Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/3134382e3130322e3130392e302f32342d3234203d3e203231353735.roa
File: 3134382e3130322e3130392e302f32342d3234203d3e203231353735.roa (raw, json)
Hash identifier: AU29zjHcklnIGPsNCsNANL1OqIIwsmBwYdEz0VlU/HM=
Subject key identifier: E0:6B:EF:15:BB:98:E9:41:C2:BE:1F:0E:93:6B:91:03:6A:94:F1:A8
Certificate issuer: /CN=2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5
Certificate serial: 0E204E4E794261846F13D9306F967577AE266083
Authority key identifier: 2B:1C:1B:7B:81:83:60:05:B4:55:C4:FF:26:DD:AA:1F:B3:A6:78:E5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/3134382e3130322e3130392e302f32342d3234203d3e203231353735.roa
Signing time: Tue 04 Feb 2025 18:42:30 +0000
ROA not before: Tue 04 Feb 2025 18:37:30 +0000
ROA not after: Tue 03 Feb 2026 18:42:30 +0000
asID: 21575
IP address blocks: 148.102.109.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:20:4e:4e:79:42:61:84:6f:13:d9:30:6f:96:75:77:ae:26:60:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5
Validity
Not Before: Feb 4 18:37:30 2025 GMT
Not After : Feb 3 18:42:30 2026 GMT
Subject: CN=E06BEF15BB98E941C2BE1F0E936B91036A94F1A8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:28:6c:db:89:b3:45:ef:e6:b3:72:b3:df:8f:
9f:9e:5b:78:2f:75:54:05:03:d8:ed:5a:99:f3:a7:
b3:6f:99:f0:ec:71:76:d9:1b:f4:7b:3d:6a:de:d3:
49:4e:05:e7:68:4f:08:7e:f9:d3:b6:56:1e:74:da:
cd:e3:7e:5f:6f:d2:21:97:93:f5:02:89:79:a3:ef:
29:5f:5d:d5:b9:ef:ef:78:d8:62:59:9b:5f:64:1e:
d1:b5:14:eb:81:92:4a:7f:2d:c3:97:b9:62:0d:15:
d7:29:c3:b9:03:77:e7:9f:1a:84:b3:64:f4:40:74:
50:7f:6e:61:6f:d1:72:f1:94:e3:a8:22:53:e7:f3:
9a:13:04:9b:cd:0d:9d:d7:1b:49:dc:1a:08:a1:91:
ae:87:ce:78:ff:5e:96:7a:be:65:19:fc:9f:26:54:
91:55:00:56:0b:df:a4:31:69:b9:ec:0a:2d:49:53:
58:2f:30:d9:ba:63:c6:3f:f3:e4:ef:80:c5:b8:30:
c8:5b:ec:7b:b9:9f:3c:f9:f4:59:3d:58:03:c8:f3:
3d:8c:47:e1:03:e8:54:e1:f0:83:96:63:93:7f:6d:
42:77:81:87:99:29:bd:a7:2b:6f:bb:bd:ee:fb:53:
f4:df:39:a2:20:15:f4:60:0b:8c:1e:3f:03:a4:ef:
06:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:6B:EF:15:BB:98:E9:41:C2:BE:1F:0E:93:6B:91:03:6A:94:F1:A8
X509v3 Authority Key Identifier:
keyid:2B:1C:1B:7B:81:83:60:05:B4:55:C4:FF:26:DD:AA:1F:B3:A6:78:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/3134382e3130322e3130392e302f32342d3234203d3e203231353735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
148.102.109.0/24
Signature Algorithm: sha256WithRSAEncryption
65:87:d2:a7:ba:14:05:35:1a:cf:f3:b4:40:0c:4e:56:a8:18:
0b:75:2e:4b:12:93:c1:a6:38:8a:9b:56:04:68:9c:b2:47:a1:
4d:4b:c5:67:7e:85:bf:4a:2f:af:56:74:00:68:df:8d:4e:fc:
0f:84:41:2a:0a:42:8e:c6:15:02:98:2e:43:29:1b:21:c5:b6:
de:37:3a:a3:0a:ce:84:91:81:4d:70:62:18:14:21:48:18:6d:
10:eb:3f:0f:f5:c8:5d:b1:2c:80:7f:e8:33:f6:1d:29:02:f2:
aa:ab:97:c0:46:0b:42:06:dc:83:56:d5:45:da:17:f0:34:11:
b1:fe:e4:10:d7:1e:69:1f:82:ae:12:31:1d:7b:cc:4d:05:2f:
1a:44:7f:d3:45:f8:c5:fd:11:23:6f:19:fe:d4:61:fc:12:97:
87:f9:05:4c:fd:13:e1:a8:b7:6b:de:1a:9e:7f:a8:2e:7b:a6:
eb:3b:79:2c:03:f2:25:c6:a7:c4:c6:b7:48:06:45:28:11:27:
bf:39:bd:46:3c:d3:f4:77:31:ce:02:81:da:92:54:5c:db:65:
ee:e3:f9:28:3f:c6:a7:43:83:64:79:6b:67:a3:3b:b3:31:5b:
0d:e1:30:71:69:73:14:ae:97:1a:e9:4e:fa:65:46:fb:47:bf:
3e:5c:85:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:54:59 2025 by rpki-client