Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A63E44195B15618226F93AF42A2D6CB52A6E73BC1D027C964ECD92A0216FF6D7/0/3137302e3233382e3233362e302f32342d3234203d3e2033333536.roa
File: 3137302e3233382e3233362e302f32342d3234203d3e2033333536.roa (raw, json)
Hash identifier: buYGa4QtPlJEhQWhGzIgM1Jl7Tl/nmuQfHzHM7wjZPw=
Subject key identifier: EF:F5:40:5B:D3:73:CB:16:0E:86:22:35:CA:61:14:34:69:DD:65:AB
Certificate issuer: /CN=219FCBA9FFEA4717ABF6A9EF85B7C636D9D23BEA
Certificate serial: 02A008DD6B5802B3AC4855FE0144C993FF56A8E8
Authority key identifier: 21:9F:CB:A9:FF:EA:47:17:AB:F6:A9:EF:85:B7:C6:36:D9:D2:3B:EA
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/219FCBA9FFEA4717ABF6A9EF85B7C636D9D23BEA.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/A63E44195B15618226F93AF42A2D6CB52A6E73BC1D027C964ECD92A0216FF6D7/0/3137302e3233382e3233362e302f32342d3234203d3e2033333536.roa
Signing time: Tue 28 Jan 2025 12:55:00 +0000
ROA not before: Tue 28 Jan 2025 12:50:00 +0000
ROA not after: Tue 27 Jan 2026 12:55:00 +0000
asID: 3356
IP address blocks: 170.238.236.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:a0:08:dd:6b:58:02:b3:ac:48:55:fe:01:44:c9:93:ff:56:a8:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=219FCBA9FFEA4717ABF6A9EF85B7C636D9D23BEA
Validity
Not Before: Jan 28 12:50:00 2025 GMT
Not After : Jan 27 12:55:00 2026 GMT
Subject: CN=EFF5405BD373CB160E862235CA61143469DD65AB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:7a:7b:b8:85:55:5f:12:80:06:38:d4:ac:82:
00:84:2f:a6:01:f9:09:51:51:67:d0:e4:93:3e:83:
e4:e3:04:e5:2e:75:75:7a:f4:f8:2b:7f:f5:47:68:
b4:07:b4:8e:e6:24:99:fb:61:fc:47:7d:4c:57:9f:
1c:75:21:c7:49:c6:ad:2c:1d:57:cc:6c:8c:30:21:
ce:6f:4b:79:cb:1a:ef:aa:c2:e4:80:e7:e5:2d:4d:
70:56:ef:fd:91:ae:d8:0c:bc:f5:e5:73:4f:5b:12:
9a:48:7a:05:c0:42:a7:36:c3:ca:49:4e:5b:f7:7d:
75:eb:83:72:ed:c4:52:d5:03:69:d3:de:0b:d0:04:
d1:f0:94:b8:c9:4f:55:50:92:34:d1:40:af:63:fd:
73:47:f6:40:54:c1:4c:71:f9:f4:9e:95:61:9b:3c:
d6:9e:4a:8e:b3:e9:8c:10:75:09:b4:51:ab:1b:68:
61:a7:d5:f8:7b:6f:96:c1:69:ab:e6:f0:43:88:5d:
e7:c5:d0:42:aa:71:de:20:07:54:af:4e:c7:fa:fd:
2f:10:0e:af:03:ca:37:a3:94:15:8a:11:10:f5:10:
46:0f:8d:b2:bc:ff:d9:fa:83:ab:ab:4c:c0:5e:9f:
d0:a7:75:f4:7a:58:69:e6:d4:34:b7:21:42:03:a8:
18:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:F5:40:5B:D3:73:CB:16:0E:86:22:35:CA:61:14:34:69:DD:65:AB
X509v3 Authority Key Identifier:
keyid:21:9F:CB:A9:FF:EA:47:17:AB:F6:A9:EF:85:B7:C6:36:D9:D2:3B:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/A63E44195B15618226F93AF42A2D6CB52A6E73BC1D027C964ECD92A0216FF6D7/0/219FCBA9FFEA4717ABF6A9EF85B7C636D9D23BEA.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/219FCBA9FFEA4717ABF6A9EF85B7C636D9D23BEA.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A63E44195B15618226F93AF42A2D6CB52A6E73BC1D027C964ECD92A0216FF6D7/0/3137302e3233382e3233362e302f32342d3234203d3e2033333536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.238.236.0/24
Signature Algorithm: sha256WithRSAEncryption
39:1e:ef:98:27:96:ad:1b:5f:fb:64:ce:52:3f:5b:e0:89:9d:
83:b9:2d:f8:8f:27:f9:19:83:d1:db:7b:fb:7a:8b:bc:7d:01:
b3:59:e3:e3:89:d7:ff:e5:ee:34:a8:87:f5:24:28:67:f6:0a:
97:38:c8:31:13:ef:ee:c4:a3:71:01:2d:ad:35:9c:1d:3e:ec:
6f:c6:20:b4:6d:89:ac:ae:a0:2c:e3:cb:f8:a9:64:7a:c5:1b:
30:12:9d:f9:22:45:02:62:6a:3f:c7:b2:58:d8:d9:b0:56:5a:
a6:23:98:77:6d:67:28:a4:78:8d:2c:62:1c:be:53:66:5b:9c:
dd:03:e1:1b:eb:d6:da:52:78:bd:0f:89:e0:19:bd:31:28:1f:
41:da:aa:bd:16:7f:98:34:87:ea:0a:4c:c7:2a:ab:cb:0d:9d:
f1:46:9e:fe:15:47:e3:6d:75:99:7d:da:69:4e:b5:44:bb:fa:
7d:5e:b4:1f:13:12:5f:b4:0b:46:43:59:fe:7a:71:98:62:7a:
56:ce:8d:7a:9b:98:59:23:62:ab:7e:70:44:dd:43:e0:28:a5:
72:35:7f:03:31:68:95:b8:ac:7f:85:0d:89:cb:15:02:4c:41:
2c:bb:23:44:cc:4e:68:2a:87:42:e7:dd:f3:50:72:a7:d9:e1:
b8:af:17:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:00:14 2025 by rpki-client