Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/3134382e3130322e3131362e302f32342d3234203d3e203231353735.roa
File: 3134382e3130322e3131362e302f32342d3234203d3e203231353735.roa (raw, json)
Hash identifier: KRTe/e0etnBhJl7jVrqB0K52kXGut6kJp0f2iI78kqE=
Subject key identifier: EE:3E:88:98:4E:F9:0C:C9:61:04:92:9F:FA:E2:5E:CD:73:E5:4C:99
Certificate issuer: /CN=2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5
Certificate serial: 39D594964FD3F37C65345336F168CC2CC9619C49
Authority key identifier: 2B:1C:1B:7B:81:83:60:05:B4:55:C4:FF:26:DD:AA:1F:B3:A6:78:E5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/3134382e3130322e3131362e302f32342d3234203d3e203231353735.roa
Signing time: Tue 04 Feb 2025 18:42:30 +0000
ROA not before: Tue 04 Feb 2025 18:37:30 +0000
ROA not after: Tue 03 Feb 2026 18:42:30 +0000
asID: 21575
IP address blocks: 148.102.116.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:d5:94:96:4f:d3:f3:7c:65:34:53:36:f1:68:cc:2c:c9:61:9c:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5
Validity
Not Before: Feb 4 18:37:30 2025 GMT
Not After : Feb 3 18:42:30 2026 GMT
Subject: CN=EE3E88984EF90CC96104929FFAE25ECD73E54C99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:0f:a5:3e:5b:1f:74:bd:67:0f:36:5e:c8:d9:
59:ae:40:64:d5:21:c7:4b:8b:1e:12:62:87:d9:38:
6c:59:bc:48:97:75:e6:5d:38:71:bc:38:d0:02:1c:
13:ec:3e:d7:90:ef:9b:38:1d:20:72:7c:2b:56:5c:
34:fb:01:f4:bc:09:8c:67:50:12:1c:ae:b8:9a:c4:
27:f1:cf:09:50:e4:e0:95:3b:cf:7f:87:c2:05:93:
80:cd:87:ae:03:98:e0:d3:f2:97:de:66:83:6b:92:
f7:e6:5e:2a:2b:b4:28:7e:a3:44:87:44:e0:05:81:
23:64:5a:c9:2f:ad:a8:72:fa:3b:1d:c0:60:de:71:
0e:f9:04:57:9b:45:e4:2a:8b:04:1b:69:64:86:fe:
9d:f7:fc:34:a7:10:4e:9d:9a:11:aa:37:f1:1d:14:
73:0e:17:f6:02:00:e7:23:31:01:b4:c4:55:06:0d:
2b:5e:ed:5c:f0:60:5a:c9:31:b0:04:39:78:35:1b:
f8:55:58:56:81:aa:a7:38:99:ff:0d:6b:f1:a7:82:
8b:b7:e3:90:92:39:29:ee:c6:e3:74:91:02:24:28:
ae:f2:6b:90:33:5a:35:3a:11:18:82:66:2b:a6:da:
a8:6b:b3:fb:cc:29:d7:4a:a7:5f:50:ef:48:a2:a8:
01:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:3E:88:98:4E:F9:0C:C9:61:04:92:9F:FA:E2:5E:CD:73:E5:4C:99
X509v3 Authority Key Identifier:
keyid:2B:1C:1B:7B:81:83:60:05:B4:55:C4:FF:26:DD:AA:1F:B3:A6:78:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/3134382e3130322e3131362e302f32342d3234203d3e203231353735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
148.102.116.0/24
Signature Algorithm: sha256WithRSAEncryption
92:cc:28:b8:ec:09:c5:73:87:0f:67:17:74:a1:35:02:bc:ed:
2a:d8:f4:5d:7e:80:3a:ae:57:51:3f:51:db:04:17:8d:25:c9:
1a:6d:f2:93:d4:70:3c:9b:df:c9:9c:90:e2:5e:d0:32:41:e3:
7d:c3:b8:9c:28:52:19:32:53:d2:41:26:36:81:29:4f:ca:23:
62:b4:c9:33:31:4f:16:2d:71:b5:da:40:05:f6:7c:c1:fb:c3:
4e:6f:b2:10:76:73:53:d2:c8:a5:2c:44:6f:be:85:f2:35:da:
f4:8a:eb:09:f5:ae:13:31:e0:68:74:e8:d6:7c:f4:b9:c2:70:
bc:44:ca:d2:4a:aa:f7:1a:0f:8a:b2:f0:5d:35:78:68:67:a5:
7d:c8:29:6c:23:cb:ff:1e:dd:8f:61:2e:52:bb:fe:62:44:00:
42:e4:4b:bd:59:30:27:4e:ab:28:db:9e:1d:c3:c9:39:ad:f6:
84:ca:22:ef:4a:f3:23:a6:17:50:27:ca:e5:02:09:30:82:27:
b7:80:72:be:ad:26:b6:c3:e8:e0:cb:54:c5:d5:f8:87:35:79:
3c:95:49:da:b1:83:d7:6d:03:26:3d:a5:58:5c:05:82:1c:a9:
21:f0:d3:41:b1:4c:c8:b3:9f:59:4d:18:dd:49:0a:2a:4a:f0:
15:1d:da:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:06:18 2025 by rpki-client