Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A58DA6E62734E07F018689F32D2D4CE252954337DC0B5AF3D67D61E65B2CC282/0/3139322e3233312e3131362e302f32342d3234203d3e20323731373735.roa
File: 3139322e3233312e3131362e302f32342d3234203d3e20323731373735.roa (raw, json)
Hash identifier: T0CHNMR1WNvoa1+pwrZJCm03toHz095+5UyA+tnMfeY=
Subject key identifier: 85:07:68:75:F2:E8:A6:46:9B:01:A9:33:40:1B:79:2C:B1:CE:62:87
Certificate issuer: /CN=22BA0A0AE3424D55CA0DE50C3A959CC228F7B902
Certificate serial: 4D71FE7EB2DE6E3640D5E5187076678F22D76667
Authority key identifier: 22:BA:0A:0A:E3:42:4D:55:CA:0D:E5:0C:3A:95:9C:C2:28:F7:B9:02
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/22BA0A0AE3424D55CA0DE50C3A959CC228F7B902.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/A58DA6E62734E07F018689F32D2D4CE252954337DC0B5AF3D67D61E65B2CC282/0/3139322e3233312e3131362e302f32342d3234203d3e20323731373735.roa
Signing time: Tue 04 Feb 2025 18:27:18 +0000
ROA not before: Tue 04 Feb 2025 18:22:18 +0000
ROA not after: Tue 03 Feb 2026 18:27:18 +0000
asID: 271775
IP address blocks: 192.231.116.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:71:fe:7e:b2:de:6e:36:40:d5:e5:18:70:76:67:8f:22:d7:66:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22BA0A0AE3424D55CA0DE50C3A959CC228F7B902
Validity
Not Before: Feb 4 18:22:18 2025 GMT
Not After : Feb 3 18:27:18 2026 GMT
Subject: CN=85076875F2E8A6469B01A933401B792CB1CE6287
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:89:79:af:3e:6a:c6:41:9b:6c:84:cd:a6:43:
87:08:83:39:15:11:28:b4:dc:c2:49:09:e1:c8:d7:
e8:79:89:7a:fe:56:3c:b0:91:10:87:6a:12:2f:2e:
c8:c7:24:39:28:12:df:91:00:6d:27:01:47:ac:af:
82:b2:9c:2f:8f:c6:4b:9f:94:be:e8:83:9e:d6:2c:
07:1e:e1:e3:75:3d:8e:73:dc:0b:a0:e0:07:2c:cc:
e5:c3:7c:b0:fd:7a:4f:00:ba:d7:22:80:40:9c:58:
ae:c1:ca:c9:48:2e:df:c7:ab:30:35:86:c1:36:bb:
8a:ba:7a:db:16:78:8f:e7:70:38:54:8b:6e:13:47:
d4:66:f9:a6:c6:79:18:de:a2:29:0e:7e:81:14:2b:
3a:83:62:f2:0d:fd:6c:e2:03:c1:8d:14:64:2e:64:
59:56:af:41:52:2a:63:09:1d:69:22:ce:a2:f9:9a:
4c:69:31:d9:7b:65:fd:41:e8:73:21:3c:2d:2d:61:
4e:56:c1:46:26:b4:85:fe:2d:9e:97:30:05:c2:45:
19:a0:67:77:90:33:c2:3d:12:83:fe:16:a5:b2:a9:
17:48:36:a1:10:65:62:4c:af:61:99:5b:52:bc:a3:
f8:33:f3:91:5a:ff:d3:f7:38:22:b8:cb:bd:e1:84:
df:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:07:68:75:F2:E8:A6:46:9B:01:A9:33:40:1B:79:2C:B1:CE:62:87
X509v3 Authority Key Identifier:
keyid:22:BA:0A:0A:E3:42:4D:55:CA:0D:E5:0C:3A:95:9C:C2:28:F7:B9:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/A58DA6E62734E07F018689F32D2D4CE252954337DC0B5AF3D67D61E65B2CC282/0/22BA0A0AE3424D55CA0DE50C3A959CC228F7B902.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/22BA0A0AE3424D55CA0DE50C3A959CC228F7B902.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A58DA6E62734E07F018689F32D2D4CE252954337DC0B5AF3D67D61E65B2CC282/0/3139322e3233312e3131362e302f32342d3234203d3e20323731373735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.231.116.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:e0:05:f3:13:91:9f:3b:3d:8e:80:84:fa:b6:01:64:c7:f1:
96:bc:e7:ba:b8:3b:8e:af:74:77:ba:00:9d:46:12:7a:93:c5:
10:41:cb:5e:d2:1d:24:1e:f3:e3:09:02:80:b1:d9:1a:29:2c:
9f:87:2c:3e:80:ba:39:1c:3e:52:51:25:38:b3:ce:79:6d:5f:
38:aa:a4:be:25:cc:c0:e4:4b:d2:00:be:0b:c9:3c:de:0f:79:
bb:2b:f4:a5:66:85:29:a0:d6:b3:5d:5e:08:0c:e5:33:f2:34:
a8:f9:ad:77:eb:31:af:60:56:1b:51:b0:2f:22:e6:19:70:28:
d0:3b:4d:11:b2:55:3e:d8:72:89:98:33:6c:55:cc:99:88:a4:
d7:08:4b:7a:e2:9d:83:a1:93:8d:6c:ba:d2:9d:41:d4:f0:9f:
29:00:16:8d:6b:a4:46:b4:58:5b:41:3a:bd:12:d1:62:0e:d1:
cd:39:52:5f:7f:f2:a1:da:e7:8f:d3:cf:bc:76:7f:54:ad:39:
e6:43:65:25:07:6f:c1:ce:4c:ae:81:f2:21:46:0d:19:93:64:
e2:fe:5f:ab:c5:aa:d5:a4:e1:75:ee:13:25:19:71:04:52:55:
eb:32:d8:d0:5c:90:62:b6:0e:39:fe:5e:7b:64:8f:d8:4a:27:
5d:8a:ba:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 15:33:42 2025 by rpki-client