Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C52E2D250F5BAABEF264E9E0A52FF71E8C9ACBDC87835A5BFBC5AFEE689C71EA/0/3133312e37322e3234322e302f32342d3234203d3e203532333237.roa
File: 3133312e37322e3234322e302f32342d3234203d3e203532333237.roa (raw, json)
Hash identifier: JhACII2hNPj+CUpX/n/UTLxcJoQoiIYpKDhIbvziY68=
Subject key identifier: 39:73:00:76:93:D8:54:65:84:D1:EC:42:93:FD:60:FA:69:20:9C:C3
Certificate issuer: /CN=EC869BAFB5A3882FB7CB6D7F22FD36685961C5B7
Certificate serial: 3850EC90A893AEF88CDB61860DC0A13605FBB462
Authority key identifier: EC:86:9B:AF:B5:A3:88:2F:B7:CB:6D:7F:22:FD:36:68:59:61:C5:B7
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC869BAFB5A3882FB7CB6D7F22FD36685961C5B7.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/C52E2D250F5BAABEF264E9E0A52FF71E8C9ACBDC87835A5BFBC5AFEE689C71EA/0/3133312e37322e3234322e302f32342d3234203d3e203532333237.roa
Signing time: Tue 04 Feb 2025 18:48:31 +0000
ROA not before: Tue 04 Feb 2025 18:43:31 +0000
ROA not after: Tue 03 Feb 2026 18:48:31 +0000
asID: 52327
IP address blocks: 131.72.242.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:50:ec:90:a8:93:ae:f8:8c:db:61:86:0d:c0:a1:36:05:fb:b4:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EC869BAFB5A3882FB7CB6D7F22FD36685961C5B7
Validity
Not Before: Feb 4 18:43:31 2025 GMT
Not After : Feb 3 18:48:31 2026 GMT
Subject: CN=3973007693D8546584D1EC4293FD60FA69209CC3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:da:fb:0f:80:3a:a2:97:96:16:f6:c1:6d:a6:
b5:ec:00:ac:7d:d4:30:fb:1c:ae:e3:20:14:83:b4:
1b:10:e3:63:44:e1:9d:11:52:a8:f4:b9:c9:63:d2:
5f:44:d2:3f:e9:ec:b0:76:db:ee:ba:fb:4c:c5:f5:
d4:38:7f:dc:00:1f:62:04:e2:1c:df:7c:70:44:ac:
8f:a2:be:33:8c:27:9f:a6:9a:ae:35:3e:97:3c:33:
e4:1e:e6:15:e1:ac:83:61:a8:fd:72:68:14:68:3d:
cb:9f:db:f8:70:73:d7:20:a5:c7:45:27:de:7e:79:
6f:c5:08:c4:72:5c:3c:66:5b:86:76:77:ff:a4:0d:
d3:74:0e:01:9b:e0:b6:12:90:b2:48:2f:69:51:3e:
87:07:0e:1d:aa:42:41:86:d9:b1:b0:82:da:28:a8:
62:1a:07:68:07:d4:19:38:a0:02:37:5f:d7:3a:25:
d5:5d:08:d0:89:b9:5a:cf:fa:fe:51:be:a9:ae:03:
85:4a:b7:01:bb:15:9c:91:74:c9:f7:65:8f:04:87:
49:7b:88:ff:84:f9:ad:ea:24:19:b7:0a:9d:6a:df:
2e:ee:28:42:0b:c0:ae:03:a3:d3:f4:9e:84:b8:4d:
e0:cd:15:d4:e0:a6:4c:c5:34:fd:17:bf:c4:9d:63:
0c:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:73:00:76:93:D8:54:65:84:D1:EC:42:93:FD:60:FA:69:20:9C:C3
X509v3 Authority Key Identifier:
keyid:EC:86:9B:AF:B5:A3:88:2F:B7:CB:6D:7F:22:FD:36:68:59:61:C5:B7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/C52E2D250F5BAABEF264E9E0A52FF71E8C9ACBDC87835A5BFBC5AFEE689C71EA/0/EC869BAFB5A3882FB7CB6D7F22FD36685961C5B7.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC869BAFB5A3882FB7CB6D7F22FD36685961C5B7.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C52E2D250F5BAABEF264E9E0A52FF71E8C9ACBDC87835A5BFBC5AFEE689C71EA/0/3133312e37322e3234322e302f32342d3234203d3e203532333237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.72.242.0/24
Signature Algorithm: sha256WithRSAEncryption
33:cd:09:81:b9:ab:0d:1e:91:fb:7d:47:d6:33:71:2b:33:30:
e8:40:80:90:77:61:20:2c:a5:3d:23:18:f1:5d:af:8c:36:b9:
db:22:c0:64:42:c5:30:e8:7d:01:35:f7:5a:e8:4e:a0:5d:54:
fc:e9:78:6e:d9:58:c7:fc:3a:85:bf:d6:97:19:d2:44:95:2e:
9f:bc:09:79:a5:55:ca:bd:55:0e:3e:ed:65:93:a8:2d:cc:57:
7c:3a:c1:a7:3e:30:3b:d6:d0:2a:98:c0:b6:4c:54:ba:52:bd:
32:b5:3d:01:3e:3a:86:34:99:98:8a:ca:29:40:85:66:59:3d:
e7:64:86:ce:73:83:26:b5:6f:79:eb:e0:0a:5b:77:b1:ef:6f:
d1:64:24:28:51:2c:08:ff:77:5b:7d:76:a8:2b:72:c0:0a:49:
fc:86:61:97:02:e3:c6:74:66:01:40:e5:8b:7d:c8:2e:f7:9e:
d6:d4:8d:ca:09:95:06:bc:0a:78:da:7c:e5:02:d7:f1:ef:79:
ed:9d:60:65:af:a4:5c:0c:fb:67:2d:3f:4a:2f:5c:84:cf:e5:
34:ed:74:e5:04:48:14:bf:4c:92:85:7c:ee:46:f9:ef:1e:d7:
6c:93:3f:d4:92:01:b5:d6:38:e4:ce:0a:e7:46:82:59:89:78:
62:b4:e2:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:12:12 2025 by rpki-client