Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/3133322e3235312e3132382e302f31382d3234203d3e203231353735.roa
File: 3133322e3235312e3132382e302f31382d3234203d3e203231353735.roa (raw, json)
Hash identifier: 93rtZq6XxZeIXP8in6I0VqoPkLfJU5fryKiE9BNprJI=
Subject key identifier: EC:A9:B9:92:B5:6E:AA:D4:1C:95:B4:46:C8:71:0B:FD:E9:F3:6C:BA
Certificate issuer: /CN=24D42265AC44C52C720364B7A5C0074DD2179046
Certificate serial: 6EA458E598F8576546C0C252738FA82520886266
Authority key identifier: 24:D4:22:65:AC:44:C5:2C:72:03:64:B7:A5:C0:07:4D:D2:17:90:46
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24D42265AC44C52C720364B7A5C0074DD2179046.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/3133322e3235312e3132382e302f31382d3234203d3e203231353735.roa
Signing time: Tue 04 Feb 2025 18:18:06 +0000
ROA not before: Tue 04 Feb 2025 18:13:06 +0000
ROA not after: Tue 03 Feb 2026 18:18:06 +0000
asID: 21575
IP address blocks: 132.251.128.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:a4:58:e5:98:f8:57:65:46:c0:c2:52:73:8f:a8:25:20:88:62:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24D42265AC44C52C720364B7A5C0074DD2179046
Validity
Not Before: Feb 4 18:13:06 2025 GMT
Not After : Feb 3 18:18:06 2026 GMT
Subject: CN=ECA9B992B56EAAD41C95B446C8710BFDE9F36CBA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:fe:ea:ad:ff:5a:44:39:57:92:c2:bd:87:fb:
ec:cd:27:8b:ce:49:67:b4:87:f8:65:55:b7:38:95:
f5:a2:41:23:1f:69:9d:b0:20:03:1d:02:48:07:a1:
ab:45:61:69:96:07:ac:11:98:4b:60:22:ae:3a:18:
7f:0e:8b:50:d0:40:ca:83:33:4d:0b:55:15:c0:d8:
56:07:2c:1b:82:34:5b:05:e5:1a:f7:7e:5e:64:11:
f5:60:9d:06:ad:a0:5a:14:1f:90:fc:5f:82:88:74:
58:07:3e:80:bb:c6:57:ae:d0:03:1f:6e:b0:e2:37:
34:ad:23:a8:29:e6:26:dc:af:45:96:4b:dc:73:83:
59:2c:41:55:2e:c5:7b:43:e7:b2:0f:ed:37:80:40:
a0:e8:b3:c0:60:ac:ab:34:af:ce:72:cc:30:45:e7:
68:20:14:1c:61:2e:58:35:5c:50:b0:70:0f:04:bb:
cc:85:2e:4d:7d:a7:f7:c6:da:7f:f8:95:e3:f9:bd:
98:dc:4a:7e:f7:bd:14:0a:8f:27:ec:1a:c5:56:5f:
ce:4c:ad:72:a5:c5:1b:c6:0a:e8:19:7f:9b:40:53:
8c:75:7a:a4:b1:21:63:43:23:66:8c:9b:4b:49:53:
bb:ee:46:85:6a:0e:fd:92:d9:f4:14:3f:6d:1d:27:
f0:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:A9:B9:92:B5:6E:AA:D4:1C:95:B4:46:C8:71:0B:FD:E9:F3:6C:BA
X509v3 Authority Key Identifier:
keyid:24:D4:22:65:AC:44:C5:2C:72:03:64:B7:A5:C0:07:4D:D2:17:90:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/24D42265AC44C52C720364B7A5C0074DD2179046.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24D42265AC44C52C720364B7A5C0074DD2179046.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/3133322e3235312e3132382e302f31382d3234203d3e203231353735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
132.251.128.0/18
Signature Algorithm: sha256WithRSAEncryption
63:28:32:5f:f1:07:e0:1c:48:5f:e8:19:8a:34:bc:1c:8b:64:
5a:19:5a:d8:0a:95:92:17:30:c6:72:42:ae:0b:87:33:05:91:
c2:e5:60:7c:af:51:46:03:31:c8:fc:7d:cc:68:52:cc:12:49:
af:e4:fc:4d:c2:92:4d:cd:68:7a:f7:93:68:39:e5:96:c7:12:
40:65:f8:94:29:5a:cb:2e:6f:ec:1a:65:24:f7:a9:bb:35:9a:
43:cf:3e:2f:1f:71:ab:72:62:d3:07:cf:32:77:a8:80:5a:11:
4e:8a:71:c0:6b:79:d7:e1:cc:cc:b8:e0:bc:0e:c7:8d:3a:de:
80:f6:69:d9:c7:d2:b8:d0:55:24:e2:8e:38:35:d3:f1:af:6d:
62:98:38:83:84:43:f2:4f:a3:ff:dc:d5:fc:75:b3:7b:0b:63:
b4:8c:21:82:ae:05:9d:17:13:07:d2:bc:37:60:5a:80:5b:25:
47:3c:d1:2d:20:0c:39:a6:d8:43:ff:71:91:fc:76:4c:49:92:
da:c6:2c:91:5e:60:ea:2d:6c:fa:7b:0e:d8:a6:94:1d:0b:89:
4f:cc:5e:ff:b1:7e:3e:ea:d8:45:d5:b2:e9:01:5b:ed:34:6a:
8b:31:55:a8:f5:7b:90:26:2b:21:84:26:52:13:bf:43:e7:e7:
b1:44:11:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:36:38 2025 by rpki-client