Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B8E4E9BBD786655635251BE1AB2B30115F865C40EEDFF12459E0636ED80936CD/0/3139302e3132342e3230382e302f32312d3231203d3e203238313039.roa
File: 3139302e3132342e3230382e302f32312d3231203d3e203238313039.roa (raw, json)
Hash identifier: V9KGxdXgMzCCs9vu1UWv87ULJG9PUQhAjoWJNdx8sHA=
Subject key identifier: D2:FE:BC:01:C6:46:4F:E0:7C:FD:38:29:19:7A:BF:FF:5C:CB:4B:60
Certificate issuer: /CN=F5FA228A2301CA3C33BD8830D58A40473348595F
Certificate serial: 1FFDD25566F0BDAF424C4D5ABADF81C83D115AAE
Authority key identifier: F5:FA:22:8A:23:01:CA:3C:33:BD:88:30:D5:8A:40:47:33:48:59:5F
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F5FA228A2301CA3C33BD8830D58A40473348595F.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/B8E4E9BBD786655635251BE1AB2B30115F865C40EEDFF12459E0636ED80936CD/0/3139302e3132342e3230382e302f32312d3231203d3e203238313039.roa
Signing time: Tue 04 Feb 2025 18:34:55 +0000
ROA not before: Tue 04 Feb 2025 18:29:55 +0000
ROA not after: Tue 03 Feb 2026 18:34:55 +0000
asID: 28109
IP address blocks: 190.124.208.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:fd:d2:55:66:f0:bd:af:42:4c:4d:5a:ba:df:81:c8:3d:11:5a:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F5FA228A2301CA3C33BD8830D58A40473348595F
Validity
Not Before: Feb 4 18:29:55 2025 GMT
Not After : Feb 3 18:34:55 2026 GMT
Subject: CN=D2FEBC01C6464FE07CFD3829197ABFFF5CCB4B60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:7e:c0:0f:a5:9a:18:21:3d:6f:a4:c1:4f:bd:
66:49:47:dd:2e:d5:67:a0:3c:1f:24:7d:fd:5f:bd:
da:45:19:be:2b:8b:b9:27:08:46:91:e5:1d:e7:bb:
8c:37:aa:b6:d1:06:6b:6b:bf:0d:8a:09:f6:16:fc:
07:ae:0b:3c:1f:21:01:27:9c:be:9d:6b:8e:0e:09:
c8:c9:59:42:e5:2e:7f:6d:5b:81:6c:c3:70:e8:ea:
6b:73:64:ee:37:4a:96:d1:c7:c6:38:7e:40:e1:1d:
61:dc:d0:8b:46:18:c9:52:07:00:0a:a4:ff:f3:47:
76:c5:f2:8b:07:c5:a8:f2:7a:56:a7:e6:16:fa:9b:
44:d7:ec:d4:2a:9a:62:c6:67:25:7c:fc:fe:de:a9:
74:d8:c3:6a:66:18:a0:1d:c8:1b:af:d4:fe:ad:1a:
59:87:8d:d1:a1:59:a6:df:2f:bf:3f:aa:93:cb:86:
bd:31:1a:2e:26:4d:c7:22:b8:df:07:4b:e8:e3:59:
2f:d5:97:84:f3:fc:79:df:a2:33:6c:92:4d:5c:df:
ae:42:1e:7b:bc:15:6c:23:d4:14:8f:ad:ad:2b:73:
e9:5e:68:3c:0f:c2:2f:fc:84:d8:f7:57:61:34:01:
a3:78:f6:5f:bb:9b:7c:59:27:eb:05:b5:cb:02:6f:
39:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:FE:BC:01:C6:46:4F:E0:7C:FD:38:29:19:7A:BF:FF:5C:CB:4B:60
X509v3 Authority Key Identifier:
keyid:F5:FA:22:8A:23:01:CA:3C:33:BD:88:30:D5:8A:40:47:33:48:59:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/B8E4E9BBD786655635251BE1AB2B30115F865C40EEDFF12459E0636ED80936CD/0/F5FA228A2301CA3C33BD8830D58A40473348595F.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F5FA228A2301CA3C33BD8830D58A40473348595F.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B8E4E9BBD786655635251BE1AB2B30115F865C40EEDFF12459E0636ED80936CD/0/3139302e3132342e3230382e302f32312d3231203d3e203238313039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.124.208.0/21
Signature Algorithm: sha256WithRSAEncryption
95:73:35:6a:2c:43:31:dd:f2:6c:00:ec:c3:06:a6:a0:86:38:
43:ea:8e:d9:70:1f:5e:d1:e5:f3:02:e7:ca:16:79:28:e3:8d:
e9:3e:c8:91:81:2b:d3:3f:4f:90:4b:5b:73:32:9c:27:40:4f:
c7:da:23:96:9d:45:55:7d:a2:6c:67:99:25:08:de:67:f8:5c:
89:69:a0:2b:29:5b:a6:8b:83:74:a8:d8:09:3d:c2:04:55:70:
dd:70:4c:16:e8:9d:c8:fa:de:73:07:f8:a2:44:00:17:ce:3c:
8a:5b:94:81:58:52:49:95:20:6f:4d:d8:a4:54:e5:1e:a2:99:
f6:5e:fd:5b:f7:a9:da:54:99:d6:6a:d8:51:ef:93:76:07:83:
53:19:0a:7e:ee:a1:f1:2c:a3:f2:fa:bd:4b:74:a2:93:71:c8:
66:77:1f:94:9b:86:f1:6c:25:c2:80:40:ea:e6:05:85:62:65:
2c:b7:5f:54:36:04:4b:a0:0f:96:54:e4:2b:8d:36:0e:ba:b7:
05:44:d9:c9:af:67:eb:bd:09:f9:87:2a:97:74:65:d1:10:c9:
9a:75:de:4e:66:a0:4f:14:7d:26:15:52:7f:a4:b6:bd:2d:55:
04:6e:d4:31:29:e2:bf:f0:8a:6b:e3:e4:b9:a3:dd:8e:e9:b7:
52:02:84:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:38:28 2025 by rpki-client