Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C10F84743706253A9E919BFC714C4D6DDC4E73D5DD27CD55DA27ADCDB862A15C/0/3133382e3131372e38362e302f32342d3234203d3e20323635363838.roa
File: 3133382e3131372e38362e302f32342d3234203d3e20323635363838.roa (raw, json)
Hash identifier: Bkd3d4h/02FUoHhyMJmKv5y73yI099AKcPn4iJogG6k=
Subject key identifier: A5:D6:4D:60:73:B4:E7:7A:6F:CA:90:4B:5E:20:F5:8A:10:FA:4F:DA
Certificate issuer: /CN=EBDDE091CD51F6714942A5267FBC4B80AFB4E022
Certificate serial: 43ACD7973524E58195ED8814ED25BBD5CA64CB24
Authority key identifier: EB:DD:E0:91:CD:51:F6:71:49:42:A5:26:7F:BC:4B:80:AF:B4:E0:22
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EBDDE091CD51F6714942A5267FBC4B80AFB4E022.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/C10F84743706253A9E919BFC714C4D6DDC4E73D5DD27CD55DA27ADCDB862A15C/0/3133382e3131372e38362e302f32342d3234203d3e20323635363838.roa
Signing time: Fri 07 Mar 2025 16:11:26 +0000
ROA not before: Fri 07 Mar 2025 16:06:26 +0000
ROA not after: Fri 06 Mar 2026 16:11:26 +0000
asID: 265688
IP address blocks: 138.117.86.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:ac:d7:97:35:24:e5:81:95:ed:88:14:ed:25:bb:d5:ca:64:cb:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EBDDE091CD51F6714942A5267FBC4B80AFB4E022
Validity
Not Before: Mar 7 16:06:26 2025 GMT
Not After : Mar 6 16:11:26 2026 GMT
Subject: CN=A5D64D6073B4E77A6FCA904B5E20F58A10FA4FDA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:57:cc:39:12:e1:7a:3a:fb:26:9e:63:ac:ab:
16:d2:2a:b0:7c:e6:a2:0b:98:04:d3:e9:76:68:fc:
9d:46:b3:1d:fc:72:a0:ca:3c:29:95:ac:c1:75:8c:
14:6b:f4:bd:3e:00:a3:84:7c:ce:e8:70:f4:1a:0a:
4f:e0:bb:c6:25:22:91:53:19:b2:89:15:b5:d2:ee:
ae:ac:9d:45:14:93:f4:64:dd:33:8f:c7:a3:59:84:
36:23:14:be:da:3c:9e:f4:53:c5:b4:9d:8a:91:5f:
5a:d0:fd:a8:05:4c:7d:71:c4:d3:db:bb:ea:08:59:
02:f4:45:cc:4a:21:39:4f:c7:d7:8b:a3:51:c5:ee:
00:26:c7:6f:fa:a0:02:d0:22:06:4f:57:8d:6b:a5:
a0:d6:81:75:f5:13:34:a5:9d:91:ce:63:35:0a:91:
6c:7a:1c:26:0d:f2:ee:ac:e4:c7:90:03:52:d0:b0:
38:a2:cd:66:53:ae:35:05:8b:02:46:47:33:28:00:
9e:47:28:32:c6:3d:cb:fc:71:88:e1:95:af:79:d3:
bd:4c:24:0b:71:af:8c:41:fb:6c:2c:98:b9:74:13:
59:6b:bc:73:f9:39:cd:b3:84:93:56:f5:8c:20:c2:
94:48:cc:a2:9a:7b:ca:27:7e:27:4c:3c:eb:42:a2:
11:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:D6:4D:60:73:B4:E7:7A:6F:CA:90:4B:5E:20:F5:8A:10:FA:4F:DA
X509v3 Authority Key Identifier:
keyid:EB:DD:E0:91:CD:51:F6:71:49:42:A5:26:7F:BC:4B:80:AF:B4:E0:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/C10F84743706253A9E919BFC714C4D6DDC4E73D5DD27CD55DA27ADCDB862A15C/0/EBDDE091CD51F6714942A5267FBC4B80AFB4E022.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EBDDE091CD51F6714942A5267FBC4B80AFB4E022.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C10F84743706253A9E919BFC714C4D6DDC4E73D5DD27CD55DA27ADCDB862A15C/0/3133382e3131372e38362e302f32342d3234203d3e20323635363838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.117.86.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:8a:8f:f4:0c:70:6f:ab:44:71:70:92:45:85:9c:28:1a:8e:
70:c8:fc:07:1d:99:71:93:3f:35:b1:82:50:a7:96:50:d5:d7:
8d:f2:64:a4:a5:5e:1a:5c:cd:28:7e:e7:c2:8c:8d:8c:5c:99:
7a:d6:fe:e1:42:1e:09:92:92:51:d6:5b:51:7c:d6:25:25:d0:
f5:df:0c:3f:b6:18:6f:01:d3:67:ff:4c:26:d5:23:04:07:d1:
fd:17:78:e5:6e:be:8f:8b:b9:6e:66:4f:20:f8:64:33:75:11:
97:b5:bc:d3:92:3d:e0:86:25:2f:21:ca:ee:39:97:bf:27:01:
26:24:ca:80:d1:cc:fe:10:14:eb:c7:35:bc:0b:16:4c:6f:36:
89:52:0a:e1:3d:5e:1d:de:e6:6c:ca:87:bd:c0:51:fe:e3:06:
d3:68:0a:d0:b2:ed:52:a9:59:59:76:31:2c:dd:e5:2e:c0:ac:
ab:d4:94:f3:e1:c1:5f:ef:e1:85:ba:93:4b:33:4f:e1:f9:83:
fd:6a:70:2c:8c:f2:a5:84:3a:48:c3:05:6e:df:b4:2c:39:6d:
3f:3f:15:9f:70:1f:a6:7f:56:34:7d:4a:13:ea:08:69:a1:dc:
4b:fb:6d:bb:5a:69:a3:f1:7f:f1:3b:d0:e7:d1:a7:28:90:80:
6c:0c:2f:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 22:13:17 2025 by rpki-client