Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B3D399C3B7762240D33C6D4F3F213A66E061ACAE278B44150DC24C978C00E0F8/0/3133322e3235352e372e302f32342d3234203d3e20323633373236.roa
File: 3133322e3235352e372e302f32342d3234203d3e20323633373236.roa (raw, json)
Hash identifier: 4enywTReuztkAZA8QfDVVO/DSjhDY+9zSMoXxSl8TDU=
Subject key identifier: 7F:36:EF:50:D5:9A:27:AD:C5:81:3C:0E:68:7C:E4:89:82:9C:A4:21
Certificate issuer: /CN=0D123AE8C9FDED46E5F7D3B48878851E1E8B7498
Certificate serial: 7BEC08AAE2AFEC79BA324E8C90E42AD1BE8FC670
Authority key identifier: 0D:12:3A:E8:C9:FD:ED:46:E5:F7:D3:B4:88:78:85:1E:1E:8B:74:98
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D123AE8C9FDED46E5F7D3B48878851E1E8B7498.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/B3D399C3B7762240D33C6D4F3F213A66E061ACAE278B44150DC24C978C00E0F8/0/3133322e3235352e372e302f32342d3234203d3e20323633373236.roa
Signing time: Tue 04 Feb 2025 18:12:43 +0000
ROA not before: Tue 04 Feb 2025 18:07:43 +0000
ROA not after: Tue 03 Feb 2026 18:12:43 +0000
asID: 263726
IP address blocks: 132.255.7.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:ec:08:aa:e2:af:ec:79:ba:32:4e:8c:90:e4:2a:d1:be:8f:c6:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0D123AE8C9FDED46E5F7D3B48878851E1E8B7498
Validity
Not Before: Feb 4 18:07:43 2025 GMT
Not After : Feb 3 18:12:43 2026 GMT
Subject: CN=7F36EF50D59A27ADC5813C0E687CE489829CA421
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:92:96:26:fd:34:3e:f1:25:81:61:47:5b:f3:
52:35:13:da:6c:f4:40:26:09:ff:e7:4e:7d:ac:d4:
e1:fa:30:c4:0a:13:7a:0b:ca:17:dc:f1:68:75:f7:
93:05:d9:49:85:64:38:9e:2a:77:08:91:01:48:fa:
31:1c:db:2e:bb:5b:89:a4:5a:97:a3:5e:94:19:f2:
52:46:b9:64:79:1d:28:d2:d5:1a:bb:a2:ad:72:d4:
9b:c9:84:e9:d0:f4:e4:6f:27:04:7a:d7:71:c3:3b:
5a:ac:45:ba:d8:15:2b:e1:c5:24:7f:83:a7:ff:18:
9d:f3:9b:c4:47:23:a8:ba:29:5c:6b:8f:34:0c:21:
ef:83:78:cd:54:a6:ac:d0:fb:83:52:f7:c7:d8:96:
50:97:15:05:2c:82:31:90:75:05:a4:69:a0:1a:14:
b7:7a:fd:05:4d:fc:20:db:bf:6a:cd:9b:e0:1f:fa:
49:46:ae:a5:b5:be:ac:07:51:99:34:1e:73:10:59:
ae:8e:52:e8:46:fc:b0:ef:8d:cf:75:e4:ce:60:6b:
73:59:e9:f7:2e:50:eb:f5:2b:c6:b4:97:88:69:18:
fc:c4:d7:b9:c3:ce:41:20:99:ce:e3:b8:d7:65:b1:
6a:12:83:d5:7c:ea:d3:2c:be:02:94:2c:e5:e3:8e:
cf:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:36:EF:50:D5:9A:27:AD:C5:81:3C:0E:68:7C:E4:89:82:9C:A4:21
X509v3 Authority Key Identifier:
keyid:0D:12:3A:E8:C9:FD:ED:46:E5:F7:D3:B4:88:78:85:1E:1E:8B:74:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/B3D399C3B7762240D33C6D4F3F213A66E061ACAE278B44150DC24C978C00E0F8/0/0D123AE8C9FDED46E5F7D3B48878851E1E8B7498.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D123AE8C9FDED46E5F7D3B48878851E1E8B7498.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B3D399C3B7762240D33C6D4F3F213A66E061ACAE278B44150DC24C978C00E0F8/0/3133322e3235352e372e302f32342d3234203d3e20323633373236.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
132.255.7.0/24
Signature Algorithm: sha256WithRSAEncryption
60:a7:b8:e1:05:6a:6d:f8:39:15:cb:21:60:f0:49:a6:6c:1e:
39:ab:2a:2b:a8:ce:ce:01:39:c3:53:1c:40:36:e6:16:97:89:
e1:89:ec:ee:6b:af:5c:eb:a8:0a:b0:61:1c:c7:66:68:f0:a9:
8d:44:32:01:d9:7f:0b:8c:b9:08:2c:7f:22:ae:9b:18:de:2c:
b8:4b:ea:ab:2d:c2:20:09:f8:cb:4f:5c:43:a8:27:4f:74:22:
a0:9c:fb:9d:ac:f8:be:c7:87:8e:01:73:1e:ff:57:d3:e3:b3:
1a:21:6b:b6:c9:29:5c:ab:5d:69:bc:1b:9c:b5:b2:46:8a:78:
50:e1:52:2b:d7:0d:49:1b:85:77:b2:b7:81:80:2a:85:7c:7c:
11:91:64:ad:e5:7c:2a:4d:d4:38:4f:b8:23:b6:b5:0d:0a:6a:
8b:bf:30:b8:8d:02:48:60:f3:38:8e:35:e2:83:dc:fb:d0:ba:
00:b7:44:12:5d:39:b0:6e:bd:a6:74:1a:bd:38:b5:37:48:00:
5c:7b:ea:1e:5b:db:64:2f:89:8e:a2:0f:c8:82:b7:da:fc:7d:
02:83:83:c0:ca:47:fe:b9:3f:94:f5:38:02:6a:19:a4:82:ad:
4e:b4:24:24:b4:c5:65:ac:64:82:c6:21:81:df:e8:1a:c8:b4:
a6:d3:f9:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:08:50 2025 by rpki-client