Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C862C92FE79571CDCE834A609053002A1212C9B70796AFAD01C6193D7F0DAAAB/0/3135322e3233312e36342e302f31382d3234203d3e203237363531.roa
File: 3135322e3233312e36342e302f31382d3234203d3e203237363531.roa (raw, json)
Hash identifier: P3fOvj1xuMyHP5Grca8sEGJenT1pcfuKJzdk8vK9otk=
Subject key identifier: 1B:14:33:48:02:0F:D1:C3:C1:F9:60:94:27:58:97:C3:BA:45:32:38
Certificate issuer: /CN=3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7
Certificate serial: 2ACFCBD2908FF0966CD35977218F9D7BA519F79F
Authority key identifier: 3F:DB:44:D1:8B:C1:6A:B0:39:C2:B1:B6:BD:38:66:AB:29:E1:22:A7
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/C862C92FE79571CDCE834A609053002A1212C9B70796AFAD01C6193D7F0DAAAB/0/3135322e3233312e36342e302f31382d3234203d3e203237363531.roa
Signing time: Tue 04 Feb 2025 19:56:30 +0000
ROA not before: Tue 04 Feb 2025 19:51:30 +0000
ROA not after: Tue 03 Feb 2026 19:56:30 +0000
asID: 27651
IP address blocks: 152.231.64.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:cf:cb:d2:90:8f:f0:96:6c:d3:59:77:21:8f:9d:7b:a5:19:f7:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7
Validity
Not Before: Feb 4 19:51:30 2025 GMT
Not After : Feb 3 19:56:30 2026 GMT
Subject: CN=1B143348020FD1C3C1F96094275897C3BA453238
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:1e:98:cc:12:47:87:f1:33:70:93:be:62:48:
f7:52:d6:b7:13:28:31:c6:56:ff:7b:55:45:ef:62:
c3:9e:30:2a:72:d3:0d:51:9e:16:ec:5b:33:9c:cf:
53:e0:2e:0a:11:53:aa:c9:b3:78:48:c7:a0:37:a2:
03:b0:ec:33:e2:24:b0:8b:d5:6f:89:db:e0:2f:6f:
20:ac:bc:f7:20:ae:ef:c3:9a:53:3a:c4:a1:36:31:
00:d6:12:f0:a7:0e:99:ee:67:e0:4d:d6:0b:d2:fe:
10:09:ec:c3:2e:57:86:37:51:21:35:8c:6c:dc:c3:
07:a8:8c:a1:72:ab:21:73:03:59:1d:d0:4d:26:15:
65:79:9f:83:bb:9b:23:7e:e4:e3:80:65:9b:82:57:
0b:80:2b:ad:65:af:05:8a:69:b6:b5:81:82:2f:dc:
29:b0:c9:d4:74:7b:d9:b3:8e:a3:dc:13:90:97:d4:
ab:73:32:ff:1f:eb:f6:72:06:52:2a:6a:3e:37:e3:
b3:21:d3:f6:88:a4:24:00:c9:6c:27:10:77:35:ba:
f3:87:4b:e7:bb:d1:d5:64:74:cb:6a:88:6e:76:e2:
ae:6a:0b:87:e5:4a:90:86:00:b9:b8:73:6c:aa:29:
9a:de:78:cf:b3:4d:dc:9b:ab:56:8e:7c:e0:1e:85:
d5:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:14:33:48:02:0F:D1:C3:C1:F9:60:94:27:58:97:C3:BA:45:32:38
X509v3 Authority Key Identifier:
keyid:3F:DB:44:D1:8B:C1:6A:B0:39:C2:B1:B6:BD:38:66:AB:29:E1:22:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/C862C92FE79571CDCE834A609053002A1212C9B70796AFAD01C6193D7F0DAAAB/0/3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C862C92FE79571CDCE834A609053002A1212C9B70796AFAD01C6193D7F0DAAAB/0/3135322e3233312e36342e302f31382d3234203d3e203237363531.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.231.64.0/18
Signature Algorithm: sha256WithRSAEncryption
4b:a3:f0:76:59:97:35:3a:23:13:75:7d:dc:da:8b:62:ec:f8:
b1:ab:74:ad:47:a0:0a:f6:0f:2a:c7:d3:33:57:e4:72:58:68:
f7:08:37:7a:a6:a5:04:0d:b1:f5:a1:33:99:a6:29:d1:df:bc:
ec:b3:71:82:e9:82:05:7b:75:96:87:6c:9e:8c:a1:cc:0c:34:
37:c5:0f:96:86:50:46:d8:bd:be:de:36:f8:6d:bf:75:3c:36:
d4:7b:b0:12:57:5b:02:9c:66:b5:03:f9:b0:ec:7b:59:a5:4f:
fa:99:ba:7d:e8:fd:94:15:28:98:3d:c2:c5:f5:85:60:37:ea:
a2:1a:10:a9:66:8f:8d:de:75:49:30:37:1f:ea:f9:db:38:6a:
77:c8:c4:a2:df:62:52:5b:c5:e7:fa:7e:1c:b8:4b:b5:fb:cb:
10:2b:81:29:fc:71:8a:d7:cf:fa:e8:c1:44:73:37:dc:ec:21:
01:3f:9b:87:0d:6d:7a:3b:72:46:a2:54:ab:93:a2:ce:55:87:
a4:39:31:0f:4e:e6:90:92:27:6e:8e:40:0b:32:08:a5:47:11:
71:e1:fb:0a:33:3d:09:cc:bb:9c:64:aa:38:06:24:bd:f4:74:
66:86:9c:c2:a4:88:48:e1:92:39:ee:17:7d:2d:26:2f:98:e4:
ee:b0:ce:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 05:42:14 2025 by rpki-client