Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/3134382e3130322e37312e302f32342d3234203d3e203231353735.roa
File: 3134382e3130322e37312e302f32342d3234203d3e203231353735.roa (raw, json)
Hash identifier: mbAcpdm0CoGPxisd7Fp4Ra1oZfea6DNMChNDY8zX18I=
Subject key identifier: 95:F6:98:78:13:1F:3D:9A:86:68:DC:A8:F2:41:A9:91:D3:C8:F2:0E
Certificate issuer: /CN=2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5
Certificate serial: 6C72B7DFDF1CE3C1C88546AED07B14CF00C12C19
Authority key identifier: 2B:1C:1B:7B:81:83:60:05:B4:55:C4:FF:26:DD:AA:1F:B3:A6:78:E5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/3134382e3130322e37312e302f32342d3234203d3e203231353735.roa
Signing time: Tue 04 Feb 2025 18:42:38 +0000
ROA not before: Tue 04 Feb 2025 18:37:38 +0000
ROA not after: Tue 03 Feb 2026 18:42:38 +0000
asID: 21575
IP address blocks: 148.102.71.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:72:b7:df:df:1c:e3:c1:c8:85:46:ae:d0:7b:14:cf:00:c1:2c:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5
Validity
Not Before: Feb 4 18:37:38 2025 GMT
Not After : Feb 3 18:42:38 2026 GMT
Subject: CN=95F69878131F3D9A8668DCA8F241A991D3C8F20E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:7f:b7:58:0d:28:94:1e:97:e9:84:c6:1d:37:
89:c7:d1:4f:e8:24:d8:20:e3:57:e4:1e:ea:90:ed:
a1:38:fa:f2:09:f9:c7:77:a6:a2:74:9c:0c:28:9d:
11:ce:26:fa:3e:10:60:8a:93:f1:5a:83:db:a3:1e:
1b:52:c6:a3:43:b5:e9:71:a2:8f:69:73:14:2b:41:
df:7c:d6:97:33:2a:de:bf:81:ea:93:4e:78:96:87:
2d:81:e8:7e:dd:09:79:00:dd:7f:47:7e:da:17:01:
f7:c2:f5:63:ab:14:3d:f9:89:ac:2c:86:0e:d9:63:
78:75:be:f2:f4:d6:ac:c9:a9:67:75:78:ce:cd:16:
cd:39:f6:be:b8:e0:bd:08:e3:3f:f8:3d:b9:5c:79:
cd:87:48:30:3b:52:f3:ca:f9:61:4d:bd:60:2d:d5:
df:56:b2:7f:73:7b:91:0c:34:84:f2:44:25:28:ba:
65:36:8e:a5:4b:9e:19:02:52:23:45:c8:a4:be:26:
23:84:f5:24:d5:ae:09:d0:ce:5f:88:9e:49:d9:ec:
38:e1:31:f8:09:c8:fc:a1:44:28:38:9f:14:78:cc:
65:33:e4:e6:b8:27:2c:d2:5f:49:09:9c:68:99:02:
b2:88:3b:e2:f3:97:5e:b3:17:de:bd:7e:63:d9:af:
6a:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:F6:98:78:13:1F:3D:9A:86:68:DC:A8:F2:41:A9:91:D3:C8:F2:0E
X509v3 Authority Key Identifier:
keyid:2B:1C:1B:7B:81:83:60:05:B4:55:C4:FF:26:DD:AA:1F:B3:A6:78:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/3134382e3130322e37312e302f32342d3234203d3e203231353735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
148.102.71.0/24
Signature Algorithm: sha256WithRSAEncryption
87:3d:f9:c9:5f:15:0d:41:93:3d:1b:a9:aa:ae:67:19:31:30:
e2:56:70:64:03:6e:16:c7:0f:27:d0:1c:0b:fb:fb:89:c7:0e:
5d:82:b7:8f:1e:db:f8:ea:a8:55:9c:f0:87:ed:0a:03:cb:20:
98:bc:39:93:17:f3:99:2b:58:4d:4d:85:ef:01:2a:46:b2:46:
e0:48:3a:53:5f:0b:4b:13:76:e4:e0:e8:51:8d:8a:81:c8:08:
9d:f7:50:ab:ec:71:fa:31:7a:32:f4:27:52:e5:93:66:e2:18:
a2:00:fa:31:68:57:3a:1a:17:f1:7e:0d:5b:42:41:8d:a5:8d:
14:84:90:da:72:51:fc:33:af:99:c2:49:5f:17:41:c4:c0:b4:
6f:d1:0b:30:e8:4b:d5:a1:02:2f:60:48:3a:07:41:e9:3c:3a:
54:a5:d0:7f:5c:f9:02:65:c3:5a:c2:7e:3c:61:5f:53:43:04:
1c:2b:22:fd:f9:34:9b:9e:da:b3:c4:8c:5f:2a:94:6b:22:45:
c8:da:6b:3a:3f:5b:0d:26:50:01:83:44:ab:3f:8b:64:4c:09:
5f:51:f1:0c:ed:17:81:d9:5c:80:f3:d8:b7:db:5f:87:93:66:
5b:bb:8f:62:a1:d1:09:5c:16:61:05:d4:cd:0e:d5:af:ed:9c:
19:c1:8e:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:49:28 2025 by rpki-client