Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/3139302e3132312e3132382e302f31392d3234203d3e203237393531.roa
File: 3139302e3132312e3132382e302f31392d3234203d3e203237393531.roa (raw, json)
Hash identifier: ejZUrRDFGzBkOAgTFZvA+/b5Q7RrUSDlCYPIf9DxkrI=
Subject key identifier: DF:51:36:03:91:DA:AD:2E:D5:29:AF:52:34:36:39:B2:74:DF:43:99
Certificate issuer: /CN=B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C
Certificate serial: 55FE8FD52DDC5C548FDA31CEC1E02463FD9FC4D3
Authority key identifier: B5:ED:DA:57:DB:A2:5B:BD:40:52:D6:AE:0D:EC:F7:40:EA:27:B5:7C
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/3139302e3132312e3132382e302f31392d3234203d3e203237393531.roa
Signing time: Tue 04 Feb 2025 19:57:02 +0000
ROA not before: Tue 04 Feb 2025 19:52:02 +0000
ROA not after: Tue 03 Feb 2026 19:57:02 +0000
asID: 27951
IP address blocks: 190.121.128.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:fe:8f:d5:2d:dc:5c:54:8f:da:31:ce:c1:e0:24:63:fd:9f:c4:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C
Validity
Not Before: Feb 4 19:52:02 2025 GMT
Not After : Feb 3 19:57:02 2026 GMT
Subject: CN=DF51360391DAAD2ED529AF52343639B274DF4399
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:8b:d3:99:39:67:47:99:70:c6:77:dd:0c:ce:
2a:00:2d:b6:73:1c:ba:68:e5:e7:32:bf:4b:97:c6:
36:86:b9:83:80:58:bb:57:35:2e:6d:b0:b8:53:14:
19:d8:78:c6:aa:2f:81:89:1c:8f:3d:da:67:08:9c:
9b:06:d2:eb:9a:c0:26:68:04:2e:0a:d8:29:93:cf:
85:87:2d:56:49:b7:fe:db:67:03:ca:03:1f:d4:70:
fd:ad:b7:77:45:94:68:38:e5:53:f5:b1:d1:ef:96:
80:03:33:be:1c:81:3b:40:3b:f2:a7:b3:db:03:4f:
33:24:c2:b1:cb:47:87:1d:f0:67:5e:17:a7:f1:f9:
89:cc:e9:ae:0e:b4:fc:c4:4c:cb:f9:c6:f6:04:5f:
91:9f:f5:6c:8f:43:8d:36:85:60:01:de:e3:88:52:
ff:22:8a:7c:15:36:b3:84:14:db:41:5e:bf:f2:4b:
a5:6e:54:d0:e4:40:92:22:1f:bb:3e:32:cc:46:5d:
d4:1b:d1:48:43:34:ba:aa:0a:4e:71:84:29:8f:70:
76:47:96:e4:fa:47:68:54:63:d2:b7:4e:fd:77:d0:
1b:e3:7f:f6:1c:89:ac:4c:5e:2a:31:b7:3d:be:2b:
9b:6a:0b:26:cc:c2:3f:44:af:48:c0:85:19:3d:8b:
fe:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:51:36:03:91:DA:AD:2E:D5:29:AF:52:34:36:39:B2:74:DF:43:99
X509v3 Authority Key Identifier:
keyid:B5:ED:DA:57:DB:A2:5B:BD:40:52:D6:AE:0D:EC:F7:40:EA:27:B5:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/3139302e3132312e3132382e302f31392d3234203d3e203237393531.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.121.128.0/19
Signature Algorithm: sha256WithRSAEncryption
03:ac:2a:bb:cd:02:09:12:7f:16:86:d0:9c:a4:1a:a0:64:3b:
5f:1a:bf:25:a7:62:c6:60:8a:93:40:26:70:a3:02:d1:a9:7c:
a3:87:c1:44:d2:79:73:11:9d:c0:cc:99:48:ec:aa:b5:de:9c:
68:fc:b9:49:cf:4b:9b:80:f4:7a:81:77:a8:5a:b5:5d:b9:1a:
44:fb:b7:94:e2:a5:00:3f:1d:8a:f0:53:f8:a6:91:62:ac:91:
85:46:55:17:91:8d:eb:14:2d:47:d2:e3:87:f4:83:02:20:9e:
c4:26:53:8a:db:59:3a:85:15:35:d2:87:df:06:a8:8d:87:c4:
0f:7e:aa:54:a4:1a:25:a9:1d:b7:6f:5b:44:d5:1c:4e:7d:81:
ee:54:b7:eb:2d:e2:ad:5b:0a:75:61:98:5a:1f:0a:ce:92:3d:
a4:03:5f:4b:d4:7d:ee:34:3a:98:2e:b5:c7:c1:29:a1:29:40:
06:6a:86:c6:e3:d3:34:45:8f:0c:4e:e3:bc:4f:e0:41:2d:18:
43:8c:6a:09:aa:5f:8e:78:e8:e1:e7:bd:df:8e:48:5a:63:17:
e8:f1:9e:ba:43:72:d1:15:88:38:89:37:f6:0a:45:6f:07:f3:
47:8f:c3:12:01:ed:b0:9b:3b:91:42:7a:a2:94:29:79:f6:3b:
2b:f4:09:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:10:41 2025 by rpki-client