Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BE67CD8C92B1DE114AB4D3B2151D828AB834D06E8A890C1E2548B6BC74F7A9A9/0/3137392e35312e3134332e302f32342d3234203d3e20323633373932.roa
File: 3137392e35312e3134332e302f32342d3234203d3e20323633373932.roa (raw, json)
Hash identifier: OiPmSGZXNRwNHNW3m9Yzw68PW3XwlP4uSSBBBAEe5A8=
Subject key identifier: C7:53:A9:8A:CD:4D:B3:BD:3D:B7:20:52:3B:4D:36:23:5E:E2:6E:44
Certificate issuer: /CN=3F3113B81AF3FD2448A47AEA0168935257B94663
Certificate serial: 2A0AE8A52B294A82DD8C7094E46A09F502D5B35B
Authority key identifier: 3F:31:13:B8:1A:F3:FD:24:48:A4:7A:EA:01:68:93:52:57:B9:46:63
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3F3113B81AF3FD2448A47AEA0168935257B94663.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/BE67CD8C92B1DE114AB4D3B2151D828AB834D06E8A890C1E2548B6BC74F7A9A9/0/3137392e35312e3134332e302f32342d3234203d3e20323633373932.roa
Signing time: Tue 18 Mar 2025 12:50:00 +0000
ROA not before: Tue 18 Mar 2025 12:45:00 +0000
ROA not after: Tue 17 Mar 2026 12:50:00 +0000
asID: 263792
IP address blocks: 179.51.143.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:0a:e8:a5:2b:29:4a:82:dd:8c:70:94:e4:6a:09:f5:02:d5:b3:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3F3113B81AF3FD2448A47AEA0168935257B94663
Validity
Not Before: Mar 18 12:45:00 2025 GMT
Not After : Mar 17 12:50:00 2026 GMT
Subject: CN=C753A98ACD4DB3BD3DB720523B4D36235EE26E44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:3d:61:d5:3c:ec:34:ed:79:cb:92:84:fa:c8:
88:c9:41:32:6b:4f:60:40:d3:49:58:07:fa:27:7d:
fe:ba:a0:f5:81:e0:a4:c2:a4:32:32:ac:66:57:29:
ce:59:55:bb:93:6f:b6:e2:d2:08:f7:88:20:5b:90:
16:c9:ff:a4:c3:d6:88:cf:9e:d7:c5:20:4a:a5:47:
84:1c:d9:68:11:8c:1d:fc:9b:4f:26:3a:19:ec:83:
03:d5:71:2f:6a:bb:71:60:9c:3d:00:ac:ad:0e:ce:
b4:c4:09:ac:8f:36:26:f6:47:4f:89:79:5a:d5:f8:
ec:37:fb:e7:fd:51:1d:61:84:c3:97:87:8c:a5:f3:
39:31:6a:1a:94:09:49:3c:06:54:73:f0:74:50:6d:
e6:d1:8a:45:4e:ac:6b:58:f1:36:a4:ea:4b:09:31:
51:2f:dd:1e:31:20:93:19:c2:71:a3:78:23:a3:5c:
f6:81:aa:81:fe:d9:15:88:19:35:a7:d8:a5:22:e5:
eb:f4:0e:12:d9:28:9b:bb:db:d5:e8:fb:0b:5e:e3:
e7:86:a9:8b:0b:f5:f3:e6:2d:fa:46:8b:3e:a0:2b:
08:02:db:d5:64:2a:21:f1:3b:3e:d3:2f:93:67:36:
12:48:5a:7b:fb:23:0f:62:80:d8:98:2c:bb:e9:b2:
23:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:53:A9:8A:CD:4D:B3:BD:3D:B7:20:52:3B:4D:36:23:5E:E2:6E:44
X509v3 Authority Key Identifier:
keyid:3F:31:13:B8:1A:F3:FD:24:48:A4:7A:EA:01:68:93:52:57:B9:46:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/BE67CD8C92B1DE114AB4D3B2151D828AB834D06E8A890C1E2548B6BC74F7A9A9/0/3F3113B81AF3FD2448A47AEA0168935257B94663.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3F3113B81AF3FD2448A47AEA0168935257B94663.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BE67CD8C92B1DE114AB4D3B2151D828AB834D06E8A890C1E2548B6BC74F7A9A9/0/3137392e35312e3134332e302f32342d3234203d3e20323633373932.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.51.143.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:4d:bb:38:31:6f:4d:d3:a5:2d:24:05:8b:ac:41:ec:86:7a:
03:be:a5:0b:b2:a4:8a:23:75:fa:d3:02:ec:c5:89:9b:f1:54:
1b:4c:8a:45:e1:ab:4e:90:b9:6e:ad:e3:64:12:ec:4c:e5:b1:
9a:0d:f7:81:f8:20:8f:af:bf:58:7e:26:9b:6c:b4:82:a5:2f:
90:a9:02:0c:97:e2:a2:d7:bc:cf:0c:3c:d4:88:d5:a9:aa:41:
d4:7b:fc:97:59:21:b6:d4:56:f0:75:70:b8:97:10:d7:58:0a:
99:2d:81:45:71:6d:a9:f0:95:cd:a2:ec:a3:9c:c1:b3:fd:92:
25:f8:06:a5:84:7c:7d:e0:fa:e5:64:fe:d8:9b:a1:ed:62:a2:
c5:65:96:a8:e6:60:39:39:43:94:9d:53:4e:bc:cf:b6:51:ac:
0c:6a:42:d9:9f:1c:73:17:e0:4e:61:bb:96:b5:13:7d:c3:59:
b3:b4:85:b0:25:0d:8a:27:ed:79:70:51:3a:ca:94:56:94:52:
17:72:71:d7:5a:c3:70:02:fc:da:ab:5b:ea:a3:48:0e:bd:db:
e5:f0:a9:69:d3:1d:77:16:da:3f:c8:f8:52:94:52:a6:19:1b:
00:c2:da:e1:9e:55:01:31:e8:9f:80:4e:10:49:57:40:37:df:
aa:70:24:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:08:57 2025 by rpki-client