Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A16E8F103146B2850335023A70A6D39874766368DBDA5F048D55972B98FD8367/0/3136382e3230352e3133322e302f32322d3234203d3e203237383433.roa
File: 3136382e3230352e3133322e302f32322d3234203d3e203237383433.roa (raw, json)
Hash identifier: Bq9ggT5kv45TxWusLcv8+XBI4qKBaY3DwFMGoVcluxc=
Subject key identifier: 64:75:97:E4:05:A2:DE:92:E2:47:BF:B5:09:58:78:E5:7C:27:2E:0B
Certificate issuer: /CN=9F08D38D4571C09A83B45ACFD10AEB7826CE8F84
Certificate serial: 24BBE3672EB0C59339F36EF04F77DFB0CC682BA9
Authority key identifier: 9F:08:D3:8D:45:71:C0:9A:83:B4:5A:CF:D1:0A:EB:78:26:CE:8F:84
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F08D38D4571C09A83B45ACFD10AEB7826CE8F84.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/A16E8F103146B2850335023A70A6D39874766368DBDA5F048D55972B98FD8367/0/3136382e3230352e3133322e302f32322d3234203d3e203237383433.roa
Signing time: Tue 04 Feb 2025 18:06:02 +0000
ROA not before: Tue 04 Feb 2025 18:01:02 +0000
ROA not after: Tue 03 Feb 2026 18:06:02 +0000
asID: 27843
IP address blocks: 168.205.132.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:bb:e3:67:2e:b0:c5:93:39:f3:6e:f0:4f:77:df:b0:cc:68:2b:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9F08D38D4571C09A83B45ACFD10AEB7826CE8F84
Validity
Not Before: Feb 4 18:01:02 2025 GMT
Not After : Feb 3 18:06:02 2026 GMT
Subject: CN=647597E405A2DE92E247BFB5095878E57C272E0B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:66:c2:84:31:35:01:7a:fe:49:74:29:8b:12:
8f:2c:9f:d3:9c:2d:ae:c1:32:02:12:a7:45:23:b9:
2e:93:37:46:f9:ee:86:4f:bc:b5:44:f2:8a:5f:4d:
d9:7d:ea:23:e6:d5:02:bc:75:22:c3:b5:3f:cb:73:
37:80:71:69:ad:2f:19:38:b2:f9:83:88:a8:57:50:
fa:89:7d:c2:9b:32:af:38:52:03:b3:bf:cf:83:58:
dd:23:b7:73:b3:02:b9:1e:c6:a6:02:96:80:27:db:
0d:13:09:df:c9:88:77:35:81:fc:87:d2:87:20:aa:
7d:b2:4f:76:f9:8d:41:0b:f4:d9:3c:38:04:05:6b:
6c:b5:35:db:47:6f:6b:4f:b2:66:7d:6a:2e:c3:ab:
fb:60:a5:f3:65:5f:9f:a9:12:ec:ef:29:8e:9a:a5:
82:9f:00:ff:aa:e5:3f:0a:cd:a3:4f:57:57:75:26:
86:33:8c:f6:b1:10:d6:6d:f3:2a:8a:3c:c9:09:9f:
1f:8e:39:0a:fd:0c:29:3e:0e:74:03:52:8a:f4:b0:
f4:83:2b:31:0e:54:be:b2:8f:ae:bd:f2:d9:ec:b5:
5f:8b:b7:7b:dc:07:bf:fe:4a:dd:74:ca:3c:f9:b8:
a4:7b:b3:d5:91:50:6e:81:66:f0:3f:9b:98:c8:a5:
39:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:75:97:E4:05:A2:DE:92:E2:47:BF:B5:09:58:78:E5:7C:27:2E:0B
X509v3 Authority Key Identifier:
keyid:9F:08:D3:8D:45:71:C0:9A:83:B4:5A:CF:D1:0A:EB:78:26:CE:8F:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/A16E8F103146B2850335023A70A6D39874766368DBDA5F048D55972B98FD8367/0/9F08D38D4571C09A83B45ACFD10AEB7826CE8F84.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F08D38D4571C09A83B45ACFD10AEB7826CE8F84.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A16E8F103146B2850335023A70A6D39874766368DBDA5F048D55972B98FD8367/0/3136382e3230352e3133322e302f32322d3234203d3e203237383433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.205.132.0/22
Signature Algorithm: sha256WithRSAEncryption
2e:73:76:15:cf:51:97:6a:73:a4:88:91:3a:e5:70:72:e6:e8:
22:1b:e8:c6:42:58:9b:2b:e4:b8:75:3a:2b:5b:1d:68:4a:2b:
7a:3b:b5:58:b7:df:f8:3b:ff:95:f1:89:11:a6:f1:31:42:f6:
fb:81:32:a0:76:73:8e:3b:6a:86:c6:a8:56:0c:48:12:c4:cd:
8d:8c:03:9a:4d:52:72:9d:aa:80:f6:9a:3e:6a:a1:5d:b2:a1:
b7:79:59:44:e8:a8:aa:40:1d:94:96:d7:67:90:58:21:a2:6c:
c3:39:f9:01:26:03:25:6a:b4:56:ea:8e:f4:26:ec:21:4e:4e:
e8:0e:d4:a6:cf:16:af:76:25:9f:19:8f:84:a5:73:6c:c1:5f:
51:11:53:cf:79:0c:b7:86:88:e5:06:d6:26:7a:c3:9a:05:09:
e0:64:81:c9:e9:72:e8:9f:5b:af:32:88:92:c5:f4:78:5a:87:
b2:0b:8d:d8:6c:e4:f2:b3:8b:37:2e:80:ab:2a:a6:29:60:76:
6f:02:87:1c:c5:03:4a:bd:fd:28:6e:ab:5a:2c:3b:83:83:0f:
59:50:3e:14:f0:1d:1f:0b:e9:22:a1:55:b8:4b:71:da:d2:38:
fa:69:a7:ed:a7:ff:9e:4d:a3:c5:3d:66:d4:5a:fd:4c:2b:16:
98:13:75:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:39:53 2025 by rpki-client