Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/3133322e3235312e3139322e302f31392d3234203d3e203231353735.roa
File: 3133322e3235312e3139322e302f31392d3234203d3e203231353735.roa (raw, json)
Hash identifier: evHNttZ32x1Bx5BEKhQrr4fAsuabbAzmsUH5gYcJeVk=
Subject key identifier: 7D:5F:9D:C6:AD:55:F6:45:41:9B:7E:2A:BB:D1:A4:1C:4A:B4:E5:6A
Certificate issuer: /CN=24D42265AC44C52C720364B7A5C0074DD2179046
Certificate serial: 2C9524D427759B9125AB9C1FC3A59BD24BCA253C
Authority key identifier: 24:D4:22:65:AC:44:C5:2C:72:03:64:B7:A5:C0:07:4D:D2:17:90:46
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24D42265AC44C52C720364B7A5C0074DD2179046.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/3133322e3235312e3139322e302f31392d3234203d3e203231353735.roa
Signing time: Tue 04 Feb 2025 18:18:05 +0000
ROA not before: Tue 04 Feb 2025 18:13:05 +0000
ROA not after: Tue 03 Feb 2026 18:18:05 +0000
asID: 21575
IP address blocks: 132.251.192.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:95:24:d4:27:75:9b:91:25:ab:9c:1f:c3:a5:9b:d2:4b:ca:25:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24D42265AC44C52C720364B7A5C0074DD2179046
Validity
Not Before: Feb 4 18:13:05 2025 GMT
Not After : Feb 3 18:18:05 2026 GMT
Subject: CN=7D5F9DC6AD55F645419B7E2ABBD1A41C4AB4E56A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:e3:b6:40:30:97:22:0e:86:6d:64:09:f0:0c:
38:80:78:bd:0d:d4:86:2b:bf:b5:48:fe:cd:54:d8:
b8:6f:37:6e:09:08:6d:81:f6:27:d5:59:26:83:b1:
90:4b:4f:06:05:4b:24:7f:66:69:b3:31:aa:80:81:
8f:29:0e:c0:56:d7:e9:83:19:b5:2a:f1:bd:9d:bc:
2d:b2:1f:f3:c8:aa:89:6a:cf:31:ce:3f:f7:83:8b:
00:81:44:c5:58:f4:cf:12:d0:c9:2d:0f:29:49:a6:
ea:42:03:cc:42:9c:7a:7d:7a:12:58:bf:bd:85:c8:
f2:c2:5b:ef:f6:b3:59:4a:85:bf:c4:1d:1c:b2:87:
a2:57:95:17:9b:ed:48:53:1c:3f:72:55:dc:86:44:
c7:fc:ee:49:b6:4c:8e:81:93:3a:b6:e8:7d:da:8e:
28:e6:ac:bf:fb:ed:48:93:d9:ea:c7:ea:97:4c:7a:
40:b3:ae:48:2d:58:81:77:df:c1:69:2d:9b:bb:46:
60:b6:9c:fd:67:62:9c:27:4e:30:24:fa:72:d0:0f:
35:78:4e:8e:5d:ab:34:91:5d:be:c9:59:ff:09:23:
2b:7f:f3:80:5c:db:7a:58:97:d8:18:3a:cd:bd:4a:
0a:37:45:9e:99:7c:ee:79:c0:2b:80:77:9d:cc:09:
03:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:5F:9D:C6:AD:55:F6:45:41:9B:7E:2A:BB:D1:A4:1C:4A:B4:E5:6A
X509v3 Authority Key Identifier:
keyid:24:D4:22:65:AC:44:C5:2C:72:03:64:B7:A5:C0:07:4D:D2:17:90:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/24D42265AC44C52C720364B7A5C0074DD2179046.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24D42265AC44C52C720364B7A5C0074DD2179046.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/3133322e3235312e3139322e302f31392d3234203d3e203231353735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
132.251.192.0/19
Signature Algorithm: sha256WithRSAEncryption
c1:c2:cb:72:a5:23:ac:59:4b:af:80:0f:4a:f5:66:07:23:f4:
d6:5b:8b:cb:8b:af:a0:13:5c:ae:ca:51:43:cc:f1:f5:14:6d:
c1:8e:83:9f:3e:8f:c7:3d:9f:39:b6:86:08:cf:aa:62:99:41:
71:2f:15:dc:c8:03:8d:86:f8:d3:ea:b3:41:b0:a6:28:c2:03:
1c:00:79:73:6f:f1:86:4c:30:e1:0a:b6:dc:d7:6e:f9:99:15:
27:07:7e:8d:35:03:76:46:d4:a9:cc:df:f0:65:a1:cc:6d:ac:
0d:f1:00:51:9d:5c:d6:06:d8:0f:e6:66:48:ba:da:cd:12:0a:
dc:39:ed:26:64:59:d1:9f:32:12:54:d9:e8:61:e0:5f:18:94:
7a:02:01:7f:62:db:16:c9:b3:1a:13:64:fe:61:f1:4a:f6:18:
3f:93:b0:6c:20:78:4d:d7:44:30:40:ec:e4:62:b8:74:d6:ae:
70:ad:77:6f:6a:80:51:3a:9f:83:e9:e3:58:db:4b:1e:ec:d0:
90:0c:42:0e:4c:4c:ec:1b:82:47:8f:63:5a:3e:49:a6:81:aa:
17:c5:28:13:ce:17:f5:b5:fd:61:ac:7e:d1:96:2f:27:bc:42:
58:92:14:ea:05:a6:47:25:df:dd:91:a0:e4:69:6e:c9:d7:8f:
fb:07:6e:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:36:42 2025 by rpki-client