Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/3133382e3131372e3131312e302f32342d3234203d3e203138363738.roa
File: 3133382e3131372e3131312e302f32342d3234203d3e203138363738.roa (raw, json)
Hash identifier: Zy32nQXJtWX8aBelC8tEJhQc/L4TRdTlbC8En1VKY6Q=
Subject key identifier: ED:C1:7F:6F:99:3C:85:78:76:10:2B:40:01:4E:54:91:0C:AD:10:E9
Certificate issuer: /CN=B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C
Certificate serial: 456F029B34FCB5C3CD6CFE776C88041943BC6565
Authority key identifier: B5:ED:DA:57:DB:A2:5B:BD:40:52:D6:AE:0D:EC:F7:40:EA:27:B5:7C
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/3133382e3131372e3131312e302f32342d3234203d3e203138363738.roa
Signing time: Tue 04 Feb 2025 19:56:51 +0000
ROA not before: Tue 04 Feb 2025 19:51:51 +0000
ROA not after: Tue 03 Feb 2026 19:56:51 +0000
asID: 18678
IP address blocks: 138.117.111.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:6f:02:9b:34:fc:b5:c3:cd:6c:fe:77:6c:88:04:19:43:bc:65:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C
Validity
Not Before: Feb 4 19:51:51 2025 GMT
Not After : Feb 3 19:56:51 2026 GMT
Subject: CN=EDC17F6F993C857876102B40014E54910CAD10E9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:1c:ac:49:7a:e0:53:57:ea:9d:79:18:f9:52:
62:91:a9:6c:b4:7e:00:4b:dd:34:25:cd:82:68:9d:
69:26:6a:75:a8:c0:62:6a:04:f1:b8:4e:e6:98:35:
a3:1f:59:97:0a:27:6b:89:fc:52:ef:17:11:7d:65:
29:a3:4f:a0:2e:95:b4:81:fe:68:a3:65:e1:b6:25:
8b:7f:9e:ce:d5:fe:7b:b9:2e:57:9d:53:d0:7a:02:
ab:ad:c8:96:b0:81:ca:04:48:a8:4d:08:b1:ae:23:
d7:6a:dc:61:25:59:57:d6:f2:f5:6d:15:03:96:9e:
65:1c:f8:b6:fd:fd:07:5f:b0:a6:68:85:76:5e:a8:
92:39:03:2a:1a:c5:a8:5d:69:ba:d1:2c:bb:9c:b0:
48:e8:19:fa:b5:14:19:c3:c4:6e:13:40:30:18:b0:
d3:5d:ff:59:65:68:b2:be:0f:7c:a6:2f:b2:30:78:
42:b7:1e:9a:d6:9e:6f:7c:5f:6a:33:dd:04:58:9b:
76:70:4e:96:df:bd:4b:fe:a4:83:da:10:54:61:18:
fb:b8:be:49:38:0a:66:d0:ab:23:46:78:7b:2e:00:
b2:08:4d:2e:ce:31:6e:cf:a4:e8:ac:29:2c:c0:9b:
48:36:c4:7d:0c:54:4e:ac:71:fa:88:c1:82:02:81:
0a:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:C1:7F:6F:99:3C:85:78:76:10:2B:40:01:4E:54:91:0C:AD:10:E9
X509v3 Authority Key Identifier:
keyid:B5:ED:DA:57:DB:A2:5B:BD:40:52:D6:AE:0D:EC:F7:40:EA:27:B5:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/3133382e3131372e3131312e302f32342d3234203d3e203138363738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.117.111.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:57:4a:e0:cd:43:ac:71:21:0c:78:45:1f:a9:4b:e1:f6:cc:
31:09:9a:45:40:b1:2b:e9:45:90:82:5a:f2:48:db:dd:3a:f4:
a3:69:e4:5f:9b:cb:2d:00:d7:91:4b:67:fe:7e:db:fb:a4:fb:
4c:da:b3:98:4f:b1:1d:78:80:dd:71:59:98:c0:b7:f7:26:ec:
d8:59:90:67:6c:49:33:f4:80:50:fe:8a:9c:fc:4c:4e:07:ea:
ca:0a:4f:9a:a1:79:6a:87:94:69:3c:a8:96:75:f9:2d:ea:04:
86:e3:59:f1:d9:55:c2:f3:e7:71:81:6f:58:5c:8c:a5:25:93:
46:f6:c5:a2:f6:e7:72:d8:44:97:b9:56:ae:2e:e3:fa:b8:bb:
48:95:7a:fb:95:e9:05:36:2e:5c:63:32:48:ca:43:a3:e4:4d:
f5:10:75:aa:0e:30:43:6c:c0:43:79:43:b2:1c:9b:c3:8d:89:
5c:29:a1:e8:43:5f:3e:f8:d7:d6:b7:1f:e7:a0:42:11:42:fe:
a9:03:2d:ac:49:16:51:ac:0c:6c:d2:e5:44:13:e5:b0:6a:16:
d9:71:7e:54:c7:e3:c4:d7:9e:bc:5c:bf:31:f2:db:47:b7:c1:
6d:b1:d3:a3:36:b7:1e:4d:a7:c3:ba:ad:dd:35:57:9b:39:41:
75:8b:9f:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:23:04 2025 by rpki-client