Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A1FE18A2ACA3C71B9F1F6B9F1BBF5A38543A527FA6C747533CECF11E64E0D6B3/0/3136312e302e3139322e302f31392d3139203d3e203230323939.roa
File: 3136312e302e3139322e302f31392d3139203d3e203230323939.roa (raw, json)
Hash identifier: VpLpiZif8GkuxMLzyNJwbRToX7qXt1oDFEKIwgdfwbU=
Subject key identifier: BA:E6:5A:C8:0B:CC:42:83:FF:90:FD:EE:07:55:17:E1:D7:89:16:81
Certificate issuer: /CN=E5E5088F6D810D9F305D23A4C593A5E8F30F529F
Certificate serial: 4D70B5AF49B8D95CA24935A0DEA19947920ABA00
Authority key identifier: E5:E5:08:8F:6D:81:0D:9F:30:5D:23:A4:C5:93:A5:E8:F3:0F:52:9F
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5E5088F6D810D9F305D23A4C593A5E8F30F529F.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/A1FE18A2ACA3C71B9F1F6B9F1BBF5A38543A527FA6C747533CECF11E64E0D6B3/0/3136312e302e3139322e302f31392d3139203d3e203230323939.roa
Signing time: Tue 04 Feb 2025 18:48:56 +0000
ROA not before: Tue 04 Feb 2025 18:43:56 +0000
ROA not after: Tue 03 Feb 2026 18:48:56 +0000
asID: 20299
IP address blocks: 161.0.192.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:70:b5:af:49:b8:d9:5c:a2:49:35:a0:de:a1:99:47:92:0a:ba:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E5E5088F6D810D9F305D23A4C593A5E8F30F529F
Validity
Not Before: Feb 4 18:43:56 2025 GMT
Not After : Feb 3 18:48:56 2026 GMT
Subject: CN=BAE65AC80BCC4283FF90FDEE075517E1D7891681
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:41:6b:ff:60:20:5e:8e:a8:b8:3b:d7:78:59:
a7:3f:c5:05:74:a5:e3:28:5b:67:cf:3a:f4:c4:0b:
da:66:35:2a:35:19:f1:ac:98:39:57:8f:98:df:68:
64:47:06:3c:01:df:6b:8d:57:b3:6a:71:32:0a:84:
83:63:bc:c5:1b:22:50:41:52:18:40:5d:42:9b:dc:
32:80:c6:7e:5c:2c:34:cf:26:25:44:ec:96:9f:14:
ab:bf:61:cf:5b:9f:91:36:a9:bf:cf:b4:66:6b:30:
e2:96:02:28:8d:0a:10:b1:e0:6d:a0:0b:4f:30:0f:
48:33:9a:66:7e:97:f9:e4:39:17:42:6b:70:4d:e6:
f4:4e:4a:e3:11:a2:1a:62:88:28:e7:b0:3b:3c:05:
af:04:80:c0:c7:a0:76:8a:fc:77:55:af:b3:df:55:
fc:54:a3:b2:e5:ce:7a:7e:85:57:8b:8a:00:97:e1:
ae:55:95:9b:19:88:41:67:d1:f6:10:91:9f:95:17:
8f:01:70:d9:d8:7b:4a:45:f2:af:aa:52:64:57:3b:
f5:46:63:d9:03:6c:74:c5:fd:fa:22:55:a7:67:e2:
50:b8:a8:c0:29:c9:10:f0:5f:70:2c:47:7e:67:46:
6e:24:5a:2f:f8:ba:39:f1:a8:65:77:ef:32:0f:95:
13:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:E6:5A:C8:0B:CC:42:83:FF:90:FD:EE:07:55:17:E1:D7:89:16:81
X509v3 Authority Key Identifier:
keyid:E5:E5:08:8F:6D:81:0D:9F:30:5D:23:A4:C5:93:A5:E8:F3:0F:52:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/A1FE18A2ACA3C71B9F1F6B9F1BBF5A38543A527FA6C747533CECF11E64E0D6B3/0/E5E5088F6D810D9F305D23A4C593A5E8F30F529F.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5E5088F6D810D9F305D23A4C593A5E8F30F529F.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A1FE18A2ACA3C71B9F1F6B9F1BBF5A38543A527FA6C747533CECF11E64E0D6B3/0/3136312e302e3139322e302f31392d3139203d3e203230323939.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
161.0.192.0/19
Signature Algorithm: sha256WithRSAEncryption
27:ea:a6:9b:a2:13:af:58:be:d7:85:71:85:42:99:ce:77:98:
bf:53:6c:f1:90:b0:b9:d6:66:e0:09:61:7e:a7:20:d2:c8:02:
87:47:04:7d:b7:44:7e:d3:9a:fb:f3:47:ca:2c:5c:62:58:ed:
a7:28:06:f2:a9:3a:dd:d0:38:a7:fc:9e:f6:ef:64:89:1c:6d:
3e:37:27:24:9f:ce:a1:d6:15:87:b3:17:68:05:01:68:ef:11:
06:4a:fe:6c:d1:22:60:d9:cd:36:c2:84:b6:fe:45:73:91:39:
3b:d2:8e:49:9d:50:5f:f5:75:b5:f6:e7:34:e6:3f:1f:d2:4b:
28:88:1a:51:40:52:14:89:f5:ab:42:1e:08:71:48:b3:c6:d7:
68:5f:9f:ea:b2:47:f2:1e:f3:d1:d2:ad:9d:c4:30:61:36:70:
6c:bd:02:b8:c7:50:b0:a6:a8:fb:b7:b2:59:a0:bb:11:04:74:
61:f7:33:dd:6b:4e:0d:c2:38:07:78:2f:77:26:90:ed:2b:f1:
0d:4a:f5:8a:73:a2:f8:89:b8:c2:eb:9d:ed:94:51:20:bb:db:
2b:50:41:6a:23:23:63:d0:12:6a:b1:94:75:c0:f2:fa:11:4b:
d4:e7:55:50:00:23:fd:1a:07:65:04:1c:28:61:5c:f8:06:da:
11:1c:d0:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 16:40:13 2025 by rpki-client