Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3137392e382e302e302f31352d3234203d3e203136363239.roa
File: 3137392e382e302e302f31352d3234203d3e203136363239.roa (raw, json)
Hash identifier: XJ3brib2snJdLhX0plWgfxlyNf2Vngfq5ZwSCwpBebU=
Subject key identifier: 99:19:8E:AD:F3:9C:2A:BD:53:E7:3F:7F:DF:A2:D4:92:5A:A2:47:94
Certificate issuer: /CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661
Certificate serial: 7D3F476C7B7D6975B608E62AE40F15523D4D3E4E
Authority key identifier: 25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3137392e382e302e302f31352d3234203d3e203136363239.roa
Signing time: Tue 04 Feb 2025 18:29:48 +0000
ROA not before: Tue 04 Feb 2025 18:24:48 +0000
ROA not after: Tue 03 Feb 2026 18:29:48 +0000
asID: 16629
IP address blocks: 179.8.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:3f:47:6c:7b:7d:69:75:b6:08:e6:2a:e4:0f:15:52:3d:4d:3e:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661
Validity
Not Before: Feb 4 18:24:48 2025 GMT
Not After : Feb 3 18:29:48 2026 GMT
Subject: CN=99198EADF39C2ABD53E73F7FDFA2D4925AA24794
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:13:fe:bf:65:ab:e0:d2:c0:bf:d6:8e:00:5a:
7c:8a:29:e1:2d:9e:95:20:79:a3:52:9d:b8:f0:11:
f3:4b:14:5b:78:6b:74:a2:d4:ed:81:58:f6:c1:09:
7e:2d:73:89:05:c5:d8:bd:09:fa:ba:36:90:22:01:
a7:26:aa:36:48:4a:3e:4d:76:5f:53:ee:3a:01:d1:
10:23:16:d5:95:18:22:32:d8:96:ed:ba:ed:57:7c:
ca:71:8b:d8:27:dd:6b:e2:41:dd:aa:21:38:77:20:
f1:f5:8a:67:1a:9a:fa:23:73:aa:bf:f1:41:01:bf:
32:47:00:77:6a:4a:19:ae:5b:85:22:2b:9d:ca:fa:
23:49:39:9a:25:54:a1:8d:b5:25:b2:f2:0d:f6:4d:
13:5f:05:46:e9:45:22:c1:c9:61:44:a2:04:7b:56:
d2:d5:a8:9a:7f:91:a7:65:0f:40:82:a4:91:68:c7:
a3:2c:ce:52:ba:50:fb:ac:37:b4:a0:79:30:08:5b:
07:bb:86:1c:a5:8d:43:b9:a0:7e:fd:bb:75:8c:c9:
b0:48:c8:84:18:57:1c:bc:f0:bd:fe:35:c3:94:76:
98:5d:e1:9b:04:df:f1:8c:24:c3:ba:21:14:fc:67:
52:f1:be:1e:b2:96:47:fa:7a:40:c5:e3:49:3a:65:
27:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:19:8E:AD:F3:9C:2A:BD:53:E7:3F:7F:DF:A2:D4:92:5A:A2:47:94
X509v3 Authority Key Identifier:
keyid:25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3137392e382e302e302f31352d3234203d3e203136363239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.8.0.0/15
Signature Algorithm: sha256WithRSAEncryption
8c:26:b8:99:9b:99:3b:99:ef:86:e5:23:ae:a8:55:fe:b1:e8:
80:15:03:05:4f:d4:62:10:d8:73:8d:c5:12:c4:00:94:e8:8e:
6b:e1:22:1c:96:80:89:78:13:3f:5d:ee:30:39:3f:71:71:94:
07:d6:ad:93:5a:5c:7c:f0:86:1d:87:32:42:31:22:e2:9a:c6:
5f:29:ce:3e:5e:74:1e:63:53:51:fb:9f:ef:0d:ac:0b:96:ee:
3b:de:1f:cd:cf:06:dc:13:9b:da:91:2c:54:64:c2:c8:05:3f:
dc:e7:e5:fc:7f:f6:9d:66:e9:67:09:0d:aa:89:c6:03:71:46:
f6:10:92:7b:ec:d4:5a:80:cd:27:f1:6b:d2:9f:46:88:63:e0:
e8:91:fa:78:6e:56:73:61:2a:84:3d:12:11:93:0b:5d:01:4e:
dd:05:70:20:24:e0:28:bc:25:77:8e:b1:2c:48:ac:2f:b8:05:
66:f2:b8:18:70:11:99:35:85:24:e6:a0:7c:22:db:77:06:6c:
d0:68:30:be:df:29:f9:e9:3a:34:b7:1e:94:3b:34:d5:b2:59:
ee:6b:c0:21:aa:a5:c6:72:02:78:83:d2:43:a7:e8:b1:5a:61:
da:17:01:c6:f2:e5:05:b5:37:53:26:73:8e:a8:8a:19:82:41:
51:33:0d:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:10:45 2025 by rpki-client