Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/3230312e3135312e3137382e302f32342d3234203d3e20323635363135.roa
File: 3230312e3135312e3137382e302f32342d3234203d3e20323635363135.roa (raw, json)
Hash identifier: w/EsY5e8Jk2U0e5O7VtiBXcjcPq2nH2wuv/LYlfNDP8=
Subject key identifier: 3A:F7:CD:07:B0:0F:DC:87:93:CF:E8:F2:4C:13:24:7A:F5:93:A9:D5
Certificate issuer: /CN=E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15
Certificate serial: 30CC1647E5A4BF5F74F78F52D52396FC1793F09E
Authority key identifier: E3:5D:D2:93:E1:C3:BC:5F:4D:E1:53:18:FA:C5:96:7E:7D:55:BF:15
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/3230312e3135312e3137382e302f32342d3234203d3e20323635363135.roa
Signing time: Tue 04 Feb 2025 18:52:43 +0000
ROA not before: Tue 04 Feb 2025 18:47:43 +0000
ROA not after: Tue 03 Feb 2026 18:52:43 +0000
asID: 265615
IP address blocks: 201.151.178.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:cc:16:47:e5:a4:bf:5f:74:f7:8f:52:d5:23:96:fc:17:93:f0:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15
Validity
Not Before: Feb 4 18:47:43 2025 GMT
Not After : Feb 3 18:52:43 2026 GMT
Subject: CN=3AF7CD07B00FDC8793CFE8F24C13247AF593A9D5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:91:5a:22:47:8b:15:ed:6a:7d:51:8f:77:42:
43:48:48:43:23:87:1c:33:6f:f9:27:85:f0:1f:b4:
09:3f:5d:9e:94:52:58:61:30:66:05:f8:88:9d:9a:
e4:da:d7:68:ce:ce:5e:96:27:b0:28:b4:f6:80:fa:
57:d2:96:38:d3:e4:46:e8:0d:99:8e:e3:66:84:fd:
c0:2a:b7:4c:d7:de:56:ab:da:20:31:7d:ea:37:68:
87:6c:55:20:2b:28:92:0e:77:87:4d:83:16:b0:1a:
a3:5a:d9:1e:aa:53:b9:9c:3b:b4:4d:58:8b:9d:99:
2e:a1:a7:dd:e4:75:09:70:f3:ba:06:98:5f:ac:53:
9a:20:c5:fc:5d:28:af:fe:2c:01:4b:5d:7d:97:eb:
2e:ed:be:33:8c:6e:bd:ab:2a:d3:93:82:8c:c4:75:
3b:36:fe:dc:ef:4a:4b:5b:c1:f8:87:07:3c:ca:da:
0f:d0:80:67:d9:f0:85:1f:c6:c5:3c:b7:89:48:66:
ce:4b:29:2c:3b:ea:d0:15:6c:7c:d1:f3:d0:21:f4:
ef:71:2b:68:20:1a:46:52:46:49:18:fc:d2:df:fd:
52:70:6c:bc:f2:d8:87:61:a3:dc:6f:0e:f3:dd:e4:
89:79:18:39:12:a2:4f:bf:df:e1:69:e9:70:ea:17:
d2:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:F7:CD:07:B0:0F:DC:87:93:CF:E8:F2:4C:13:24:7A:F5:93:A9:D5
X509v3 Authority Key Identifier:
keyid:E3:5D:D2:93:E1:C3:BC:5F:4D:E1:53:18:FA:C5:96:7E:7D:55:BF:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/3230312e3135312e3137382e302f32342d3234203d3e20323635363135.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.151.178.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:be:ea:37:86:b1:73:7e:88:b9:46:58:36:c8:f5:e1:41:56:
1a:17:9c:38:d1:58:11:33:2b:73:c7:10:fb:de:b2:ba:bf:57:
99:df:08:75:c6:e2:9b:48:3c:ff:7f:27:4a:ac:90:59:06:2d:
02:db:9e:2e:76:9c:15:d0:0a:6b:1c:12:24:6d:8c:e6:74:26:
7f:42:66:89:f3:d8:66:35:32:d5:fd:13:fd:a6:34:2d:da:90:
da:11:d7:0d:f8:f2:56:35:48:b2:a4:4f:3d:71:f8:c5:41:bb:
c8:8c:0d:30:ef:b1:80:e4:0a:da:c0:6c:1d:1b:7b:32:1e:28:
9b:64:d6:91:cb:ff:0e:2c:d8:84:99:87:e0:f0:54:75:da:e6:
8b:49:cd:4e:48:5c:86:00:44:01:a1:6e:71:4b:cf:96:b9:24:
f8:64:d4:c4:33:95:06:3c:4c:27:11:8b:b7:9f:7a:27:98:cd:
d3:c3:be:68:d8:ef:8d:e9:aa:c9:1e:5b:ed:45:b2:20:27:68:
ca:83:92:d5:39:af:5a:d4:df:a0:bd:ce:a7:0a:5e:db:8b:65:
d7:2d:54:ae:95:49:70:34:5a:29:45:db:98:bb:f2:ca:09:43:
06:d0:ff:54:6b:cc:1d:b0:87:d9:64:64:55:79:b9:77:b6:04:
f2:5e:46:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:55:49 2025 by rpki-client