Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D55ACDDF47E4A075D61197B1AE6007754B50DC828C73BBC692CDC7D225EFD800/0/3231332e3233362e362e302f32342d3234203d3e203332373837.roa
File: 3231332e3233362e362e302f32342d3234203d3e203332373837.roa (raw, json)
Hash identifier: vx17XQrT5FgTDsyBO3Uc48UCp7Lv5wHYU9YpbSs0ko4=
Subject key identifier: 5C:53:57:3A:B9:42:FD:78:A9:FA:D2:41:DF:29:C2:3D:6F:8C:B3:DE
Certificate issuer: /CN=BE957D4790B53F8EB46A62C1A40A7C9D7E4DB030
Certificate serial: 70D04EA1B7D3BE31666DF8D3E3DABCE35C7550CC
Authority key identifier: BE:95:7D:47:90:B5:3F:8E:B4:6A:62:C1:A4:0A:7C:9D:7E:4D:B0:30
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BE957D4790B53F8EB46A62C1A40A7C9D7E4DB030.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D55ACDDF47E4A075D61197B1AE6007754B50DC828C73BBC692CDC7D225EFD800/0/3231332e3233362e362e302f32342d3234203d3e203332373837.roa
Signing time: Tue 28 Jan 2025 14:40:00 +0000
ROA not before: Tue 28 Jan 2025 14:35:00 +0000
ROA not after: Tue 27 Jan 2026 14:40:00 +0000
asID: 32787
IP address blocks: 213.236.6.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:d0:4e:a1:b7:d3:be:31:66:6d:f8:d3:e3:da:bc:e3:5c:75:50:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BE957D4790B53F8EB46A62C1A40A7C9D7E4DB030
Validity
Not Before: Jan 28 14:35:00 2025 GMT
Not After : Jan 27 14:40:00 2026 GMT
Subject: CN=5C53573AB942FD78A9FAD241DF29C23D6F8CB3DE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:5b:81:d0:ae:9b:c4:da:02:4c:84:e2:7f:4c:
a4:34:66:ed:07:c2:4f:ba:4d:ac:35:18:c4:3a:83:
1d:ba:0f:f3:67:a5:45:07:9e:3d:db:e6:43:4d:d1:
72:11:32:bd:68:ab:f7:6d:98:aa:e1:4b:e7:14:e8:
5a:27:84:d6:97:fd:de:0f:61:85:08:ba:bb:bb:29:
05:fd:45:ff:37:4d:70:66:1c:6a:f5:46:bd:67:80:
0e:9b:2f:30:8a:b9:fb:da:b1:a8:ac:4c:10:05:9b:
8b:79:9d:df:93:7b:86:fc:2f:3c:2f:7e:3f:5a:ce:
58:d3:3a:f8:9d:d2:60:1c:e7:87:b2:0d:4c:e1:24:
09:77:e2:09:15:09:9a:16:dc:24:bc:ea:d9:fa:6f:
41:f6:5e:03:ea:f2:3e:47:92:26:21:8b:da:01:91:
4a:28:86:67:3c:69:41:f0:52:56:ea:09:9c:45:f4:
e7:06:ed:9a:ac:44:0b:5e:20:a2:54:68:3d:2d:4f:
f1:f8:37:a2:cb:da:47:28:d0:b0:a4:11:95:f4:0c:
4e:0d:f6:7f:df:06:94:3e:d9:9f:bc:25:38:5a:36:
77:4f:3f:4b:02:95:03:6e:cc:dd:e5:d8:6a:75:5c:
31:78:4e:53:f9:d9:1b:a3:35:09:94:5f:d0:d9:04:
5a:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:53:57:3A:B9:42:FD:78:A9:FA:D2:41:DF:29:C2:3D:6F:8C:B3:DE
X509v3 Authority Key Identifier:
keyid:BE:95:7D:47:90:B5:3F:8E:B4:6A:62:C1:A4:0A:7C:9D:7E:4D:B0:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/D55ACDDF47E4A075D61197B1AE6007754B50DC828C73BBC692CDC7D225EFD800/0/BE957D4790B53F8EB46A62C1A40A7C9D7E4DB030.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BE957D4790B53F8EB46A62C1A40A7C9D7E4DB030.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D55ACDDF47E4A075D61197B1AE6007754B50DC828C73BBC692CDC7D225EFD800/0/3231332e3233362e362e302f32342d3234203d3e203332373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.236.6.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:4d:f5:a8:17:f7:a3:db:b3:8d:4d:86:5f:5e:50:da:c6:d6:
6c:96:0a:64:00:8c:16:c1:9c:31:7b:a7:c2:0c:d3:51:0b:67:
a0:ca:7a:97:f1:ea:60:c4:09:74:42:99:f0:8b:4a:81:63:9f:
a8:5c:9b:cc:e6:1a:94:9d:b2:4f:3b:17:ba:98:da:43:9e:39:
23:d0:3a:b4:dd:ff:28:d9:de:d6:49:d3:72:f6:ec:8e:53:ae:
86:d0:41:40:2a:71:1d:fe:5f:d8:0a:89:b2:14:0f:41:4a:b2:
38:f6:db:d6:26:79:87:61:7a:ec:97:06:c1:6e:b6:17:b0:41:
82:01:1f:d4:68:d0:94:78:f7:5e:26:b7:f0:e1:8c:8e:82:40:
96:3b:9d:e7:c9:52:f1:9c:ed:9d:da:02:04:cf:83:14:43:a8:
d2:7d:10:1e:91:97:96:60:95:75:36:64:f8:50:37:1b:f1:11:
3e:dd:a4:45:e0:18:9b:94:1e:78:fb:15:ff:8a:c7:30:58:55:
0d:05:aa:00:f0:4f:26:e8:4c:3a:b5:17:c6:9a:7e:17:b0:99:
1f:5e:f8:59:3c:e0:bd:13:f8:0b:82:00:5d:dc:f7:3c:1e:12:
4f:d0:38:0e:c1:b9:d3:21:f0:59:72:47:b0:26:2e:12:42:75:
41:d9:03:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 22 21:01:12 2025 by rpki-client