Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9DBE2F180B65BBCAB9DA7B5B427A1A5DE1C8C4EB182D90606D097BEC079F119F/0/3137302e3233392e32382e302f32322d3234203d3e203237383635.roa
File: 3137302e3233392e32382e302f32322d3234203d3e203237383635.roa (raw, json)
Hash identifier: PikFhQdK8vP8IJ38VoE5Bf8MxXS/gtERrpPRBqYgM7Y=
Subject key identifier: 00:5F:C6:E7:26:E1:61:17:52:CA:30:DF:09:42:E1:92:8C:CD:F3:10
Certificate issuer: /CN=A5CE25AA2B9FB1CE0BE54FB6B339C5CCF502CF48
Certificate serial: 3492E9229A4B467E20906236BB3BCCB0A5845F5A
Authority key identifier: A5:CE:25:AA:2B:9F:B1:CE:0B:E5:4F:B6:B3:39:C5:CC:F5:02:CF:48
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5CE25AA2B9FB1CE0BE54FB6B339C5CCF502CF48.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9DBE2F180B65BBCAB9DA7B5B427A1A5DE1C8C4EB182D90606D097BEC079F119F/0/3137302e3233392e32382e302f32322d3234203d3e203237383635.roa
Signing time: Tue 04 Feb 2025 18:40:09 +0000
ROA not before: Tue 04 Feb 2025 18:35:09 +0000
ROA not after: Tue 03 Feb 2026 18:40:09 +0000
asID: 27865
IP address blocks: 170.239.28.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:92:e9:22:9a:4b:46:7e:20:90:62:36:bb:3b:cc:b0:a5:84:5f:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A5CE25AA2B9FB1CE0BE54FB6B339C5CCF502CF48
Validity
Not Before: Feb 4 18:35:09 2025 GMT
Not After : Feb 3 18:40:09 2026 GMT
Subject: CN=005FC6E726E1611752CA30DF0942E1928CCDF310
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:37:92:fa:45:d6:0a:54:3f:86:76:f5:7d:59:
4f:39:d5:4f:02:ef:36:23:42:1c:f9:9b:1b:45:84:
f9:ae:18:44:f2:2d:17:af:c4:6e:d6:5a:68:95:68:
c6:a2:9a:c1:f3:b5:be:a9:4a:57:2a:56:ea:47:ff:
c0:50:4a:5f:39:c0:05:bb:3c:13:2a:3b:62:96:a2:
e4:7f:f5:a6:2e:20:88:a7:ce:51:14:86:f1:92:6b:
02:2a:a9:93:8a:90:c1:22:74:f1:25:76:a8:ce:60:
27:8a:05:75:7f:d3:c8:cc:cb:2c:99:0e:18:d5:e0:
29:53:12:6f:a5:24:c8:ea:14:7b:67:4c:0c:45:62:
4f:e9:03:e5:10:5c:36:a9:6c:46:52:45:37:ce:57:
1e:2d:f8:75:65:85:d0:74:88:58:78:11:2d:12:e7:
c7:d2:75:e1:8d:be:6c:6e:c4:17:35:c3:e4:69:21:
04:0c:fe:96:b5:91:25:ce:10:6e:4d:1f:81:64:e2:
d8:01:c7:87:20:ac:f6:48:26:49:42:dd:14:62:8b:
93:1f:0c:2b:3b:44:5d:bf:3b:ea:b2:77:b9:54:15:
f0:98:45:5a:5f:8b:99:56:3c:5f:bb:4b:18:e9:59:
37:bf:98:4d:2b:38:7e:63:de:ad:7e:d3:46:07:e0:
7b:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:5F:C6:E7:26:E1:61:17:52:CA:30:DF:09:42:E1:92:8C:CD:F3:10
X509v3 Authority Key Identifier:
keyid:A5:CE:25:AA:2B:9F:B1:CE:0B:E5:4F:B6:B3:39:C5:CC:F5:02:CF:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9DBE2F180B65BBCAB9DA7B5B427A1A5DE1C8C4EB182D90606D097BEC079F119F/0/A5CE25AA2B9FB1CE0BE54FB6B339C5CCF502CF48.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5CE25AA2B9FB1CE0BE54FB6B339C5CCF502CF48.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9DBE2F180B65BBCAB9DA7B5B427A1A5DE1C8C4EB182D90606D097BEC079F119F/0/3137302e3233392e32382e302f32322d3234203d3e203237383635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.239.28.0/22
Signature Algorithm: sha256WithRSAEncryption
21:1d:5a:d6:5e:25:b2:b0:51:72:d1:cd:74:6c:53:5a:f1:71:
29:7b:97:b4:88:4b:1c:82:0d:bc:b2:ae:df:e0:28:04:5e:54:
c8:b3:28:87:f5:53:c1:d9:5c:06:e0:a4:43:f3:33:be:3e:b1:
d7:da:0e:d4:2a:24:43:40:b7:9b:39:ba:10:95:02:23:9a:30:
28:5e:b7:19:44:eb:3f:0d:17:9f:f0:78:6f:ff:15:07:04:67:
2e:9f:49:c4:3e:f0:48:94:b1:4e:3b:3a:69:64:f2:e4:59:07:
f2:da:19:ba:eb:29:3a:26:22:86:e2:ca:2f:b7:c2:da:5c:30:
1b:26:9c:99:8c:42:26:c3:91:7a:6d:a1:88:dd:8b:8d:f9:01:
a9:71:18:71:1b:14:cc:7b:46:9a:92:8b:a4:3d:32:a6:fe:d0:
e6:9f:d9:fb:ee:58:2d:a2:da:4a:16:f4:17:1c:23:28:10:3f:
f2:cf:f6:10:73:bf:ad:70:02:ba:58:64:18:88:cd:4e:70:96:
70:11:be:1d:40:34:26:27:80:3c:48:7f:13:24:0a:dc:d5:84:
dd:b6:bc:c3:02:fc:a2:37:a9:81:21:e2:8e:5c:5e:92:42:4d:
35:69:6f:31:de:3f:05:2a:74:23:8e:89:46:99:f5:31:72:98:
2d:bd:81:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:21:16 2025 by rpki-client