Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/94DB8CCE5D181D58FDBBB42A91D3248BD30B024FBBD49AB7BE54AF5599351747/0/3133312e37322e3233362e302f32342d3234203d3e20323633373533.roa
File: 3133312e37322e3233362e302f32342d3234203d3e20323633373533.roa (raw, json)
Hash identifier: 0uIIofUh4I7uWUVqRCXbm94ZK/BFBgBqwf3Lp14wHWk=
Subject key identifier: 18:40:D8:E7:8E:D5:95:52:1A:DD:8D:05:85:AB:4F:15:F5:0F:83:64
Certificate issuer: /CN=E629C4E7637A20BC21967E803440E0984DB741BE
Certificate serial: 1CC42708227DB476FE76A7C03A44AC4281D5ADEE
Authority key identifier: E6:29:C4:E7:63:7A:20:BC:21:96:7E:80:34:40:E0:98:4D:B7:41:BE
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E629C4E7637A20BC21967E803440E0984DB741BE.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/94DB8CCE5D181D58FDBBB42A91D3248BD30B024FBBD49AB7BE54AF5599351747/0/3133312e37322e3233362e302f32342d3234203d3e20323633373533.roa
Signing time: Tue 04 Feb 2025 18:13:12 +0000
ROA not before: Tue 04 Feb 2025 18:08:12 +0000
ROA not after: Tue 03 Feb 2026 18:13:12 +0000
asID: 263753
IP address blocks: 131.72.236.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:c4:27:08:22:7d:b4:76:fe:76:a7:c0:3a:44:ac:42:81:d5:ad:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E629C4E7637A20BC21967E803440E0984DB741BE
Validity
Not Before: Feb 4 18:08:12 2025 GMT
Not After : Feb 3 18:13:12 2026 GMT
Subject: CN=1840D8E78ED595521ADD8D0585AB4F15F50F8364
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:51:86:fe:91:b6:82:b2:9b:f9:0e:65:e8:96:
8f:97:53:3c:9f:77:b3:97:07:a5:d1:d3:fd:2f:13:
8f:88:f0:27:b8:d3:86:e7:d0:9d:c3:c6:32:41:2c:
61:ec:1d:d5:66:b8:3a:6a:bd:8d:ac:6a:79:87:b6:
b2:20:d9:1a:74:fd:65:62:b8:29:47:b1:3a:40:81:
d6:b1:e4:95:a8:58:ab:c6:77:29:32:62:e8:4e:65:
33:68:4b:44:16:37:f6:dd:74:be:61:bc:cf:16:a2:
46:07:87:b3:ed:0e:d7:b3:26:f5:e1:e3:ce:bb:02:
76:b3:37:c0:17:9b:6b:b0:a3:05:28:fa:14:b6:27:
8d:62:30:3f:25:5b:21:ef:f3:37:83:be:9e:f7:77:
9d:a0:a7:94:a9:49:af:4d:48:87:10:03:b4:aa:b3:
19:48:54:8f:03:ec:50:d9:82:ef:a2:d0:6f:e1:99:
64:40:08:fc:af:2f:69:d4:5a:c5:84:24:89:f7:cf:
70:fa:95:ea:62:2a:9a:5b:a5:6c:a7:d5:c5:32:11:
e9:04:61:6e:c2:fa:68:24:14:1b:da:34:08:c5:a8:
43:02:45:0d:c5:23:06:e3:37:80:a4:66:ab:6b:37:
82:7a:64:19:62:19:56:43:db:ae:0b:9d:ff:e6:c8:
4d:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:40:D8:E7:8E:D5:95:52:1A:DD:8D:05:85:AB:4F:15:F5:0F:83:64
X509v3 Authority Key Identifier:
keyid:E6:29:C4:E7:63:7A:20:BC:21:96:7E:80:34:40:E0:98:4D:B7:41:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/94DB8CCE5D181D58FDBBB42A91D3248BD30B024FBBD49AB7BE54AF5599351747/0/E629C4E7637A20BC21967E803440E0984DB741BE.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E629C4E7637A20BC21967E803440E0984DB741BE.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/94DB8CCE5D181D58FDBBB42A91D3248BD30B024FBBD49AB7BE54AF5599351747/0/3133312e37322e3233362e302f32342d3234203d3e20323633373533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.72.236.0/24
Signature Algorithm: sha256WithRSAEncryption
71:6b:c3:9e:b1:b9:c2:e6:a7:92:ee:66:46:9f:41:73:d1:18:
7c:7a:93:0c:c8:e5:75:8b:e9:2c:67:45:ce:01:bc:ed:b2:6c:
e5:dd:09:a9:a1:47:21:b7:35:f0:d3:59:5e:ab:1b:dd:3a:02:
59:26:39:a8:d3:f1:6a:00:25:55:69:4d:89:64:4d:1f:3c:58:
8c:c3:9c:90:5d:54:c8:a6:6b:50:05:dc:0d:cf:c5:16:e9:f6:
ff:f1:01:0d:6f:dd:c2:f5:a9:55:a3:d5:46:44:5e:74:c1:b0:
df:4c:52:25:ba:93:62:da:82:5e:b9:f2:2d:ab:c0:28:e6:6d:
6d:a4:22:28:d7:94:9f:56:f3:0f:ec:ed:c8:0c:f4:c0:43:53:
a3:e9:d2:ca:d7:34:2d:f1:fb:50:12:21:97:a8:5b:bb:53:4f:
0e:19:85:d6:01:94:9e:f6:32:ee:2f:d3:de:b7:ca:41:a9:10:
27:9f:ca:c2:4a:e2:82:40:36:a5:e2:42:3b:f4:f2:1e:ae:b2:
1e:01:21:c3:95:0c:8f:ff:59:0b:f7:0f:8e:55:36:b2:37:f9:
1d:1b:ea:1c:ad:42:44:e6:67:43:b9:d9:61:1a:a2:60:86:b7:
89:f3:0a:22:60:80:5b:68:16:57:0a:9b:ef:9c:da:c0:14:85:
4b:98:a4:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:24:54 2025 by rpki-client