Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E6E0C00B921CCCC53D273ACD6F3B25FA643983B1920778E10996AD10008779F1/0/3132382e3230312e3130382e302f32342d3234203d3e20323635373731.roa
File: 3132382e3230312e3130382e302f32342d3234203d3e20323635373731.roa (raw, json)
Hash identifier: +aObhKVPTqWP0o94g5AK/x32NQ7eBpCODlAMRkmm4sY=
Subject key identifier: F9:D1:7F:44:CA:93:92:E7:C0:3F:17:0A:0D:24:41:92:58:B6:91:D3
Certificate issuer: /CN=8DA9C456551A9FA4318565E4EF5BF4C6B5F9AAC3
Certificate serial: 31B424D066159CD0F2054E15E63FEC14370D7961
Authority key identifier: 8D:A9:C4:56:55:1A:9F:A4:31:85:65:E4:EF:5B:F4:C6:B5:F9:AA:C3
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8DA9C456551A9FA4318565E4EF5BF4C6B5F9AAC3.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/E6E0C00B921CCCC53D273ACD6F3B25FA643983B1920778E10996AD10008779F1/0/3132382e3230312e3130382e302f32342d3234203d3e20323635373731.roa
Signing time: Tue 04 Feb 2025 18:28:46 +0000
ROA not before: Tue 04 Feb 2025 18:23:46 +0000
ROA not after: Tue 03 Feb 2026 18:28:46 +0000
asID: 265771
IP address blocks: 128.201.108.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:b4:24:d0:66:15:9c:d0:f2:05:4e:15:e6:3f:ec:14:37:0d:79:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8DA9C456551A9FA4318565E4EF5BF4C6B5F9AAC3
Validity
Not Before: Feb 4 18:23:46 2025 GMT
Not After : Feb 3 18:28:46 2026 GMT
Subject: CN=F9D17F44CA9392E7C03F170A0D24419258B691D3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f1:f2:64:4f:af:6b:e0:75:bf:f8:70:45:00:
af:ea:19:af:fe:ef:2b:58:c6:e4:2b:b1:4a:c3:50:
69:ae:f1:90:11:37:b9:f4:06:e6:ce:0b:3f:8c:fe:
0c:31:81:1d:c2:ac:75:59:5f:15:59:b6:cc:f7:a6:
46:d9:58:0b:42:8c:e8:73:f4:03:67:b4:a1:70:c3:
6e:30:a9:31:4a:fb:aa:7e:11:f1:0a:aa:4d:4b:2a:
52:69:ca:92:28:f6:f9:7f:f0:15:b6:5a:12:1f:63:
00:5e:fb:ea:86:44:ea:2c:22:84:be:da:31:76:fd:
19:21:de:4e:3a:20:b2:5c:41:f5:52:96:db:94:1b:
46:a7:08:2a:7c:5c:02:9b:b0:69:22:d6:61:42:88:
1d:f8:bf:13:90:4e:f5:68:d7:b7:e7:49:e6:85:e9:
42:5c:34:de:68:9a:59:ba:cc:85:47:1c:8e:ae:85:
be:4a:e5:6d:46:15:d5:1f:c3:0a:0d:00:a8:bf:79:
a1:95:e0:28:6b:2f:8b:37:b5:06:12:0c:68:c1:8e:
3b:95:62:3d:4f:5d:65:c0:26:c5:23:b0:56:ef:a7:
b1:f3:b1:fe:b3:dc:42:31:09:ae:8b:f9:07:33:90:
46:5f:7b:b2:cb:f0:12:8d:d0:ce:09:f2:83:b2:05:
71:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:D1:7F:44:CA:93:92:E7:C0:3F:17:0A:0D:24:41:92:58:B6:91:D3
X509v3 Authority Key Identifier:
keyid:8D:A9:C4:56:55:1A:9F:A4:31:85:65:E4:EF:5B:F4:C6:B5:F9:AA:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/E6E0C00B921CCCC53D273ACD6F3B25FA643983B1920778E10996AD10008779F1/0/8DA9C456551A9FA4318565E4EF5BF4C6B5F9AAC3.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8DA9C456551A9FA4318565E4EF5BF4C6B5F9AAC3.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E6E0C00B921CCCC53D273ACD6F3B25FA643983B1920778E10996AD10008779F1/0/3132382e3230312e3130382e302f32342d3234203d3e20323635373731.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
128.201.108.0/24
Signature Algorithm: sha256WithRSAEncryption
61:68:59:07:f4:e3:5d:be:bb:d2:df:4c:68:bf:fa:01:86:e0:
1c:49:7f:fb:65:94:a3:e1:7f:e6:42:b9:e6:f0:62:21:e2:a2:
f2:8c:13:c2:b8:6c:0e:bb:2f:b9:bd:55:44:69:ce:59:25:a9:
bc:11:d0:ba:95:cb:b6:07:5b:7f:74:b1:f8:0e:09:a0:85:e7:
78:89:25:76:d2:c4:bc:53:5e:aa:c3:f4:ef:47:a6:d8:71:33:
91:e8:1d:54:ab:e4:99:62:a5:34:a4:4b:f7:eb:27:db:8b:92:
bb:b9:e5:6c:f4:a1:5c:70:a8:05:f5:be:46:ed:3b:93:f1:c7:
80:e1:8a:88:95:ba:e7:82:c8:8e:b3:73:84:63:c4:78:96:02:
95:65:4e:38:67:f6:11:56:a4:63:b5:d1:7a:5d:ae:ee:a2:df:
9e:5d:ca:72:04:1e:d7:f3:2e:c9:ef:f0:47:ae:ae:40:58:84:
23:25:9c:b7:65:21:be:ce:c6:15:1c:49:91:be:c4:07:6d:6f:
cc:e4:8e:26:87:b6:02:e2:4a:07:04:7c:33:f7:2e:3b:6d:0c:
b2:e9:4c:3d:73:f1:c8:c1:ed:4c:ab:41:32:62:07:6b:14:af:
1c:42:80:6c:50:ce:b8:e3:23:4a:ae:6e:63:26:18:a5:da:cf:
5c:35:e3:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:36:29 2025 by rpki-client