Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B5DC9768EA0AACF46DC911E81D0D9D049927D24AACAF0685CB367D54CEE2BD95/0/3139312e39372e31372e302f32342d3234203d3e20323732383635.roa
File: 3139312e39372e31372e302f32342d3234203d3e20323732383635.roa (raw, json)
Hash identifier: frosHF4IVA9x8DBAO2E7cfeohpiJevtdfOPq1yLBIa8=
Subject key identifier: 5E:7D:FB:EF:06:53:30:1D:89:47:20:97:CC:56:A1:E5:BD:B8:38:64
Certificate issuer: /CN=CEFF58507AF1A06AEFDA67DD8D65125C364A4DEC
Certificate serial: 4BBE5C6F3BEFC7095B24504E5C75042EC5DEE018
Authority key identifier: CE:FF:58:50:7A:F1:A0:6A:EF:DA:67:DD:8D:65:12:5C:36:4A:4D:EC
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEFF58507AF1A06AEFDA67DD8D65125C364A4DEC.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/B5DC9768EA0AACF46DC911E81D0D9D049927D24AACAF0685CB367D54CEE2BD95/0/3139312e39372e31372e302f32342d3234203d3e20323732383635.roa
Signing time: Fri 20 Sep 2024 16:00:00 +0000
ROA not before: Fri 20 Sep 2024 15:55:00 +0000
ROA not after: Fri 19 Sep 2025 16:00:00 +0000
asID: 272865
IP address blocks: 191.97.17.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:be:5c:6f:3b:ef:c7:09:5b:24:50:4e:5c:75:04:2e:c5:de:e0:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CEFF58507AF1A06AEFDA67DD8D65125C364A4DEC
Validity
Not Before: Sep 20 15:55:00 2024 GMT
Not After : Sep 19 16:00:00 2025 GMT
Subject: CN=5E7DFBEF0653301D89472097CC56A1E5BDB83864
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:98:73:49:cd:d1:48:cc:2a:1a:a4:d1:89:a4:
f8:69:74:f0:17:19:3e:d1:ad:e0:3c:e9:5e:91:45:
0f:24:35:0f:92:f3:25:b5:28:35:ef:2b:cc:9b:f1:
a3:a4:c8:8a:e8:26:28:44:45:99:a9:46:c2:11:d9:
53:39:19:b7:bd:50:3f:56:35:d0:5b:83:3c:66:44:
a8:d2:f9:44:40:f9:f3:11:c4:85:e6:98:37:20:1b:
38:53:19:2a:f8:2d:fc:7b:e1:ce:46:a7:d3:2d:a7:
8c:6c:4b:10:31:5b:dc:01:76:ac:56:a4:e2:c5:bb:
8c:03:da:32:b8:92:03:d1:ed:06:74:e7:58:8f:03:
51:58:c8:71:25:57:dc:61:cd:c2:f0:c5:9c:27:1f:
85:09:04:19:6b:83:36:fe:09:1c:43:69:28:d2:e1:
60:2e:74:b6:63:9e:8e:88:55:bc:71:e2:23:83:bb:
4b:4d:75:6f:21:39:fc:89:ee:93:91:33:ba:e9:4f:
d3:6b:7c:7e:e1:c2:14:ee:20:2e:19:c1:3b:36:cb:
15:48:c7:39:92:4a:4a:e1:58:b4:b6:54:e7:85:0b:
af:a6:f1:26:d9:e5:69:08:00:7a:50:a7:39:91:8f:
f9:36:ec:bf:91:c7:34:aa:28:dc:77:c2:d2:74:fe:
b6:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:7D:FB:EF:06:53:30:1D:89:47:20:97:CC:56:A1:E5:BD:B8:38:64
X509v3 Authority Key Identifier:
keyid:CE:FF:58:50:7A:F1:A0:6A:EF:DA:67:DD:8D:65:12:5C:36:4A:4D:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/B5DC9768EA0AACF46DC911E81D0D9D049927D24AACAF0685CB367D54CEE2BD95/0/CEFF58507AF1A06AEFDA67DD8D65125C364A4DEC.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEFF58507AF1A06AEFDA67DD8D65125C364A4DEC.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B5DC9768EA0AACF46DC911E81D0D9D049927D24AACAF0685CB367D54CEE2BD95/0/3139312e39372e31372e302f32342d3234203d3e20323732383635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.97.17.0/24
Signature Algorithm: sha256WithRSAEncryption
58:5d:2d:5e:0a:29:82:fa:11:04:6c:87:bd:02:a1:83:2e:c0:
0e:71:dd:2a:f3:5a:10:d4:f0:8f:dd:18:f0:2a:f9:49:a1:ef:
b9:84:a0:d1:35:97:7a:4c:43:8b:ae:eb:27:d0:a4:66:c5:b2:
ac:bc:c3:16:3d:8c:3e:1d:93:0d:e4:e6:61:85:c5:d7:63:38:
e4:d3:1a:0d:17:4f:2c:1e:81:a9:b8:d4:e6:22:9f:8e:b0:84:
53:1e:7c:85:ff:0c:ff:af:d5:9a:ab:4f:52:ac:34:7a:8a:ac:
ea:3a:72:2a:08:7b:6d:fd:7a:85:5a:c2:ea:d2:bd:8e:e4:02:
dc:bc:50:a0:55:0c:66:6f:d5:1c:5e:79:5b:27:4f:cf:e7:54:
26:5b:09:19:ff:0a:05:53:32:64:93:75:37:3e:b9:97:cb:f5:
d6:af:04:1a:d3:ed:fa:17:a3:07:9d:44:c8:a4:49:83:7c:8a:
f6:3b:26:60:ad:e4:6b:75:78:6e:34:c4:55:3d:83:d3:4b:ed:
20:4c:81:d6:92:6d:4a:c4:c7:3a:48:c3:8d:3f:70:7a:1f:79:
91:30:2f:02:17:35:0b:4a:f7:fd:c0:70:4b:5c:51:f5:8f:2f:
c5:e7:c5:5a:85:0f:82:29:3b:1d:c0:d9:2e:26:b5:95:89:7c:
b1:cc:68:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 10:58:54 2025 by rpki-client