Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CECDE75047AAD135C0A47FE1DE6D6B0D3FE1B0671DDB5EF93A12544497C94415/0/323830303a38383a34303a3a2f34382d3438203d3e203236323130.roa
File: 323830303a38383a34303a3a2f34382d3438203d3e203236323130.roa (raw, json)
Hash identifier: hQ2/aGTUp5CNXlBVftGOrAnOtx23jwAjttZrMUVhKXU=
Subject key identifier: 59:8B:68:81:DC:C6:33:9D:0F:17:46:D7:1B:0B:B6:50:48:95:13:DA
Certificate issuer: /CN=0E2398E228CAF8263D654C1F35A155213634B840
Certificate serial: 2D07EA996507A07F17CDCAD44FEA90075D1AD23D
Authority key identifier: 0E:23:98:E2:28:CA:F8:26:3D:65:4C:1F:35:A1:55:21:36:34:B8:40
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0E2398E228CAF8263D654C1F35A155213634B840.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/CECDE75047AAD135C0A47FE1DE6D6B0D3FE1B0671DDB5EF93A12544497C94415/0/323830303a38383a34303a3a2f34382d3438203d3e203236323130.roa
Signing time: Tue 04 Feb 2025 18:17:50 +0000
ROA not before: Tue 04 Feb 2025 18:12:50 +0000
ROA not after: Tue 03 Feb 2026 18:17:50 +0000
asID: 26210
IP address blocks: 2800:88:40::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:07:ea:99:65:07:a0:7f:17:cd:ca:d4:4f:ea:90:07:5d:1a:d2:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0E2398E228CAF8263D654C1F35A155213634B840
Validity
Not Before: Feb 4 18:12:50 2025 GMT
Not After : Feb 3 18:17:50 2026 GMT
Subject: CN=598B6881DCC6339D0F1746D71B0BB650489513DA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:00:21:30:72:f2:a9:54:45:c1:7f:6d:0d:71:
25:19:de:70:8f:ff:98:8c:0d:cc:5e:1e:0a:e8:5a:
02:77:85:ba:3b:97:a4:ee:48:e6:4c:af:26:35:cf:
5a:ca:a3:60:7a:6a:dc:ce:6a:11:1c:2d:ec:10:03:
64:b8:f8:cf:5e:ce:10:d6:99:cd:26:4c:98:0b:4f:
f3:45:8e:ce:31:90:7a:bd:4b:71:ef:e2:32:56:ee:
02:96:39:2a:81:3d:59:82:d4:c3:68:a5:08:3c:8b:
13:16:57:0e:5b:ff:06:4d:e9:ad:f4:f4:ba:af:7a:
7b:a5:3d:fe:ad:16:5c:c4:fe:82:7e:be:e9:c0:1c:
72:5d:30:59:13:49:49:6e:73:97:df:1a:bb:62:cc:
73:27:5b:7c:68:b5:82:c0:63:d1:d0:f4:8f:e2:9d:
bf:a0:d2:83:6e:d8:ad:6b:6e:97:7b:ac:0b:7a:4d:
c1:4a:8c:91:b5:0a:c6:6e:37:d8:b3:92:eb:8a:3a:
82:40:23:cf:f1:8f:d9:ed:5e:98:0b:4c:72:60:94:
35:5c:aa:be:81:20:a8:61:fd:34:bc:73:d2:f7:ec:
cd:da:e4:97:1f:aa:6a:70:5e:39:d4:fc:35:5c:0d:
24:55:a8:5d:d2:43:62:1f:9a:69:5c:28:34:e4:69:
24:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:8B:68:81:DC:C6:33:9D:0F:17:46:D7:1B:0B:B6:50:48:95:13:DA
X509v3 Authority Key Identifier:
keyid:0E:23:98:E2:28:CA:F8:26:3D:65:4C:1F:35:A1:55:21:36:34:B8:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/CECDE75047AAD135C0A47FE1DE6D6B0D3FE1B0671DDB5EF93A12544497C94415/0/0E2398E228CAF8263D654C1F35A155213634B840.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0E2398E228CAF8263D654C1F35A155213634B840.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CECDE75047AAD135C0A47FE1DE6D6B0D3FE1B0671DDB5EF93A12544497C94415/0/323830303a38383a34303a3a2f34382d3438203d3e203236323130.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2800:88:40::/48
Signature Algorithm: sha256WithRSAEncryption
53:ad:7f:59:3e:2e:f9:13:3c:5d:d7:52:73:1e:9e:9b:8e:a6:
d5:77:57:3c:2f:f8:08:58:62:9c:72:a8:8b:ad:27:5e:71:32:
70:c9:a5:8a:fc:24:3e:90:ec:60:dd:a2:ec:6a:e1:01:7c:52:
2c:80:3a:09:fb:cf:e9:50:81:ec:3b:32:b0:93:19:c3:5e:3a:
6b:07:c7:b3:a9:07:29:25:5e:d5:1d:2c:2a:a0:81:55:fd:0a:
7f:d6:10:4d:3e:d9:01:32:6a:df:84:0f:b8:b1:6e:70:28:50:
19:a7:b9:84:fa:11:70:ba:cb:eb:66:d2:06:e5:91:76:d1:8e:
ad:31:17:f0:de:d8:80:f8:a5:30:59:5c:98:8a:29:ba:87:fb:
fb:46:7a:dd:ad:27:70:a7:de:d6:ad:7d:96:17:48:05:70:8a:
3b:3a:7b:f4:c0:e6:6f:00:2a:fe:00:64:fc:26:fa:b3:b3:76:
f2:01:54:89:02:45:53:1d:30:3c:d3:1c:b9:48:73:f8:57:d3:
0d:1a:01:e3:21:de:37:6b:c5:02:3a:0d:de:73:0f:be:bb:de:
3c:8c:78:a8:3d:c1:50:e5:47:92:05:35:61:bc:84:90:8e:17:
3d:42:0e:7b:97:03:65:77:f9:36:5d:f2:f7:eb:7e:2d:c7:75:
b8:6b:79:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:20:30 2025 by rpki-client