Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D425E3D0D39D3B791BBAB46F7A1CA12216B2B3153818B7F5AC119883A15C3607/0/3133382e39342e3132302e302f32322d3234203d3e203237383834.roa
File: 3133382e39342e3132302e302f32322d3234203d3e203237383834.roa (raw, json)
Hash identifier: hwjG7l+cutgTKSKKZRFyj0UNfOH/3gaQF1FvZ9oNwyA=
Subject key identifier: 86:03:79:AD:71:F5:12:1E:15:64:02:70:42:13:ED:CD:33:30:24:B5
Certificate issuer: /CN=4275A1F1BC69282CD0F4BD33F1201556C66CFD58
Certificate serial: 6875F7CB730F4F7E57EA979B73EDCDBA60CAE476
Authority key identifier: 42:75:A1:F1:BC:69:28:2C:D0:F4:BD:33:F1:20:15:56:C6:6C:FD:58
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4275A1F1BC69282CD0F4BD33F1201556C66CFD58.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D425E3D0D39D3B791BBAB46F7A1CA12216B2B3153818B7F5AC119883A15C3607/0/3133382e39342e3132302e302f32322d3234203d3e203237383834.roa
Signing time: Tue 04 Feb 2025 20:01:23 +0000
ROA not before: Tue 04 Feb 2025 19:56:23 +0000
ROA not after: Tue 03 Feb 2026 20:01:23 +0000
asID: 27884
IP address blocks: 138.94.120.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:75:f7:cb:73:0f:4f:7e:57:ea:97:9b:73:ed:cd:ba:60:ca:e4:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4275A1F1BC69282CD0F4BD33F1201556C66CFD58
Validity
Not Before: Feb 4 19:56:23 2025 GMT
Not After : Feb 3 20:01:23 2026 GMT
Subject: CN=860379AD71F5121E156402704213EDCD333024B5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:44:6c:83:65:58:0e:09:d9:62:e8:3f:f8:5a:
c9:60:38:41:57:6d:66:7b:89:54:a9:64:14:9a:41:
73:db:d7:52:44:df:d3:07:ad:61:f9:e5:f8:0c:0f:
93:11:a5:53:05:fd:c6:06:75:02:2b:cf:44:c1:fc:
f5:5c:ec:86:8a:c4:61:5b:b8:ea:4c:5d:8b:65:26:
e3:5c:42:54:12:4e:85:59:64:5f:36:c3:b0:2f:e1:
8e:06:c9:94:39:3e:07:d7:5d:2f:e7:05:35:9b:69:
dd:a2:01:87:fb:4e:ab:de:47:15:f1:f8:fc:fb:b1:
41:8a:09:9c:09:e9:b2:d3:2e:a4:4a:57:f1:cd:f1:
b0:5d:9d:b8:a6:ef:7d:c5:82:67:e6:49:4f:65:9f:
03:2f:77:ce:59:ff:67:6c:6d:dc:88:4b:f2:ce:66:
ac:3d:88:2d:d6:ed:54:ed:67:8f:ec:eb:e0:e7:e5:
f0:1f:39:a6:52:03:17:0c:33:a5:ab:8a:86:ad:34:
f0:30:a4:b0:7e:a9:3d:2d:4e:95:2a:9a:39:96:63:
01:5d:24:c7:ca:3d:0a:1d:8e:22:be:4d:22:bf:e8:
f6:a2:f3:37:68:37:6d:04:d0:9c:a0:31:34:30:64:
a8:9c:37:a3:88:25:d8:fb:e6:73:10:54:66:73:29:
46:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:03:79:AD:71:F5:12:1E:15:64:02:70:42:13:ED:CD:33:30:24:B5
X509v3 Authority Key Identifier:
keyid:42:75:A1:F1:BC:69:28:2C:D0:F4:BD:33:F1:20:15:56:C6:6C:FD:58
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/D425E3D0D39D3B791BBAB46F7A1CA12216B2B3153818B7F5AC119883A15C3607/0/4275A1F1BC69282CD0F4BD33F1201556C66CFD58.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4275A1F1BC69282CD0F4BD33F1201556C66CFD58.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D425E3D0D39D3B791BBAB46F7A1CA12216B2B3153818B7F5AC119883A15C3607/0/3133382e39342e3132302e302f32322d3234203d3e203237383834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.94.120.0/22
Signature Algorithm: sha256WithRSAEncryption
5a:90:c2:41:49:d8:a2:bb:a5:87:de:ce:13:3e:10:a1:e1:b3:
0c:32:2c:ae:5e:70:54:5d:bb:5a:ac:6c:25:6c:5f:66:69:24:
9c:ae:b6:30:59:e5:1e:fc:5f:9c:41:ed:85:65:1e:1f:39:97:
52:f9:29:d5:0d:b9:b9:32:41:fa:88:16:f7:4c:78:ad:fa:61:
10:88:e2:97:54:a2:b7:6c:6b:4c:f0:93:98:16:28:a7:53:b5:
84:1c:04:ab:0b:c8:b0:cd:95:fc:56:46:cf:13:be:f0:c9:d2:
36:6f:bc:70:06:df:7e:44:c8:e0:d7:ba:2f:68:57:fc:90:b3:
be:77:2e:9e:69:1a:cc:05:3e:ca:07:e8:39:71:87:07:53:b5:
5d:95:54:25:c6:15:bf:8a:c3:f6:80:7d:a4:6b:d3:80:61:09:
03:2a:ac:59:66:a7:75:ba:17:83:87:56:3c:eb:28:7f:c1:bf:
bc:63:60:2e:5f:b0:24:65:70:a6:53:f5:5c:0c:af:c0:c1:e2:
fa:89:16:34:17:97:50:7c:1c:92:7d:f6:90:33:03:d4:48:de:
a6:93:d0:3a:82:7c:19:d0:77:77:5d:ba:3a:da:19:1d:bc:7e:
b1:ce:69:6b:32:bd:9b:1f:cf:3e:16:18:86:77:16:d5:5e:d3:
a4:04:da:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:15:32 2025 by rpki-client