Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/3134382e3130322e37322e302f32342d3234203d3e203231353735.roa
File: 3134382e3130322e37322e302f32342d3234203d3e203231353735.roa (raw, json)
Hash identifier: n+srOIIlmkkSlaD4PvLN+BaWhTTLrojKKdmU9YzLZAc=
Subject key identifier: C0:1B:4F:66:74:E0:8A:9B:38:4E:63:D2:4F:32:DD:14:0F:99:0B:5F
Certificate issuer: /CN=2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5
Certificate serial: 1852D16F712A2FE6A0BFBDAAA7832EAFE7EC08E6
Authority key identifier: 2B:1C:1B:7B:81:83:60:05:B4:55:C4:FF:26:DD:AA:1F:B3:A6:78:E5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/3134382e3130322e37322e302f32342d3234203d3e203231353735.roa
Signing time: Tue 04 Feb 2025 18:42:26 +0000
ROA not before: Tue 04 Feb 2025 18:37:26 +0000
ROA not after: Tue 03 Feb 2026 18:42:26 +0000
asID: 21575
IP address blocks: 148.102.72.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:52:d1:6f:71:2a:2f:e6:a0:bf:bd:aa:a7:83:2e:af:e7:ec:08:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5
Validity
Not Before: Feb 4 18:37:26 2025 GMT
Not After : Feb 3 18:42:26 2026 GMT
Subject: CN=C01B4F6674E08A9B384E63D24F32DD140F990B5F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d6:b7:f7:a1:9d:d6:a7:51:9e:cc:7d:55:2a:
72:af:3f:c1:14:60:e9:6d:03:a1:a1:a9:15:63:67:
0f:3a:a7:20:1a:f9:df:f0:de:3d:85:7b:55:dd:8f:
2e:e0:f7:c4:e2:04:ab:0c:24:dd:dd:b5:0a:f2:a8:
16:66:8d:5b:27:70:b5:ad:7f:66:be:81:35:6a:4e:
2f:a2:e6:f0:b4:96:61:46:cd:7c:89:01:2c:3d:f5:
2f:0f:40:b3:fc:54:9f:02:97:40:e5:38:af:9d:70:
25:06:0a:a7:4b:03:45:46:2d:cf:3b:c5:de:d0:a6:
a9:30:3e:f7:a0:f2:eb:4d:fb:0c:f1:6b:93:36:be:
b2:40:52:b9:2a:04:83:22:72:1b:bf:5e:fc:ec:e7:
30:0d:06:c4:03:62:83:64:9d:0b:42:29:bb:d7:95:
e8:e0:a8:9e:86:db:c9:17:01:85:e1:c1:7c:da:1b:
e8:57:26:c8:dd:d1:e5:0d:09:d5:18:78:52:71:89:
f0:14:52:96:0d:18:5a:f5:08:b2:40:fd:d8:85:02:
cb:45:13:9a:97:f0:f4:88:e8:d6:be:ed:49:a6:a2:
ad:7e:ee:50:d1:3c:92:28:2d:ad:0f:c5:09:e1:19:
19:c2:ca:9a:3d:06:ad:3f:c6:ce:7d:ec:54:69:dd:
8d:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:1B:4F:66:74:E0:8A:9B:38:4E:63:D2:4F:32:DD:14:0F:99:0B:5F
X509v3 Authority Key Identifier:
keyid:2B:1C:1B:7B:81:83:60:05:B4:55:C4:FF:26:DD:AA:1F:B3:A6:78:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/3134382e3130322e37322e302f32342d3234203d3e203231353735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
148.102.72.0/24
Signature Algorithm: sha256WithRSAEncryption
51:37:a7:7a:56:7b:fc:fd:73:1a:89:1e:99:77:7e:90:48:9a:
a0:da:3a:bd:d1:b6:7e:03:9e:86:a2:16:99:48:52:f0:a8:88:
88:bb:d9:c7:f8:ac:da:d3:eb:0c:a5:28:84:9c:98:b5:5e:e3:
ec:d3:6a:5a:71:1d:7b:7b:eb:48:fe:f7:08:80:83:68:04:ce:
3c:93:8f:a1:8f:6d:a7:db:1d:86:e7:01:f1:46:4c:44:a5:ec:
2b:f8:ef:83:de:43:46:50:e0:ad:ee:6b:93:2b:6e:25:53:35:
5c:9c:20:b2:b2:74:a2:e9:48:4d:90:b6:83:8b:bd:f5:b6:b7:
6f:d8:ff:75:98:97:ea:23:96:b4:8c:35:c8:e9:9e:9c:de:76:
63:f0:21:06:5d:ad:23:d3:12:78:d4:1d:76:66:8f:9b:e6:4a:
8b:de:8f:34:97:bc:ed:e9:05:93:bc:fe:66:f4:db:27:01:79:
0d:1f:7b:df:1f:8f:45:8a:5b:50:aa:34:d3:47:89:ee:9c:e8:
94:da:93:0e:b8:78:e5:19:62:9d:07:d6:e1:09:ba:26:9d:86:
fa:de:ff:fc:c3:f1:6b:f0:e6:b2:6a:a4:80:36:ca:58:3f:1a:
d2:c5:2e:09:ba:5d:74:5b:fa:24:44:08:ab:97:40:c7:ff:83:
fc:35:d9:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:06:17 2025 by rpki-client