Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B2CD1FB588CF2A3078667525D1AD957561CA57DCC94AA784C24CA84F089B85C3/0/3136382e3230352e36342e302f32322d3234203d3e203136393733.roa
File: 3136382e3230352e36342e302f32322d3234203d3e203136393733.roa (raw, json)
Hash identifier: lkk3RzeixBCLRoPlTxITJzh/LypLN2fBk1rVuXiW9uY=
Subject key identifier: 65:38:F5:32:9E:73:F1:B4:F4:B8:DE:A8:11:71:64:00:EB:D7:7D:8C
Certificate issuer: /CN=71B0CD08B5DCFED6F97BF866CB6497AE603655B3
Certificate serial: 43D39F0A060B33C793EC483817165DA5F969EC87
Authority key identifier: 71:B0:CD:08:B5:DC:FE:D6:F9:7B:F8:66:CB:64:97:AE:60:36:55:B3
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/71B0CD08B5DCFED6F97BF866CB6497AE603655B3.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/B2CD1FB588CF2A3078667525D1AD957561CA57DCC94AA784C24CA84F089B85C3/0/3136382e3230352e36342e302f32322d3234203d3e203136393733.roa
Signing time: Tue 04 Feb 2025 20:05:17 +0000
ROA not before: Tue 04 Feb 2025 20:00:17 +0000
ROA not after: Tue 03 Feb 2026 20:05:17 +0000
asID: 16973
IP address blocks: 168.205.64.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:d3:9f:0a:06:0b:33:c7:93:ec:48:38:17:16:5d:a5:f9:69:ec:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71B0CD08B5DCFED6F97BF866CB6497AE603655B3
Validity
Not Before: Feb 4 20:00:17 2025 GMT
Not After : Feb 3 20:05:17 2026 GMT
Subject: CN=6538F5329E73F1B4F4B8DEA811716400EBD77D8C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:20:99:ea:bb:66:6d:91:8d:7d:6f:03:55:1a:
86:20:5b:68:a5:e0:c6:a7:12:2c:47:55:24:89:6e:
ef:00:33:8a:b1:08:37:29:68:ce:f1:d1:14:97:bb:
11:92:33:3d:69:1c:55:1c:43:61:70:fe:c3:3d:c9:
95:cd:8f:8c:db:59:4b:e0:f5:f8:9d:ed:f0:9b:13:
a1:c7:34:c4:27:12:7e:70:76:8f:fb:69:24:a3:eb:
35:09:95:d5:69:d1:36:10:e6:49:10:63:64:83:c8:
79:e5:e1:44:fe:85:69:5f:40:9e:00:00:b5:e2:8a:
b0:d7:e6:6f:1f:d9:c4:50:7a:31:6f:15:f0:f1:df:
17:1a:73:55:7e:16:b4:51:41:c3:50:d2:aa:a1:b2:
05:3e:f2:7a:7d:c7:b6:ab:78:20:73:80:0c:83:0f:
8f:81:ad:1a:16:61:dc:30:c2:93:1c:cc:f1:ed:36:
ef:1d:fe:89:38:8a:00:fd:0e:4f:a5:24:10:e4:b1:
30:ce:b9:1b:c9:7f:10:e3:9b:98:2f:25:de:c1:c9:
d9:05:94:c5:fd:47:cd:d4:68:ba:6c:39:c0:3f:d6:
c8:98:29:0f:c3:3a:7d:51:b7:27:d8:d6:e4:73:d6:
38:60:28:f2:cc:33:5e:2f:06:c1:72:ca:cb:5c:a3:
66:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:38:F5:32:9E:73:F1:B4:F4:B8:DE:A8:11:71:64:00:EB:D7:7D:8C
X509v3 Authority Key Identifier:
keyid:71:B0:CD:08:B5:DC:FE:D6:F9:7B:F8:66:CB:64:97:AE:60:36:55:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/B2CD1FB588CF2A3078667525D1AD957561CA57DCC94AA784C24CA84F089B85C3/0/71B0CD08B5DCFED6F97BF866CB6497AE603655B3.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/71B0CD08B5DCFED6F97BF866CB6497AE603655B3.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B2CD1FB588CF2A3078667525D1AD957561CA57DCC94AA784C24CA84F089B85C3/0/3136382e3230352e36342e302f32322d3234203d3e203136393733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.205.64.0/22
Signature Algorithm: sha256WithRSAEncryption
b3:59:46:72:40:57:fd:1e:d9:b6:ad:f9:9b:0e:94:ce:2e:68:
00:15:26:76:dc:97:43:a2:39:31:c5:a1:1d:c4:10:9b:61:3c:
7e:eb:5a:1a:1a:11:6d:2e:5b:b9:d5:8a:33:93:e9:95:5e:a4:
a3:91:dd:58:6e:5a:32:2a:06:f1:dd:bc:d6:6f:fb:ff:3d:c2:
44:ee:96:73:13:16:47:24:2f:4d:d5:21:fb:8b:f6:7e:8c:0f:
ff:c5:39:38:13:f4:43:fb:0c:cf:95:58:5b:20:68:a7:25:61:
29:b6:ff:35:4d:89:74:55:9d:45:6b:44:97:fb:2a:79:f4:d6:
65:e2:99:b3:5c:18:41:69:a3:36:67:9f:ae:2a:82:d6:ee:38:
4b:f7:a2:c8:98:54:62:1a:2c:39:68:b7:2d:f5:3b:92:61:95:
8f:ac:66:16:e9:6f:9e:35:56:8c:2e:2d:6e:7f:cf:2f:8a:4c:
9a:a5:ec:54:c9:71:3f:c6:bf:e0:9f:cc:e0:d3:fb:bd:4e:5a:
00:f7:93:21:4d:38:b8:3f:94:48:cb:f9:83:18:4d:ec:80:ee:
6e:99:dd:a1:bb:39:24:fe:56:1a:90:6f:4e:ba:89:ed:3d:85:
fc:a4:fa:09:5b:06:8c:98:ab:ad:c0:f9:0d:ae:ee:7a:7f:fd:
a2:63:2e:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:59:07 2025 by rpki-client