Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/3139302e3138372e3235352e302f32342d3234203d3e203237383535.roa
File: 3139302e3138372e3235352e302f32342d3234203d3e203237383535.roa (raw, json)
Hash identifier: FmASr6TfWYOP34rurdKxwEaTGjkVpdvPltRju4ftXUA=
Subject key identifier: B8:4E:AA:B8:16:54:B1:DC:86:F9:8D:E6:4D:80:A7:A4:4D:26:9E:7E
Certificate issuer: /CN=2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5
Certificate serial: 432664C135503B34F3A32606C765882D0FA60D46
Authority key identifier: 2B:1C:1B:7B:81:83:60:05:B4:55:C4:FF:26:DD:AA:1F:B3:A6:78:E5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/3139302e3138372e3235352e302f32342d3234203d3e203237383535.roa
Signing time: Tue 04 Feb 2025 18:42:27 +0000
ROA not before: Tue 04 Feb 2025 18:37:27 +0000
ROA not after: Tue 03 Feb 2026 18:42:27 +0000
asID: 27855
IP address blocks: 190.187.255.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:26:64:c1:35:50:3b:34:f3:a3:26:06:c7:65:88:2d:0f:a6:0d:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5
Validity
Not Before: Feb 4 18:37:27 2025 GMT
Not After : Feb 3 18:42:27 2026 GMT
Subject: CN=B84EAAB81654B1DC86F98DE64D80A7A44D269E7E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:1c:05:62:91:d4:21:00:e1:87:2d:dc:67:61:
5b:10:4c:a3:ee:46:1f:cd:72:59:d9:bf:83:e7:83:
59:b4:e0:f1:06:00:3e:47:36:1b:0e:ff:09:17:75:
bd:7a:a7:ca:5a:63:db:df:e0:e3:6e:7f:0e:d4:d8:
40:1f:1d:a3:45:6c:04:80:96:88:70:92:bc:cf:21:
b7:6f:f3:85:93:eb:17:59:67:a2:b8:b9:fc:e3:a3:
30:41:b6:b1:10:a1:0d:42:b8:8e:23:e0:32:09:dd:
aa:16:3a:da:b9:f2:d4:22:26:f0:a6:e3:cc:ae:47:
be:46:5b:90:c9:7e:8a:9c:c3:11:2d:c8:81:9b:03:
74:52:34:da:96:e8:10:3c:05:7d:01:fd:81:0c:62:
5b:9b:42:ef:bb:fb:16:df:a7:7f:aa:f5:9c:44:ba:
8d:35:33:1c:ab:fa:d1:26:e0:14:71:60:a9:cd:f6:
8c:1e:44:53:b1:fe:54:42:db:00:a3:19:41:d0:6a:
29:7a:01:a2:77:d0:fa:b6:94:61:9b:45:47:9e:ac:
3f:b8:14:3b:31:ff:49:f0:60:b1:12:f0:f1:88:bb:
35:95:cd:b1:53:43:62:6a:b8:64:6e:c0:17:23:05:
9e:81:f8:ed:ba:4b:5f:af:0b:db:e4:5c:e1:02:99:
88:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:4E:AA:B8:16:54:B1:DC:86:F9:8D:E6:4D:80:A7:A4:4D:26:9E:7E
X509v3 Authority Key Identifier:
keyid:2B:1C:1B:7B:81:83:60:05:B4:55:C4:FF:26:DD:AA:1F:B3:A6:78:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/3139302e3138372e3235352e302f32342d3234203d3e203237383535.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.187.255.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:3e:7f:d0:07:4d:37:75:2c:6c:d4:6f:13:80:4d:19:cf:13:
24:6e:24:71:fa:83:53:35:3c:a9:74:10:3d:b9:75:30:64:55:
59:94:31:2e:0d:04:a0:66:bd:dd:23:2c:12:da:f6:49:dc:f4:
98:50:89:b4:5c:93:d5:bc:8b:ad:60:99:50:a3:d3:64:21:d4:
f9:54:74:92:f6:b9:e8:cb:9d:d8:4f:eb:65:fd:ee:e5:6e:ef:
e1:8f:9d:b5:f0:7e:6b:92:94:c0:5f:72:5b:de:6d:f5:28:fd:
1b:ae:22:20:3d:c8:13:4f:e6:dc:98:66:4e:00:49:67:9f:1d:
2a:cf:83:3e:ba:7b:9b:19:06:f7:a9:61:d9:cb:3b:bd:fc:1a:
9a:68:d8:9b:b8:16:53:ac:e5:4c:8a:15:ad:58:38:26:f0:64:
87:1f:6f:b2:4a:38:95:9e:49:10:c8:3f:c3:2e:b5:e1:97:2b:
1f:12:e3:a8:8d:ca:85:b4:ec:db:af:ce:64:76:d3:6c:dc:5f:
f1:ab:54:31:c2:a4:f3:40:13:c6:70:4c:fb:5b:0b:9a:60:68:
8f:f8:c4:e5:e8:67:e8:91:8f:ac:92:c7:39:83:cb:12:04:17:
f3:fe:92:14:ad:f2:1a:fe:9b:2b:14:f8:eb:36:64:21:9e:14:
79:03:f3:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:15:14 2025 by rpki-client