Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8D4BB2421C24D19F3123B0C681B01AD82A92941582C9DABB9493E097F3F2F893/0/3137302e302e382e302f32342d3234203d3e20323632353839.roa
File: 3137302e302e382e302f32342d3234203d3e20323632353839.roa (raw, json)
Hash identifier: WokL6H9V0FMkbyu5IEZdyih9I/fBTX9aBLyXtAg2N9s=
Subject key identifier: C9:18:DA:D2:14:26:1A:7A:9A:AD:1C:B3:1C:B0:7E:67:74:F6:B4:16
Certificate issuer: /CN=08AA2E4D3C7CDF9626D331ACD38D1719F3D4A72D
Certificate serial: 62996B79691C879D2BF44784041DE4111EB05E6F
Authority key identifier: 08:AA:2E:4D:3C:7C:DF:96:26:D3:31:AC:D3:8D:17:19:F3:D4:A7:2D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08AA2E4D3C7CDF9626D331ACD38D1719F3D4A72D.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8D4BB2421C24D19F3123B0C681B01AD82A92941582C9DABB9493E097F3F2F893/0/3137302e302e382e302f32342d3234203d3e20323632353839.roa
Signing time: Tue 04 Feb 2025 18:12:27 +0000
ROA not before: Tue 04 Feb 2025 18:07:27 +0000
ROA not after: Tue 03 Feb 2026 18:12:27 +0000
asID: 262589
IP address blocks: 170.0.8.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:99:6b:79:69:1c:87:9d:2b:f4:47:84:04:1d:e4:11:1e:b0:5e:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08AA2E4D3C7CDF9626D331ACD38D1719F3D4A72D
Validity
Not Before: Feb 4 18:07:27 2025 GMT
Not After : Feb 3 18:12:27 2026 GMT
Subject: CN=C918DAD214261A7A9AAD1CB31CB07E6774F6B416
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:53:ec:01:44:2c:b4:09:7e:c8:97:35:ba:a6:
4c:e9:0f:60:15:2c:ee:7b:60:0e:63:d4:29:5a:ef:
b5:49:f0:ce:5c:65:78:44:8e:13:34:fe:12:14:09:
ce:77:2f:91:28:a7:80:36:d3:5d:98:0e:a2:3d:89:
6d:4d:3d:67:5a:10:6f:e9:12:0a:25:8b:21:9f:43:
d8:70:48:5b:e0:88:4e:c2:0f:86:c4:b5:66:d6:73:
b8:e8:ce:cb:2f:6e:14:61:a7:8b:6f:72:6d:9c:65:
4c:7a:76:b3:b2:c8:f2:0e:b2:51:a5:05:53:a7:6d:
8e:8d:8a:1d:b4:3a:5e:6d:13:05:e8:49:12:78:66:
94:d3:6d:b2:0e:e9:f4:76:4a:ea:d4:aa:eb:83:d9:
a9:75:87:b1:c4:2b:44:11:4d:6d:1a:b5:ca:e9:e8:
b7:d4:a1:9f:be:95:41:5d:4d:8f:34:54:b6:17:52:
f5:a8:3e:59:39:3f:5a:3b:ee:92:ce:16:b6:c4:ab:
d1:ad:19:cc:4f:4b:4c:fb:98:35:ab:06:36:03:8a:
65:7e:81:78:ce:f0:68:2f:f0:dd:8f:dc:d7:77:2b:
3d:58:61:55:7c:a0:07:7a:b3:44:bc:d5:8b:5f:7c:
6d:bf:b4:4d:06:f9:0a:e8:3b:8e:4b:ec:e4:9e:95:
38:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:18:DA:D2:14:26:1A:7A:9A:AD:1C:B3:1C:B0:7E:67:74:F6:B4:16
X509v3 Authority Key Identifier:
keyid:08:AA:2E:4D:3C:7C:DF:96:26:D3:31:AC:D3:8D:17:19:F3:D4:A7:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/8D4BB2421C24D19F3123B0C681B01AD82A92941582C9DABB9493E097F3F2F893/0/08AA2E4D3C7CDF9626D331ACD38D1719F3D4A72D.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08AA2E4D3C7CDF9626D331ACD38D1719F3D4A72D.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8D4BB2421C24D19F3123B0C681B01AD82A92941582C9DABB9493E097F3F2F893/0/3137302e302e382e302f32342d3234203d3e20323632353839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.0.8.0/24
Signature Algorithm: sha256WithRSAEncryption
68:75:b2:c3:65:04:59:8e:4a:5a:aa:90:cc:57:1b:44:67:97:
91:d3:b5:7e:3e:eb:e5:ec:c2:eb:01:39:42:f5:de:cd:84:e2:
93:c7:44:33:21:19:d9:6b:57:03:52:30:f2:66:41:f8:4c:57:
d3:05:a6:d6:6c:03:0d:0e:f9:a7:bc:27:d7:31:84:f1:e3:88:
ec:87:f0:60:8d:b8:50:af:19:e4:c2:70:be:9a:8e:37:8c:dd:
23:52:ac:90:9a:34:d8:7a:28:e7:83:72:07:8d:4f:2c:bd:67:
fa:77:be:46:48:45:fa:75:60:9f:c6:ef:20:1f:88:81:b2:1a:
a9:0d:e1:86:8c:b7:eb:fc:cc:f8:2a:5d:6c:62:f9:0c:2c:3c:
92:ec:f0:db:93:95:86:94:1e:ab:98:84:1b:00:59:40:b8:ef:
32:8e:94:8b:e9:bd:0f:33:9f:c3:4d:69:a0:9b:63:fb:01:3d:
55:d9:a8:fb:b7:72:90:2b:59:04:05:f0:47:6b:be:d9:bc:e6:
c3:63:e0:be:03:dc:8d:74:be:28:7c:0b:76:09:1c:ab:85:6d:
9a:6f:c2:ec:1e:ec:26:0a:0d:1d:c4:f9:f1:03:8d:b3:65:5f:
15:1a:81:41:21:2f:25:21:4b:cd:11:c1:55:1b:e7:26:5f:af:
3a:4d:c9:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:02:36 2025 by rpki-client