Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A16E8F103146B2850335023A70A6D39874766368DBDA5F048D55972B98FD8367/0/3136382e3132312e34342e302f32342d3234203d3e203237383433.roa
File: 3136382e3132312e34342e302f32342d3234203d3e203237383433.roa (raw, json)
Hash identifier: 0IEAHkPsMJYcSvGYYl20pYvs9HpYloBtxse9ubeBLVQ=
Subject key identifier: 0F:C4:2C:ED:88:89:40:4F:1D:56:BA:C5:74:94:AE:B5:94:11:CB:13
Certificate issuer: /CN=9F08D38D4571C09A83B45ACFD10AEB7826CE8F84
Certificate serial: 3BBBC34DEBA6B42E420086754965EB6B141EF3EE
Authority key identifier: 9F:08:D3:8D:45:71:C0:9A:83:B4:5A:CF:D1:0A:EB:78:26:CE:8F:84
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F08D38D4571C09A83B45ACFD10AEB7826CE8F84.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/A16E8F103146B2850335023A70A6D39874766368DBDA5F048D55972B98FD8367/0/3136382e3132312e34342e302f32342d3234203d3e203237383433.roa
Signing time: Tue 04 Feb 2025 18:06:02 +0000
ROA not before: Tue 04 Feb 2025 18:01:02 +0000
ROA not after: Tue 03 Feb 2026 18:06:02 +0000
asID: 27843
IP address blocks: 168.121.44.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:bb:c3:4d:eb:a6:b4:2e:42:00:86:75:49:65:eb:6b:14:1e:f3:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9F08D38D4571C09A83B45ACFD10AEB7826CE8F84
Validity
Not Before: Feb 4 18:01:02 2025 GMT
Not After : Feb 3 18:06:02 2026 GMT
Subject: CN=0FC42CED8889404F1D56BAC57494AEB59411CB13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b8:7f:ad:eb:31:b4:81:27:d9:76:89:14:61:
35:a9:e7:d5:5c:3a:74:bc:32:73:4c:cc:8a:21:e4:
d7:c4:5e:50:04:81:96:11:f9:f5:28:1e:cc:32:f3:
ea:5e:f2:70:25:fe:48:7c:e9:5f:38:7a:e8:88:7f:
fb:f9:c9:0b:cf:69:8b:5b:7a:3b:6c:56:8b:35:a0:
c8:1f:d7:ce:1a:2d:da:ad:28:8e:96:6e:87:85:ae:
e9:e1:bc:47:23:ff:6f:aa:58:de:17:00:ee:ef:29:
21:e0:f3:ed:6a:f2:8c:11:07:1a:2f:fe:4e:e9:ad:
4f:b3:b9:78:dc:a2:b8:29:4c:1d:4c:d0:27:37:cb:
41:cf:4c:9d:ed:d2:d3:b5:1f:4c:97:ca:56:0e:67:
ca:6f:c2:40:bd:71:34:c1:42:b8:ac:75:7c:90:32:
49:ba:f5:07:82:42:e5:2f:99:ca:f9:77:fc:c1:85:
d0:82:8e:fb:c3:a8:f7:df:a1:fc:51:94:23:1f:65:
99:f2:4f:d3:84:d2:e2:db:4d:24:69:b5:07:e4:4b:
ca:6b:70:bc:9c:8d:22:18:47:de:1a:22:e4:fd:f0:
3e:ad:bb:56:70:34:4d:bb:a6:4e:eb:9a:cf:13:fa:
fd:d5:dd:5d:26:de:89:30:c3:64:c4:16:e9:18:bb:
17:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:C4:2C:ED:88:89:40:4F:1D:56:BA:C5:74:94:AE:B5:94:11:CB:13
X509v3 Authority Key Identifier:
keyid:9F:08:D3:8D:45:71:C0:9A:83:B4:5A:CF:D1:0A:EB:78:26:CE:8F:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/A16E8F103146B2850335023A70A6D39874766368DBDA5F048D55972B98FD8367/0/9F08D38D4571C09A83B45ACFD10AEB7826CE8F84.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F08D38D4571C09A83B45ACFD10AEB7826CE8F84.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A16E8F103146B2850335023A70A6D39874766368DBDA5F048D55972B98FD8367/0/3136382e3132312e34342e302f32342d3234203d3e203237383433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.121.44.0/24
Signature Algorithm: sha256WithRSAEncryption
28:af:af:91:da:69:ce:ad:aa:e3:c9:a5:7a:b5:77:72:13:6a:
4e:18:38:b6:6b:6e:26:99:a4:3f:03:8b:39:74:aa:b4:b1:fa:
03:21:98:99:d5:65:7b:54:ee:be:93:05:45:27:42:89:d8:a0:
23:ec:c8:4b:f5:52:3e:27:5b:39:ce:db:e0:b2:e3:99:e9:b6:
ba:bd:d4:07:91:55:59:d4:90:d0:6f:9d:ad:67:0f:da:9d:b7:
d1:e4:35:6b:c3:2c:46:ca:71:cd:fc:74:45:ec:b0:d0:79:24:
8a:32:e7:2c:aa:c8:17:09:c6:a4:c2:c8:60:19:0c:a9:e3:73:
63:24:55:ae:69:67:48:09:0f:fd:f6:d6:9c:e7:cb:33:b2:90:
f1:86:1b:76:dd:29:10:d3:0a:e8:3c:03:93:61:fa:28:e9:8b:
de:d7:99:a5:3b:ad:3f:cf:46:3a:f9:2e:98:94:c3:27:9e:2f:
ae:88:e7:e7:af:9e:97:13:1d:1f:91:81:76:72:0f:ff:12:68:
e1:b7:18:1f:42:75:7e:fa:99:e9:d9:93:2d:fc:23:37:4a:72:
fc:13:0b:87:f2:64:6f:19:c7:b5:8c:36:ff:0c:86:bb:99:7f:
71:c8:07:89:40:c1:67:41:87:17:de:da:d3:94:9f:45:b8:a9:
46:3d:5b:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:37:14 2025 by rpki-client