Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/3231362e3135322e3136302e302f32302d3234203d3e203131303831.roa
File: 3231362e3135322e3136302e302f32302d3234203d3e203131303831.roa (raw, json)
Hash identifier: XvvIRb5mQGQN7/S4VazeeuYV1pQWsfcztrFSWTpaKRc=
Subject key identifier: 80:E0:48:39:C2:84:A0:8E:4F:CF:3C:C0:E7:5B:6A:98:8B:62:8C:95
Certificate issuer: /CN=237D63DAE61C3211909C89DEBD463B26F873E44B
Certificate serial: 154F952C248588C0EC5AA8FA655939E63353238C
Authority key identifier: 23:7D:63:DA:E6:1C:32:11:90:9C:89:DE:BD:46:3B:26:F8:73:E4:4B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/237D63DAE61C3211909C89DEBD463B26F873E44B.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/3231362e3135322e3136302e302f32302d3234203d3e203131303831.roa
Signing time: Tue 04 Feb 2025 18:50:53 +0000
ROA not before: Tue 04 Feb 2025 18:45:53 +0000
ROA not after: Tue 03 Feb 2026 18:50:53 +0000
asID: 11081
IP address blocks: 216.152.160.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:4f:95:2c:24:85:88:c0:ec:5a:a8:fa:65:59:39:e6:33:53:23:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=237D63DAE61C3211909C89DEBD463B26F873E44B
Validity
Not Before: Feb 4 18:45:53 2025 GMT
Not After : Feb 3 18:50:53 2026 GMT
Subject: CN=80E04839C284A08E4FCF3CC0E75B6A988B628C95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:60:25:cd:aa:58:68:eb:44:e4:d3:2a:79:0a:
b1:15:43:8c:21:e4:69:f2:c9:c2:cb:a0:b1:a8:4b:
02:96:a0:13:b5:b5:69:d3:21:73:99:6a:0f:6b:7f:
25:e9:d1:49:63:54:4d:51:a4:ef:4c:ca:a4:5f:c4:
5d:2c:cf:04:49:cc:95:93:ec:2c:16:1b:24:1d:82:
58:97:9d:ee:45:ec:88:b0:13:3f:5d:c0:04:78:29:
aa:fa:fb:72:c3:ee:d7:ae:c2:02:d2:bc:4c:00:28:
a8:7a:ae:1f:20:c6:4e:c4:c6:24:00:3b:af:a9:ba:
df:52:29:bf:5c:8e:74:2b:c2:03:7c:d0:6c:f6:40:
ad:83:a3:96:d1:a3:9d:60:a1:3c:39:9d:b7:5b:e2:
37:4f:d4:51:bd:63:11:2c:43:5a:ef:dc:47:92:f9:
53:39:73:1c:34:41:e9:70:f8:73:28:51:13:86:b3:
9c:b6:b7:e5:9f:2a:17:bc:05:f0:14:03:1d:8d:4b:
36:c3:15:93:44:c9:78:ce:fa:6b:94:ee:12:e7:d6:
8e:04:f2:73:4f:ac:2a:76:5b:18:69:fb:b2:36:66:
62:7b:6c:be:04:28:77:dd:48:fa:18:4a:8a:e5:b2:
dd:8a:3e:f7:cb:79:49:ca:99:dd:1d:db:6c:0d:08:
bc:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:E0:48:39:C2:84:A0:8E:4F:CF:3C:C0:E7:5B:6A:98:8B:62:8C:95
X509v3 Authority Key Identifier:
keyid:23:7D:63:DA:E6:1C:32:11:90:9C:89:DE:BD:46:3B:26:F8:73:E4:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/237D63DAE61C3211909C89DEBD463B26F873E44B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/237D63DAE61C3211909C89DEBD463B26F873E44B.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/3231362e3135322e3136302e302f32302d3234203d3e203131303831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.152.160.0/20
Signature Algorithm: sha256WithRSAEncryption
68:fa:2f:a7:4e:b2:ef:2f:15:48:17:84:e6:f7:ff:22:57:b8:
52:7f:9b:7c:8a:3f:43:2a:6a:19:33:f0:57:b6:be:e9:a3:ca:
d6:8c:f1:03:46:35:d4:73:fe:fe:fe:e0:48:55:b5:d1:88:78:
65:e3:4f:46:08:61:42:56:90:18:71:ba:c5:53:9d:72:03:d2:
fd:8c:9f:4f:96:20:6c:2b:2d:ef:1e:8d:d2:b6:91:24:20:23:
e7:89:42:21:75:f7:b4:a1:a0:6a:df:42:d0:94:62:6b:f6:8f:
46:88:8d:80:14:73:0d:f2:a9:cc:ab:f3:e6:8c:15:b7:95:62:
1e:7a:71:11:62:40:58:fa:e0:91:6f:4b:e5:ff:55:1e:75:d2:
cd:2b:53:11:cd:f1:d1:3c:93:c4:a2:a5:79:92:64:7c:77:a9:
1c:99:b3:7a:38:48:ea:fc:bc:16:c0:85:9c:58:ac:3b:30:66:
b5:1c:f9:6d:36:19:a2:7a:73:74:e9:75:58:42:0a:1c:3d:33:
3c:da:9d:95:47:84:0a:a8:21:3d:e3:d8:1f:09:3c:84:9e:cb:
30:f8:e2:5d:2c:e1:0f:7b:af:e7:45:4b:1a:54:7a:fb:ae:d3:
91:1e:53:e0:0f:27:9c:b9:33:63:9b:a0:57:9e:10:4f:4f:ff:
89:31:0f:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:08:39 2025 by rpki-client