Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E08D933682F688ED8C36D0FC1F34B68315053D3F371F684B9A387A5FA6709F17/0/3137302e3235342e32392e302f32342d3234203d3e20323634373436.roa
File: 3137302e3235342e32392e302f32342d3234203d3e20323634373436.roa (raw, json)
Hash identifier: 3pqAQHjGKjdoP3j/nS3170EYvSTW2HX1p128muxhRzI=
Subject key identifier: A7:3D:C9:37:3D:AC:53:F4:21:83:0D:FB:34:CA:F7:60:08:EA:6C:8A
Certificate issuer: /CN=DF4F03C5770C7BA39912813367B5E868005CCD99
Certificate serial: 5FB9E983C0CB343FD3488DBAFB0450C13BD55468
Authority key identifier: DF:4F:03:C5:77:0C:7B:A3:99:12:81:33:67:B5:E8:68:00:5C:CD:99
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DF4F03C5770C7BA39912813367B5E868005CCD99.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/E08D933682F688ED8C36D0FC1F34B68315053D3F371F684B9A387A5FA6709F17/0/3137302e3235342e32392e302f32342d3234203d3e20323634373436.roa
Signing time: Tue 04 Feb 2025 20:04:51 +0000
ROA not before: Tue 04 Feb 2025 19:59:51 +0000
ROA not after: Tue 03 Feb 2026 20:04:51 +0000
asID: 264746
IP address blocks: 170.254.29.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:b9:e9:83:c0:cb:34:3f:d3:48:8d:ba:fb:04:50:c1:3b:d5:54:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DF4F03C5770C7BA39912813367B5E868005CCD99
Validity
Not Before: Feb 4 19:59:51 2025 GMT
Not After : Feb 3 20:04:51 2026 GMT
Subject: CN=A73DC9373DAC53F421830DFB34CAF76008EA6C8A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:71:9e:e3:9d:c0:c8:fc:18:79:31:7f:63:e8:
c5:71:0c:23:38:4b:33:98:46:b1:28:f3:ac:6f:b0:
c5:cc:b3:a1:e1:87:c6:2d:ba:c0:c1:a1:8e:82:0b:
30:45:66:36:c0:3e:35:5c:a8:4f:12:f5:07:f6:35:
e7:79:c8:6f:39:55:a0:c7:9c:64:25:e4:7f:22:92:
d2:d4:d8:c3:ff:4c:9a:f9:00:87:46:6f:29:07:81:
8b:6d:1e:be:c3:0d:ef:a8:16:8a:a4:a0:69:b7:3e:
99:b8:2f:86:4e:ca:12:fd:a6:d2:e5:80:ad:fa:fa:
39:2d:17:ca:c8:d0:01:b8:b9:77:8c:60:4e:f7:6c:
f6:2c:24:40:15:40:4d:aa:72:4d:bd:b1:7e:fd:e6:
43:fe:3f:e8:17:24:f3:67:24:08:e6:93:fb:06:eb:
1d:7f:e2:4d:5d:85:15:82:c6:04:b0:99:4c:49:da:
14:24:bf:30:61:98:08:6c:97:53:26:e5:ed:3a:b2:
f8:64:e1:b8:4d:67:39:60:9d:0e:9c:35:7b:e3:3c:
de:f8:88:88:bd:44:48:7a:46:95:10:45:d6:62:de:
23:b9:5a:21:02:dc:75:e7:ab:7d:f9:7c:99:4a:f7:
63:7c:62:01:90:6c:f4:ad:5f:c4:82:66:90:c1:63:
ab:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:3D:C9:37:3D:AC:53:F4:21:83:0D:FB:34:CA:F7:60:08:EA:6C:8A
X509v3 Authority Key Identifier:
keyid:DF:4F:03:C5:77:0C:7B:A3:99:12:81:33:67:B5:E8:68:00:5C:CD:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/E08D933682F688ED8C36D0FC1F34B68315053D3F371F684B9A387A5FA6709F17/0/DF4F03C5770C7BA39912813367B5E868005CCD99.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DF4F03C5770C7BA39912813367B5E868005CCD99.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E08D933682F688ED8C36D0FC1F34B68315053D3F371F684B9A387A5FA6709F17/0/3137302e3235342e32392e302f32342d3234203d3e20323634373436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.254.29.0/24
Signature Algorithm: sha256WithRSAEncryption
39:1e:85:b8:06:7f:c3:21:6f:ea:f3:54:bb:be:f3:ca:3b:8c:
09:f8:f1:f5:69:a9:16:14:57:f8:bb:55:42:96:51:11:56:fb:
fb:13:43:74:fc:7c:50:44:13:76:37:7e:b7:78:88:ac:aa:eb:
d2:c0:55:4d:ab:a5:e9:1d:99:ec:b2:01:1f:6c:cc:f9:f6:f8:
cb:d2:1e:fd:60:6e:fb:24:3d:84:2b:d9:d0:a9:81:69:12:93:
28:68:e4:51:df:40:d8:24:6f:ca:ae:4b:23:23:49:98:47:37:
58:4d:f8:3b:15:40:52:39:ac:79:a2:7f:8d:a7:d4:23:cb:a7:
f5:57:f2:8e:09:d7:51:bb:4b:0d:af:76:99:c8:38:ed:8a:05:
5e:a4:6f:ef:1c:a0:35:45:15:b0:eb:ab:61:fc:6a:45:6d:f5:
ff:f2:2b:fa:3d:88:8c:86:f9:c9:a6:fd:de:02:8a:52:a6:b6:
a0:65:a7:54:52:21:7a:94:a9:f3:77:25:f4:4b:be:6a:6b:61:
86:4a:4d:e2:fe:ce:f9:e1:b0:de:48:7b:07:2f:59:04:61:bf:
c6:b8:3f:82:a3:88:70:a4:b1:80:78:00:96:c6:83:40:77:8c:
df:c9:45:07:51:bb:64:b8:db:81:fc:49:fb:96:bb:ca:ff:92:
57:44:f3:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:58:52 2025 by rpki-client