Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3137392e32302e3132382e302f31372d3137203d3e2036333036.roa
File: 3137392e32302e3132382e302f31372d3137203d3e2036333036.roa (raw, json)
Hash identifier: zYUcYCmHsUXRJJ8s063qorRCr1xBmqkAjaz7PfFn51M=
Subject key identifier: 06:93:02:6F:5A:23:12:A1:04:C0:75:29:9E:CD:61:04:C7:97:31:37
Certificate issuer: /CN=35705A9ED706FD45725A72D9D83EF1D9B9A12E9C
Certificate serial: 4DCC8F45CAF4DF31CAEDB4C0FE4BB884832B9BE2
Authority key identifier: 35:70:5A:9E:D7:06:FD:45:72:5A:72:D9:D8:3E:F1:D9:B9:A1:2E:9C
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3137392e32302e3132382e302f31372d3137203d3e2036333036.roa
Signing time: Tue 04 Feb 2025 18:33:08 +0000
ROA not before: Tue 04 Feb 2025 18:28:08 +0000
ROA not after: Tue 03 Feb 2026 18:33:08 +0000
asID: 6306
IP address blocks: 179.20.128.0/17 maxlen: 17
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:cc:8f:45:ca:f4:df:31:ca:ed:b4:c0:fe:4b:b8:84:83:2b:9b:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35705A9ED706FD45725A72D9D83EF1D9B9A12E9C
Validity
Not Before: Feb 4 18:28:08 2025 GMT
Not After : Feb 3 18:33:08 2026 GMT
Subject: CN=0693026F5A2312A104C075299ECD6104C7973137
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:d9:d1:02:50:80:33:69:c0:eb:9b:34:3a:29:
87:19:0c:0d:fe:05:87:b1:44:bb:54:0d:50:da:84:
01:e0:f5:84:66:8f:44:73:1f:55:77:4b:99:10:69:
a0:8d:97:1a:61:43:4f:b5:a1:70:e6:da:cb:e5:39:
65:6c:ac:00:75:68:aa:ba:82:f8:17:99:49:91:cd:
e7:97:ea:d2:40:f9:93:ef:27:e2:22:7b:97:71:a1:
df:5e:3a:df:7b:ef:8d:aa:86:b1:f7:d9:cf:51:04:
da:9d:b6:79:30:55:2e:c5:f8:9e:08:40:1f:1b:60:
4d:0e:57:81:04:64:5a:11:53:65:c5:e6:3b:70:d1:
14:e4:13:0f:8f:81:d8:04:7a:d2:ba:08:ef:af:3e:
26:66:aa:2f:f3:3b:66:23:d5:d3:65:27:5b:58:e2:
86:24:fe:fc:6f:9a:43:cd:b9:84:1a:88:d8:8e:1b:
1f:bc:49:fb:92:13:42:e0:16:f7:af:de:26:24:b2:
cb:65:47:f0:70:38:c7:70:3c:f2:ca:59:09:e2:a9:
96:47:9e:1c:28:25:b5:ad:19:a0:14:9a:f2:95:10:
fe:97:5f:17:09:ac:81:32:4a:58:95:44:1e:88:f2:
fe:9c:c7:9c:fe:9c:11:e3:59:41:28:a2:c3:2f:d7:
04:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:93:02:6F:5A:23:12:A1:04:C0:75:29:9E:CD:61:04:C7:97:31:37
X509v3 Authority Key Identifier:
keyid:35:70:5A:9E:D7:06:FD:45:72:5A:72:D9:D8:3E:F1:D9:B9:A1:2E:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3137392e32302e3132382e302f31372d3137203d3e2036333036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.20.128.0/17
Signature Algorithm: sha256WithRSAEncryption
87:3c:9c:d1:85:cc:5c:16:0b:4c:db:72:b5:26:3b:1c:6e:2d:
38:42:13:44:26:56:d7:7d:15:20:9a:93:e3:e7:d2:39:e8:cc:
23:1a:a7:4b:02:93:01:45:2e:b1:67:89:4b:bc:d1:2f:a1:02:
ee:f4:1f:2e:25:e0:1b:c6:41:8b:be:4a:65:cb:34:1f:67:53:
0f:c0:bc:09:47:cc:16:d0:03:ac:a1:57:f5:e8:32:44:7e:94:
f6:4c:3a:d7:9b:aa:28:12:39:2e:51:5b:fc:91:e7:e8:e7:10:
b2:2e:4e:b9:02:c6:a3:d8:a4:ea:63:e5:88:06:53:10:40:36:
bb:5a:71:b5:b1:31:c3:96:5d:30:91:f1:61:c3:b6:06:12:18:
a2:23:c1:6b:3d:ac:81:fd:25:c7:06:cf:eb:6c:2a:9b:0e:28:
9f:b0:e8:70:d7:08:8e:5c:54:90:5e:c2:9b:00:e8:34:31:54:
88:86:60:c6:75:3c:73:1e:37:c6:00:a7:b1:20:ec:10:d3:7a:
92:0a:7e:d9:b6:6b:8c:6e:96:98:3c:cb:1f:68:26:b9:f7:01:
8f:3e:bd:75:55:e6:a1:dc:59:9b:65:8c:ef:70:ac:6d:b2:3c:
69:44:86:be:8b:42:a6:45:b6:4b:9a:1c:92:72:4b:d6:8f:14:
e3:a0:7d:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:52:02 2025 by rpki-client