Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/3134382e3130322e39362e302f32302d3230203d3e203231353735.roa
File: 3134382e3130322e39362e302f32302d3230203d3e203231353735.roa (raw, json)
Hash identifier: nrK0KYUhPiYv8UIRuRYupHe7FCD4kNWLMFSw/DBs57A=
Subject key identifier: A1:AE:0C:B1:7C:9C:E7:88:77:52:3D:56:2C:75:CA:2E:6F:ED:C8:B3
Certificate issuer: /CN=2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5
Certificate serial: 5B0D7A313F06E34DAA66D806545FB30465CD52FD
Authority key identifier: 2B:1C:1B:7B:81:83:60:05:B4:55:C4:FF:26:DD:AA:1F:B3:A6:78:E5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/3134382e3130322e39362e302f32302d3230203d3e203231353735.roa
Signing time: Tue 04 Feb 2025 18:42:28 +0000
ROA not before: Tue 04 Feb 2025 18:37:28 +0000
ROA not after: Tue 03 Feb 2026 18:42:28 +0000
asID: 21575
IP address blocks: 148.102.96.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:0d:7a:31:3f:06:e3:4d:aa:66:d8:06:54:5f:b3:04:65:cd:52:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5
Validity
Not Before: Feb 4 18:37:28 2025 GMT
Not After : Feb 3 18:42:28 2026 GMT
Subject: CN=A1AE0CB17C9CE78877523D562C75CA2E6FEDC8B3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:b9:6f:f6:7e:42:bc:dc:f9:5f:ed:c8:18:44:
41:7a:c5:83:3b:aa:39:63:a4:e7:d7:7d:82:62:88:
36:4b:12:0d:c4:eb:47:ce:ae:df:ba:19:a1:62:8c:
16:c6:29:05:87:5f:e6:0c:cc:74:06:e5:f3:42:53:
f0:56:c9:84:79:22:98:4d:1f:31:87:79:df:42:6c:
7d:44:59:5b:e1:d1:03:0e:df:cc:93:04:ec:1f:08:
e9:46:5a:ae:6c:a2:43:7d:7e:24:5b:fb:61:ac:34:
41:05:43:96:48:34:79:88:8a:40:6c:d8:f3:0d:f7:
f7:0e:1b:5b:53:1f:e5:55:f9:d2:23:04:62:b9:1e:
9b:9b:60:3a:4e:2e:e9:b9:97:ee:79:75:22:f3:30:
bb:c1:6a:90:14:61:6d:2d:ea:b9:7b:5f:4e:42:c7:
a0:ec:a5:fc:52:eb:72:12:fe:b6:26:76:81:80:5a:
c6:a4:86:d9:31:de:5e:a9:57:a0:86:d4:ab:ba:f9:
4b:e2:3c:b4:43:68:3a:8a:fd:18:c6:cd:ac:bb:e1:
31:d3:7a:ca:9d:c2:f4:9d:ae:a9:e0:42:68:12:39:
51:33:3c:b0:19:5c:bc:25:ba:52:1b:8b:cf:f8:48:
d0:5c:cf:31:7d:22:78:c4:ea:03:b3:27:e3:bc:ae:
99:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:AE:0C:B1:7C:9C:E7:88:77:52:3D:56:2C:75:CA:2E:6F:ED:C8:B3
X509v3 Authority Key Identifier:
keyid:2B:1C:1B:7B:81:83:60:05:B4:55:C4:FF:26:DD:AA:1F:B3:A6:78:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/3134382e3130322e39362e302f32302d3230203d3e203231353735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
148.102.96.0/20
Signature Algorithm: sha256WithRSAEncryption
18:6e:86:d1:bd:a2:b8:6b:36:65:4c:28:ca:70:bf:5e:94:dd:
da:28:51:d7:6b:23:4e:35:42:4d:25:04:58:81:1d:bc:04:25:
cf:97:31:bb:88:a0:47:17:b4:58:ab:94:77:61:4f:68:7d:bd:
0f:1f:95:70:b3:c4:88:e9:60:6b:49:a6:d2:04:d1:28:3f:d3:
ca:0c:9b:68:45:d0:cc:c7:73:79:46:39:97:9f:4d:22:12:c8:
e2:09:6f:e1:7c:0c:b4:80:55:b1:9a:e1:6b:96:fd:f4:cb:0d:
a2:6e:8e:37:e4:0f:1f:47:6e:eb:2e:27:56:1f:f3:f4:ad:0e:
99:4a:57:5c:3e:5c:b3:ba:88:da:72:2e:14:bd:59:e2:14:0a:
25:08:50:1a:94:f5:b4:2c:ad:e4:79:0e:3b:6d:f0:81:fe:81:
e4:c2:3d:91:33:3e:a7:45:2f:f7:b8:7a:32:4d:a2:31:59:79:
17:57:c4:28:64:12:4b:c3:9b:8b:4c:ca:4d:cd:80:7e:72:80:
1e:a5:c2:84:b3:22:4d:9a:a2:b4:33:d0:86:d9:51:41:33:69:
0b:9a:af:43:4e:ba:c8:bf:16:8d:24:10:4e:2e:04:05:91:a9:
58:7e:35:25:a6:cf:94:c9:56:db:b8:b6:9b:61:19:71:d9:be:
84:87:87:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:52:15 2025 by rpki-client