Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/3133382e3131372e3130382e302f32322d3234203d3e203237393531.roa
File: 3133382e3131372e3130382e302f32322d3234203d3e203237393531.roa (raw, json)
Hash identifier: OwMXimZtM3KmIlPpob7X15hSrIr8igSMYxHklvWtAHE=
Subject key identifier: 09:21:88:A9:61:F7:F7:55:CF:A7:D5:96:4E:AB:C3:42:D3:88:44:D5
Certificate issuer: /CN=B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C
Certificate serial: 3AF5C243510175051A68D67785384810715E2CFA
Authority key identifier: B5:ED:DA:57:DB:A2:5B:BD:40:52:D6:AE:0D:EC:F7:40:EA:27:B5:7C
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/3133382e3131372e3130382e302f32322d3234203d3e203237393531.roa
Signing time: Tue 04 Feb 2025 19:56:57 +0000
ROA not before: Tue 04 Feb 2025 19:51:57 +0000
ROA not after: Tue 03 Feb 2026 19:56:57 +0000
asID: 27951
IP address blocks: 138.117.108.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:f5:c2:43:51:01:75:05:1a:68:d6:77:85:38:48:10:71:5e:2c:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C
Validity
Not Before: Feb 4 19:51:57 2025 GMT
Not After : Feb 3 19:56:57 2026 GMT
Subject: CN=092188A961F7F755CFA7D5964EABC342D38844D5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ed:82:da:ad:d3:fe:9e:55:6f:a4:58:ed:e5:
90:c3:d3:60:d2:d2:f8:24:11:97:d4:7b:3c:a6:31:
e6:6b:23:3f:ae:73:83:9b:fe:2b:ff:fb:f2:5a:bb:
15:3a:45:05:ed:4c:02:f0:97:e5:5b:25:a3:9b:ba:
ee:ea:8a:16:37:c1:cd:e4:2e:c0:fd:0b:a9:5b:56:
f1:e0:7e:c8:e9:d4:9e:3f:33:6d:22:0c:c4:f1:75:
bd:0b:97:16:46:70:fa:48:63:b4:60:0e:8e:78:47:
56:27:21:89:bc:ec:c9:2e:b5:31:2d:15:df:62:c8:
bb:13:a4:2e:ca:7b:90:24:99:45:a0:dd:de:34:4a:
81:ae:f4:ec:5c:e2:68:a4:09:62:60:82:d4:44:ac:
ed:60:72:8d:4f:32:66:ba:ce:4a:f6:ba:a4:a4:48:
41:57:bb:f9:59:26:24:94:23:b9:81:0a:9e:50:aa:
66:74:75:bf:e0:67:b7:63:bf:ed:db:6c:5b:4b:0f:
a3:f7:8f:e8:e7:6c:ed:02:28:f8:77:2e:7b:c9:e8:
4d:6b:7c:3c:06:02:c6:da:6d:6e:ea:f3:34:15:6b:
e3:5b:92:0e:d2:d1:4c:f9:4c:aa:88:3b:07:f0:cd:
70:33:65:f9:36:ca:cb:9c:b7:4d:b3:21:f5:4f:62:
ec:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:21:88:A9:61:F7:F7:55:CF:A7:D5:96:4E:AB:C3:42:D3:88:44:D5
X509v3 Authority Key Identifier:
keyid:B5:ED:DA:57:DB:A2:5B:BD:40:52:D6:AE:0D:EC:F7:40:EA:27:B5:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/3133382e3131372e3130382e302f32322d3234203d3e203237393531.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.117.108.0/22
Signature Algorithm: sha256WithRSAEncryption
45:5e:5c:fa:cd:b1:60:8b:7a:63:c4:76:ac:66:7e:90:71:12:
d5:54:33:c6:62:7c:85:d4:3f:3a:df:8c:2f:da:c5:fb:7e:8f:
b6:25:74:f9:1d:a2:3b:cb:ad:fb:5c:27:4b:b1:2c:33:31:43:
a8:5b:ac:5a:b8:80:5d:b9:1e:ab:e4:83:ec:99:6b:22:98:e7:
3a:c2:3e:29:3f:50:a4:af:cd:e1:2f:76:de:2b:92:e8:30:88:
d4:df:11:9b:78:01:28:0d:1b:90:83:3a:45:23:3c:8c:01:2e:
e3:9b:f1:16:71:3d:9d:9a:12:50:69:ae:4e:70:7a:c0:ee:42:
b1:5a:19:0c:6b:1c:93:a7:26:b7:ee:b0:c8:44:65:13:5d:aa:
b2:db:2a:1f:9f:95:ac:93:b8:86:17:ee:3d:68:7c:a7:e9:4e:
4a:b0:48:95:71:ea:ce:43:e1:70:5b:13:fd:b3:a6:d7:7a:cf:
7c:7f:23:9e:44:a7:19:71:11:4c:89:f0:4f:f3:b6:a3:f9:0b:
8c:5a:18:48:94:32:a4:5d:fe:05:eb:9e:c4:c4:fc:c2:91:54:
b5:bb:f3:4b:8f:a3:0d:b7:33:a6:6b:29:d0:5e:8f:44:9d:74:
52:6a:dc:f2:43:ae:b2:fa:0c:09:5b:10:a5:ea:fb:8d:ea:8c:
bf:1d:48:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:36:57 2025 by rpki-client