Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3230312e3231372e34372e302f32342d3234203d3e203237373638.roa
File: 3230312e3231372e34372e302f32342d3234203d3e203237373638.roa (raw, json)
Hash identifier: dZg2N/pUUkwC/0IQkOJe0nGsYH+n11kVaqNjH7o+/Lk=
Subject key identifier: BD:A8:28:40:A4:42:6B:F1:56:3C:5B:5F:AF:47:F9:EE:6B:4A:EF:05
Certificate issuer: /CN=EC2EAE5BF883D3DFD8B270D082FF89DD81090C53
Certificate serial: 535568F70AF748F6C58840C2ABA747B5B4940E63
Authority key identifier: EC:2E:AE:5B:F8:83:D3:DF:D8:B2:70:D0:82:FF:89:DD:81:09:0C:53
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3230312e3231372e34372e302f32342d3234203d3e203237373638.roa
Signing time: Sat 07 Dec 2024 23:50:00 +0000
ROA not before: Sat 07 Dec 2024 23:45:00 +0000
ROA not after: Sat 06 Dec 2025 23:50:00 +0000
asID: 27768
IP address blocks: 201.217.47.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:55:68:f7:0a:f7:48:f6:c5:88:40:c2:ab:a7:47:b5:b4:94:0e:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EC2EAE5BF883D3DFD8B270D082FF89DD81090C53
Validity
Not Before: Dec 7 23:45:00 2024 GMT
Not After : Dec 6 23:50:00 2025 GMT
Subject: CN=BDA82840A4426BF1563C5B5FAF47F9EE6B4AEF05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d1:f0:09:ea:af:48:e8:fd:ad:ef:5a:0a:c2:
64:4e:f7:1c:a4:05:57:4c:32:fe:c0:18:c0:72:34:
65:ee:fc:f7:76:4a:3c:eb:94:92:5b:6c:d6:6a:c1:
58:b4:1f:e0:c0:b6:cc:b6:98:b4:1b:51:54:35:32:
75:3f:30:68:9e:ee:71:71:d6:61:bb:0c:96:b0:f2:
1f:79:c8:37:d1:40:dc:a4:53:98:e2:8b:51:e9:27:
2a:3a:17:97:5c:bf:1d:0e:87:86:ee:49:23:d0:70:
70:fc:47:43:73:3c:0d:55:f3:6d:67:b6:39:67:cb:
34:af:31:ca:28:f6:36:d8:ac:c4:03:7f:8b:49:3c:
17:3e:08:b8:60:ae:3d:f9:49:95:bb:76:58:e3:45:
ad:c9:53:56:4d:21:2e:19:a6:31:f8:48:97:57:40:
0a:db:6c:f9:d9:c2:4e:48:97:4e:d9:41:67:6c:5f:
1f:d2:c8:ad:c7:ee:7c:76:58:13:e5:df:e2:5c:23:
8a:14:da:99:d7:0a:aa:53:10:cf:6c:ea:72:cb:10:
e8:97:f8:54:72:43:f5:a4:b0:35:e4:2e:0c:13:b6:
21:e2:1f:17:8e:58:b6:83:54:ee:46:3c:1c:0b:89:
93:e7:a6:ba:d4:1b:a3:d0:ae:cd:cc:10:a5:a8:09:
62:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:A8:28:40:A4:42:6B:F1:56:3C:5B:5F:AF:47:F9:EE:6B:4A:EF:05
X509v3 Authority Key Identifier:
keyid:EC:2E:AE:5B:F8:83:D3:DF:D8:B2:70:D0:82:FF:89:DD:81:09:0C:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3230312e3231372e34372e302f32342d3234203d3e203237373638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.217.47.0/24
Signature Algorithm: sha256WithRSAEncryption
93:fc:d2:42:74:58:e5:fc:be:47:7a:e0:7a:ae:98:cb:81:c8:
6f:ed:6f:02:56:2a:11:73:5a:ce:9c:f9:10:d2:35:06:95:11:
55:5f:c1:5e:d5:ca:9f:09:d2:1e:20:05:97:67:b8:1d:9a:4b:
ef:6e:c0:d0:48:d1:92:97:53:37:df:24:1a:0f:54:3b:ea:89:
aa:35:07:c6:a0:85:78:f5:dc:fe:b5:dc:bb:0f:04:ae:b2:2c:
c2:2b:da:a2:24:48:a1:91:ad:53:89:15:d4:39:2d:b1:95:49:
40:ca:ca:76:12:72:e3:29:18:d9:ed:b3:fb:d9:90:a3:e0:d1:
6a:4e:9d:29:da:a4:b6:4d:a8:a1:e0:5c:a6:58:03:38:51:3f:
b2:09:f5:d0:e5:5d:12:de:e0:55:b6:82:37:b9:d9:0a:2c:cd:
18:67:42:bf:c2:89:8f:93:52:6d:2a:e9:44:90:2d:89:bb:5a:
93:f6:0d:41:45:96:19:8b:06:22:a6:32:91:f4:8d:f7:72:fe:
89:f3:68:fb:b0:99:36:08:f9:8c:ca:c3:03:2e:54:0c:bd:b1:
ca:ca:03:cc:c9:3e:e1:96:c6:89:01:1c:32:0a:f2:d6:22:69:
60:57:04:2d:9a:f4:c9:4f:b6:b5:69:18:9d:e6:2d:56:9f:5c:
d4:45:5c:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:40:52 2025 by rpki-client