:d5:38:18:a4:14:b8:23:df:5e:
5b:c2:42:ff:96:ed:ff:e6:3f:8e:c8:99:6d:92:fc:53:81:66:
cc:a7:e6:a6:d1:21:d4:5c:05:a5:b7:95:d6:6f:c4:6b:24:8e:
f9:01:6f:9d:40:90:59:a3:7e:af:fe:c7:f7:4a:35:05:74:28:
a4:76:d8:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:55:05 2025 by rpki-client