Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A9411291F93B87F981ABBDA5AAE5703988FD63C53C0D85DF413F28F442DB0292/0/3138312e3233322e3135392e302f32342d3234203d3e20323732303632.roa
File: 3138312e3233322e3135392e302f32342d3234203d3e20323732303632.roa (raw, json)
Hash identifier: 5szg64y6z2sflDOSe8GGQsq/2xGrWLeBi38teXwFcJ8=
Subject key identifier: B0:01:B3:C4:4E:96:A0:98:84:FA:2C:5B:E2:DC:09:CA:DB:BE:76:86
Certificate issuer: /CN=E9A5288FFD963231D7A31DF358516C1DE9044850
Certificate serial: 03A2F7408668364DCCF25C2B8C25493BD8AD5445
Authority key identifier: E9:A5:28:8F:FD:96:32:31:D7:A3:1D:F3:58:51:6C:1D:E9:04:48:50
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E9A5288FFD963231D7A31DF358516C1DE9044850.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/A9411291F93B87F981ABBDA5AAE5703988FD63C53C0D85DF413F28F442DB0292/0/3138312e3233322e3135392e302f32342d3234203d3e20323732303632.roa
Signing time: Tue 04 Feb 2025 18:17:34 +0000
ROA not before: Tue 04 Feb 2025 18:12:34 +0000
ROA not after: Tue 03 Feb 2026 18:17:34 +0000
asID: 272062
IP address blocks: 181.232.159.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:a2:f7:40:86:68:36:4d:cc:f2:5c:2b:8c:25:49:3b:d8:ad:54:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E9A5288FFD963231D7A31DF358516C1DE9044850
Validity
Not Before: Feb 4 18:12:34 2025 GMT
Not After : Feb 3 18:17:34 2026 GMT
Subject: CN=B001B3C44E96A09884FA2C5BE2DC09CADBBE7686
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:bf:4f:45:64:bd:62:ba:57:47:85:bd:bb:5f:
4f:38:3a:51:84:33:ae:64:e6:27:c7:58:d1:c7:14:
23:b5:b1:00:a3:83:4a:b5:a7:99:da:8b:24:f3:27:
76:97:51:fe:22:c0:e9:cc:cb:14:6a:50:d6:21:dd:
e4:88:b1:41:7d:26:f5:cf:67:64:0b:d9:9d:f1:75:
25:bb:69:6a:0f:61:60:f3:a8:0d:52:66:72:f9:2b:
48:6d:80:e7:98:78:cc:ab:55:39:89:b1:f6:e5:dc:
0e:05:cf:7a:b4:cc:d5:3e:98:70:94:6d:01:51:33:
c6:4d:e9:8e:b8:ad:f8:e4:a9:71:1b:23:dc:df:b2:
e3:e9:42:a1:08:7a:5e:9c:55:29:97:0e:fb:b3:16:
80:b3:f8:35:ca:d0:1a:52:41:b7:75:24:b9:b9:cf:
e0:5a:7a:76:87:ae:1b:fe:98:6b:c5:92:31:76:d2:
9b:c2:33:db:c5:90:4d:bf:aa:63:88:4c:9e:9a:0f:
98:d8:74:f8:1e:92:da:10:f8:a5:49:5d:64:8c:73:
fb:bb:49:b6:38:5e:f1:e9:35:ea:a7:4c:0d:a5:81:
fd:34:5c:ca:16:e0:1e:31:56:2c:21:b1:1e:e5:5a:
0b:89:20:b7:c6:42:18:04:be:f8:53:5d:b3:55:5f:
3c:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:01:B3:C4:4E:96:A0:98:84:FA:2C:5B:E2:DC:09:CA:DB:BE:76:86
X509v3 Authority Key Identifier:
keyid:E9:A5:28:8F:FD:96:32:31:D7:A3:1D:F3:58:51:6C:1D:E9:04:48:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/A9411291F93B87F981ABBDA5AAE5703988FD63C53C0D85DF413F28F442DB0292/0/E9A5288FFD963231D7A31DF358516C1DE9044850.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E9A5288FFD963231D7A31DF358516C1DE9044850.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A9411291F93B87F981ABBDA5AAE5703988FD63C53C0D85DF413F28F442DB0292/0/3138312e3233322e3135392e302f32342d3234203d3e20323732303632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.232.159.0/24
Signature Algorithm: sha256WithRSAEncryption
93:12:2e:f7:42:75:66:b3:61:d0:3b:da:43:7d:b9:1a:9c:c6:
73:64:47:62:0b:b5:ee:06:2a:01:41:9c:5e:e3:f8:56:23:1a:
80:95:3d:58:3f:b2:55:b8:12:b6:09:9e:7d:5c:a3:c8:1f:5f:
3f:9b:d1:2f:b8:64:44:b2:b1:ae:78:38:6b:ed:26:49:c9:b6:
39:d0:25:fe:de:29:20:29:d4:c0:37:3d:75:19:e6:da:02:a0:
91:e6:ff:ab:78:9b:b7:f5:fd:4c:87:95:fc:c2:a2:c7:8a:7e:
9a:16:c2:31:47:c3:28:0e:ba:c1:ac:4e:0d:11:09:fc:a5:cf:
55:01:0e:4d:ed:6e:f8:b5:1d:09:ac:45:8a:46:94:a0:9c:df:
64:84:b2:65:b3:52:fa:84:2f:ef:16:f7:c2:dd:4e:04:6e:73:
01:f9:0c:8e:3d:e2:4d:22:cf:7f:d1:83:d6:1a:c5:01:07:ee:
b7:da:cb:60:cc:a7:a8:45:fd:88:09:3f:24:eb:96:19:06:75:
e8:7b:73:e4:21:db:d8:0d:c6:68:c4:14:ff:f8:0a:67:d6:4b:
dd:c2:68:ac:c3:fe:be:69:4b:16:53:51:3b:49:6b:0b:81:10:
49:5a:50:8a:12:d0:d3:3f:93:89:cc:be:fc:22:2d:85:1d:8c:
f9:fe:71:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:55:43 2025 by rpki-client