Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/3137392e36302e3230372e302f32342d3239203d3e203634313230.roa
File: 3137392e36302e3230372e302f32342d3239203d3e203634313230.roa (raw, json)
Hash identifier: 1k6Fk33c9RoI6CapGyiWQp/3dmYVP+RZ9DjGoEVPj2I=
Subject key identifier: 68:B9:78:1E:AF:65:67:9B:69:78:92:67:ED:9F:1E:C8:A1:B2:DC:E7
Certificate issuer: /CN=D6017AACFB785EAB7EA56D24337CDCD724EAC2AD
Certificate serial: 4AD1C5D1F23F0119DD278C6ACBF5AF6B1E8D86DA
Authority key identifier: D6:01:7A:AC:FB:78:5E:AB:7E:A5:6D:24:33:7C:DC:D7:24:EA:C2:AD
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/3137392e36302e3230372e302f32342d3239203d3e203634313230.roa
Signing time: Fri 21 Mar 2025 21:00:00 +0000
ROA not before: Fri 21 Mar 2025 20:55:00 +0000
ROA not after: Fri 20 Mar 2026 21:00:00 +0000
asID: 64120
IP address blocks: 179.60.207.0/24 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:d1:c5:d1:f2:3f:01:19:dd:27:8c:6a:cb:f5:af:6b:1e:8d:86:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D6017AACFB785EAB7EA56D24337CDCD724EAC2AD
Validity
Not Before: Mar 21 20:55:00 2025 GMT
Not After : Mar 20 21:00:00 2026 GMT
Subject: CN=68B9781EAF65679B69789267ED9F1EC8A1B2DCE7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:2c:53:a5:7f:8b:4d:1f:50:68:01:37:c1:a7:
97:67:ad:11:72:6c:b5:fc:d3:6f:ba:c3:5f:5c:26:
c1:6c:2c:bc:e1:71:ae:5f:15:63:a6:62:98:bd:9e:
17:1b:8e:22:bb:14:84:34:d1:b5:de:8d:30:73:e1:
3c:cc:0a:2c:2c:b6:74:67:51:64:00:13:51:52:1a:
27:29:e2:c6:d0:d0:24:16:cd:1a:31:a0:90:9e:8f:
89:a8:ff:ed:fe:6e:43:12:de:45:db:95:fe:e0:85:
df:ec:6d:45:0b:4d:b1:ce:1d:aa:f2:6a:28:3d:6b:
fa:0f:30:de:17:10:dc:32:e3:4c:74:90:fe:99:21:
f3:dc:1c:84:19:30:ac:29:8e:2b:2e:f1:c8:f7:77:
57:2a:5c:58:d2:e0:f6:8b:35:db:d0:f1:25:8b:8c:
c0:91:41:62:ff:5d:d5:30:2d:99:46:5a:57:4c:86:
80:ec:e4:7c:90:99:ea:0c:8b:04:6c:f4:3a:01:6f:
08:c1:76:f5:59:0d:1d:96:6b:b9:e4:1f:11:8a:dc:
ad:6d:e0:e9:ee:eb:eb:68:23:a1:6f:fd:07:cf:ab:
47:4b:e1:21:e9:35:85:63:48:13:b8:14:ce:99:2a:
86:f8:c7:77:a5:75:b0:17:dd:ee:0b:d2:a2:66:0d:
16:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:B9:78:1E:AF:65:67:9B:69:78:92:67:ED:9F:1E:C8:A1:B2:DC:E7
X509v3 Authority Key Identifier:
keyid:D6:01:7A:AC:FB:78:5E:AB:7E:A5:6D:24:33:7C:DC:D7:24:EA:C2:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/3137392e36302e3230372e302f32342d3239203d3e203634313230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.60.207.0/24
Signature Algorithm: sha256WithRSAEncryption
98:73:c7:a9:04:cf:69:c1:b4:51:42:d0:e8:80:98:fb:66:4c:
1d:52:5e:9f:d8:af:11:0e:c8:7c:14:97:54:48:ff:75:17:4d:
fa:44:59:88:f2:10:b7:e4:d3:42:64:bb:05:99:69:a0:99:71:
82:c6:ec:ec:0e:ed:17:e9:09:32:20:19:7f:f2:47:13:a7:95:
73:cd:33:ae:ce:8e:91:c8:26:81:70:14:35:21:11:bb:25:e8:
34:33:ec:18:4b:64:38:62:ea:bd:3c:10:8c:e7:f7:36:cb:7a:
a9:72:0b:51:b9:5c:97:61:d5:e8:07:98:44:58:6a:98:37:0e:
8d:fa:56:de:e7:6c:20:d8:f0:f4:34:b6:18:16:ff:6e:d4:f5:
88:31:59:bf:f6:b8:cc:26:88:15:6c:65:aa:27:01:51:b7:0f:
92:73:10:c2:a1:c9:d7:6c:8f:a7:16:04:6a:f9:e9:da:c9:6c:
0c:a0:1a:68:ea:8d:16:fc:3b:0e:53:b8:dc:62:f6:9c:9c:6c:
02:91:9c:23:7e:7d:f4:ae:39:26:2e:8e:06:cd:56:71:5c:9e:
f2:71:ac:c4:54:e0:23:4d:75:b5:5b:87:e5:f0:a6:1a:02:06:
ac:57:ee:fe:77:02:c2:92:84:6a:44:d2:f3:b4:d2:0f:2e:2e:
35:2a:90:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:14:07 2025 by rpki-client