Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D80FD0D5746E4486974F87F0B58AA3D22DF7A9D340037E73D5DA44A391EE2640/0/3136382e3232372e3132382e302f32322d3234203d3e203232383639.roa
File: 3136382e3232372e3132382e302f32322d3234203d3e203232383639.roa (raw, json)
Hash identifier: g0FM6pQI2dDACIupcag5hGca+MhuyQexVMxracQ8kbo=
Subject key identifier: 72:37:76:08:1C:9C:EE:A0:2D:81:DF:16:0A:AC:2A:DA:33:2E:D8:06
Certificate issuer: /CN=231411337300474BC5489725C8707684F70A876D
Certificate serial: 5D0DD78977725527FB873D2FD26E9119782D225D
Authority key identifier: 23:14:11:33:73:00:47:4B:C5:48:97:25:C8:70:76:84:F7:0A:87:6D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/231411337300474BC5489725C8707684F70A876D.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D80FD0D5746E4486974F87F0B58AA3D22DF7A9D340037E73D5DA44A391EE2640/0/3136382e3232372e3132382e302f32322d3234203d3e203232383639.roa
Signing time: Tue 04 Feb 2025 18:24:02 +0000
ROA not before: Tue 04 Feb 2025 18:19:02 +0000
ROA not after: Tue 03 Feb 2026 18:24:02 +0000
asID: 22869
IP address blocks: 168.227.128.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:0d:d7:89:77:72:55:27:fb:87:3d:2f:d2:6e:91:19:78:2d:22:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=231411337300474BC5489725C8707684F70A876D
Validity
Not Before: Feb 4 18:19:02 2025 GMT
Not After : Feb 3 18:24:02 2026 GMT
Subject: CN=723776081C9CEEA02D81DF160AAC2ADA332ED806
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:9e:76:5d:c4:91:1f:0f:c5:5b:58:e1:cd:ed:
97:3d:fc:c8:bb:e8:be:f9:57:56:73:6e:b4:13:ff:
21:c3:69:a9:12:cf:39:d4:83:94:5a:33:ba:1e:b2:
36:18:f1:7b:f5:e9:15:fa:00:f1:e7:01:68:90:ad:
0c:31:64:67:96:4d:20:d2:0a:ce:43:f9:c9:6e:fe:
a5:fc:31:1e:1a:ed:19:7f:64:bf:a0:ef:a1:df:ad:
68:1a:4b:29:f8:b6:3a:6e:08:21:53:62:53:0c:06:
5d:92:75:9b:0d:1c:0b:66:20:48:9d:c6:1f:ad:d3:
16:66:2f:9f:5e:f7:8a:00:8e:b3:49:e1:d7:e1:4e:
8e:c6:c4:88:a6:a3:35:07:5e:5f:fc:2d:1d:28:94:
29:bb:95:83:95:a1:95:f7:a1:7b:87:e4:44:87:c8:
ba:44:8c:20:7c:66:4d:f7:39:13:c1:34:7e:ae:27:
b8:e7:2c:ef:c6:c6:50:a1:e9:0b:be:aa:85:e9:84:
40:90:27:b1:10:02:80:12:06:c6:d0:e7:df:9b:d8:
0c:32:ee:72:a2:19:55:bb:14:c9:5b:f7:69:51:46:
e0:21:26:c9:59:56:27:ac:86:b5:eb:6a:e7:05:9a:
26:63:d3:4c:18:28:e5:33:d3:a6:91:cb:f3:b2:b8:
70:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:37:76:08:1C:9C:EE:A0:2D:81:DF:16:0A:AC:2A:DA:33:2E:D8:06
X509v3 Authority Key Identifier:
keyid:23:14:11:33:73:00:47:4B:C5:48:97:25:C8:70:76:84:F7:0A:87:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/D80FD0D5746E4486974F87F0B58AA3D22DF7A9D340037E73D5DA44A391EE2640/0/231411337300474BC5489725C8707684F70A876D.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/231411337300474BC5489725C8707684F70A876D.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D80FD0D5746E4486974F87F0B58AA3D22DF7A9D340037E73D5DA44A391EE2640/0/3136382e3232372e3132382e302f32322d3234203d3e203232383639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.227.128.0/22
Signature Algorithm: sha256WithRSAEncryption
1b:41:32:96:83:6d:b5:df:d3:0f:6b:9c:88:fc:07:2e:b5:9d:
d3:1f:16:ed:8b:a2:4e:1c:a6:01:cf:d0:8f:42:4d:d8:77:b0:
c8:a9:b5:37:11:1f:c1:50:cf:0d:48:53:8a:47:0d:7b:52:ec:
57:71:42:b6:c2:92:5a:f4:d8:b9:e7:75:11:ba:71:b4:f4:4b:
e7:5f:67:d5:e9:ae:fe:77:1b:64:1e:e8:2b:c8:50:12:6c:08:
70:ab:23:b0:77:8d:c9:f8:0f:4e:b7:00:1c:dc:a1:b8:16:05:
12:f4:0a:7c:b4:15:d1:47:10:2e:6a:cb:09:53:a2:47:e7:8d:
81:79:83:14:c9:fb:17:12:59:ad:de:32:47:95:a6:d3:c7:3c:
7d:fb:09:ef:94:a6:f3:f5:08:05:55:c0:91:25:17:02:b8:af:
ea:3c:b4:cd:61:79:96:e7:60:b1:f2:b2:4d:1e:8f:e5:fc:2a:
24:39:aa:40:05:81:27:70:6d:cd:20:c4:ff:77:89:3b:bf:6b:
eb:c7:f6:43:94:87:94:0e:e8:c2:e8:06:00:66:ec:3c:59:aa:
02:73:96:f6:34:4d:52:1b:f1:7a:54:68:a4:6f:25:7e:0e:5f:
46:21:2a:1d:1e:eb:f6:6c:96:be:e3:fb:87:bd:4c:6e:e2:79:
15:4e:08:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 16:42:40 2025 by rpki-client