Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D65E1893FDCC5132303C1009DE26E0A2DDC1D27496D9B8398C71A0BEA2011930/0/3133312e3130382e36382e302f32322d3234203d3e203138373437.roa
File: 3133312e3130382e36382e302f32322d3234203d3e203138373437.roa (raw, json)
Hash identifier: xN1vzgMSLIZ4IGQ7FwR/hEnySyjHwqjHpvsFvj42YpE=
Subject key identifier: B5:DC:BF:BE:B7:2F:3A:1E:86:A4:6D:53:4F:FE:E8:5F:F1:B1:25:38
Certificate issuer: /CN=004955ADF0F751E6624FA8DEFBFE36E6DB305AD7
Certificate serial: 56A43621478CDBC0937A1D55F307117497F86430
Authority key identifier: 00:49:55:AD:F0:F7:51:E6:62:4F:A8:DE:FB:FE:36:E6:DB:30:5A:D7
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/004955ADF0F751E6624FA8DEFBFE36E6DB305AD7.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D65E1893FDCC5132303C1009DE26E0A2DDC1D27496D9B8398C71A0BEA2011930/0/3133312e3130382e36382e302f32322d3234203d3e203138373437.roa
Signing time: Tue 04 Feb 2025 18:55:58 +0000
ROA not before: Tue 04 Feb 2025 18:50:58 +0000
ROA not after: Tue 03 Feb 2026 18:55:58 +0000
asID: 18747
IP address blocks: 131.108.68.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:a4:36:21:47:8c:db:c0:93:7a:1d:55:f3:07:11:74:97:f8:64:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=004955ADF0F751E6624FA8DEFBFE36E6DB305AD7
Validity
Not Before: Feb 4 18:50:58 2025 GMT
Not After : Feb 3 18:55:58 2026 GMT
Subject: CN=B5DCBFBEB72F3A1E86A46D534FFEE85FF1B12538
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:5b:23:41:28:2a:cd:24:7a:18:f0:51:45:2e:
53:d8:22:2a:b2:39:36:ce:77:63:2f:0d:eb:75:d6:
0b:1a:e3:b9:7c:ac:cf:73:3a:0c:c4:3d:9b:4b:0e:
c0:07:c9:9e:e3:81:59:80:4e:5a:d7:f8:4d:e2:f6:
b8:c4:9c:22:07:89:c8:d2:6a:92:70:83:6e:88:30:
c2:5e:0a:d3:5b:a1:88:a4:5c:c6:be:6f:c7:11:c5:
68:66:48:f9:fb:92:66:13:1e:d1:3b:76:ba:02:8a:
a8:f8:5d:8b:cf:fb:3f:93:2d:ad:41:36:df:7c:6d:
cb:81:bf:db:37:98:55:86:29:6f:e0:15:65:92:ab:
bd:41:d5:7d:53:fc:74:e3:e5:73:6f:53:9c:15:e9:
0a:70:e6:17:15:72:ae:e5:25:d4:ca:2d:90:d9:05:
f8:a5:61:f1:69:0b:5d:b8:82:5b:50:bf:ac:e7:1e:
1f:6b:9f:5b:ef:92:4d:db:1c:23:f7:58:77:fa:23:
2e:dc:bc:30:69:38:45:20:97:12:4b:cb:ec:e4:06:
f4:ff:6b:30:d6:84:48:de:97:10:5a:9b:d3:05:82:
0d:d4:c4:11:05:8f:62:d0:d3:fa:43:2f:a2:85:a1:
d9:47:81:dc:86:14:d1:b5:c4:e3:a7:0c:da:1f:c2:
c2:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:DC:BF:BE:B7:2F:3A:1E:86:A4:6D:53:4F:FE:E8:5F:F1:B1:25:38
X509v3 Authority Key Identifier:
keyid:00:49:55:AD:F0:F7:51:E6:62:4F:A8:DE:FB:FE:36:E6:DB:30:5A:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/D65E1893FDCC5132303C1009DE26E0A2DDC1D27496D9B8398C71A0BEA2011930/0/004955ADF0F751E6624FA8DEFBFE36E6DB305AD7.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/004955ADF0F751E6624FA8DEFBFE36E6DB305AD7.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D65E1893FDCC5132303C1009DE26E0A2DDC1D27496D9B8398C71A0BEA2011930/0/3133312e3130382e36382e302f32322d3234203d3e203138373437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.108.68.0/22
Signature Algorithm: sha256WithRSAEncryption
22:3d:b8:49:41:50:79:3f:48:9f:27:54:34:18:d9:ce:07:df:
93:f5:71:a4:59:d6:25:94:86:18:5a:34:5e:ad:13:ee:71:de:
32:9f:06:93:e3:e5:b6:c6:fd:c5:4f:5f:37:0d:9a:37:98:f3:
55:f0:4a:82:38:65:49:6e:61:dc:1a:ee:26:c6:70:d4:81:89:
c2:7e:6d:1d:5e:52:74:c8:38:91:be:58:77:f9:32:82:9f:eb:
23:bd:e3:b6:a4:a8:25:05:0f:48:7f:16:f3:bf:1d:16:df:ad:
87:99:cf:d4:ea:13:7c:99:29:f2:a1:eb:5c:6b:cd:66:e2:25:
09:7d:88:1c:37:ab:50:71:58:de:e6:89:ea:ef:56:04:ea:d8:
2f:eb:f5:36:77:24:e6:f1:f9:5a:16:61:29:48:68:81:2e:ac:
9d:18:42:0d:86:1c:1a:78:f5:90:72:03:ff:e2:5b:f8:83:27:
66:32:ed:32:2d:39:42:b3:07:06:8f:d9:0f:bc:66:e1:fb:e0:
ef:b5:49:9a:e4:9f:09:e4:57:58:37:53:06:19:b5:85:e4:8e:
1e:75:94:ed:ac:75:fa:02:4c:c6:cd:f6:34:b3:60:d3:e7:d5:
7f:7e:e2:c8:98:74:36:23:c6:77:d2:2d:17:96:a4:65:18:6f:
49:2b:09:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:36:56 2025 by rpki-client