Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E8CFC117FB618BA5DCE1E251E113BF1DCE6C1BF6E9BF6F4914AE8095934C31E7/0/3137302e37392e3134342e302f32322d3232203d3e20323634373530.roa
File: 3137302e37392e3134342e302f32322d3232203d3e20323634373530.roa (raw, json)
Hash identifier: c4P2hvlN9OgZez5ZoY7ibIg1sIPxJ/Mefq+Jqe/Ej8A=
Subject key identifier: 29:CA:6E:E9:D6:89:7A:9D:62:C1:E5:F0:F2:79:7B:02:EC:EF:B6:EE
Certificate issuer: /CN=4DE953D0DBB7E793914D04C32D69DD64097568ED
Certificate serial: 16DD04FA12686607FAC7E3D2821FDEAD77F92931
Authority key identifier: 4D:E9:53:D0:DB:B7:E7:93:91:4D:04:C3:2D:69:DD:64:09:75:68:ED
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4DE953D0DBB7E793914D04C32D69DD64097568ED.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/E8CFC117FB618BA5DCE1E251E113BF1DCE6C1BF6E9BF6F4914AE8095934C31E7/0/3137302e37392e3134342e302f32322d3232203d3e20323634373530.roa
Signing time: Tue 04 Feb 2025 18:05:31 +0000
ROA not before: Tue 04 Feb 2025 18:00:31 +0000
ROA not after: Tue 03 Feb 2026 18:05:31 +0000
asID: 264750
IP address blocks: 170.79.144.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:dd:04:fa:12:68:66:07:fa:c7:e3:d2:82:1f:de:ad:77:f9:29:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4DE953D0DBB7E793914D04C32D69DD64097568ED
Validity
Not Before: Feb 4 18:00:31 2025 GMT
Not After : Feb 3 18:05:31 2026 GMT
Subject: CN=29CA6EE9D6897A9D62C1E5F0F2797B02ECEFB6EE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:73:bd:b1:45:39:2e:49:0d:84:61:b3:c7:21:
88:ae:30:94:04:d0:3b:cd:a4:ec:49:68:ce:92:b1:
82:f0:b1:b2:1d:0d:0b:cd:c1:c3:d2:a0:c2:36:b6:
0a:94:d2:bb:16:b0:86:5b:46:b3:7e:3b:aa:89:62:
7e:34:6c:b3:64:d9:e4:ae:dd:7c:aa:45:e0:17:c0:
9a:6b:fd:63:e3:6e:64:d2:4e:b0:26:13:97:3e:3c:
93:47:50:3c:81:ce:c2:b9:4c:65:e2:47:ad:f1:c6:
24:10:3b:96:c8:f3:a9:ea:8e:2e:26:af:b8:fe:c1:
95:66:65:29:ad:08:26:74:d0:7c:b6:4d:37:a7:5c:
d7:fa:75:f4:ae:62:ef:dc:47:65:70:c4:eb:0d:43:
37:74:2b:f4:7d:a9:b1:5e:05:ee:4e:3d:1f:a1:58:
eb:23:42:b4:5c:f6:7b:cd:38:c9:e7:7a:e3:77:4d:
48:1c:12:36:4e:e4:5b:5e:da:af:eb:5d:71:3e:3b:
38:59:a8:5e:c6:0e:d4:fe:80:ce:10:a0:c6:db:ed:
e9:0d:cd:c8:35:82:24:72:70:5e:11:51:56:dd:a2:
33:3b:b1:75:6f:a1:18:f2:79:24:a9:12:9f:01:6b:
4e:34:67:67:ec:db:81:96:ee:c6:d5:6c:9a:a1:e8:
37:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:CA:6E:E9:D6:89:7A:9D:62:C1:E5:F0:F2:79:7B:02:EC:EF:B6:EE
X509v3 Authority Key Identifier:
keyid:4D:E9:53:D0:DB:B7:E7:93:91:4D:04:C3:2D:69:DD:64:09:75:68:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/E8CFC117FB618BA5DCE1E251E113BF1DCE6C1BF6E9BF6F4914AE8095934C31E7/0/4DE953D0DBB7E793914D04C32D69DD64097568ED.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4DE953D0DBB7E793914D04C32D69DD64097568ED.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E8CFC117FB618BA5DCE1E251E113BF1DCE6C1BF6E9BF6F4914AE8095934C31E7/0/3137302e37392e3134342e302f32322d3232203d3e20323634373530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.79.144.0/22
Signature Algorithm: sha256WithRSAEncryption
3c:40:1d:43:b9:63:30:93:25:26:cb:a7:bf:1d:ce:1a:25:d1:
af:08:bd:d8:2d:67:da:81:e2:2c:ba:5c:ee:6d:35:cc:71:6d:
3d:2e:23:cf:f1:74:ee:3c:5d:ec:6c:db:a2:b8:a0:c8:1d:3d:
5c:b3:bb:9c:c8:87:dd:5b:00:2e:26:d5:cc:9a:9c:64:04:f1:
c5:c8:fc:59:b9:87:9e:49:82:d7:aa:a1:ba:c3:dc:1d:09:c4:
1b:9e:e5:69:b5:7c:0c:d7:0c:a7:2b:c1:be:7e:e8:49:c7:2b:
71:dc:e3:7d:cb:d8:d9:76:9f:6a:94:bf:37:69:3a:20:58:bc:
ed:e8:91:e9:49:33:5f:26:d1:de:b2:cc:57:ce:45:96:f0:3f:
14:73:9b:61:91:10:1b:12:f1:72:c7:83:a0:f8:ce:bf:f8:70:
8c:12:d6:25:2d:3d:7b:51:fe:49:73:53:98:3a:15:be:2d:9b:
c7:2d:e0:dc:d9:85:97:d7:3a:0c:cb:5a:a8:d1:0f:a4:9d:d1:
27:d4:79:3a:4f:25:3f:ac:b1:2d:59:1c:ce:82:f4:74:76:00:
f5:00:92:07:c4:c9:bd:d1:81:17:3f:1f:f2:1b:d3:9d:3b:63:
e6:a3:8d:04:9e:ef:8c:b8:4b:7d:f3:f8:b6:fa:6a:51:d4:16:
a7:82:c2:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:06:04 2025 by rpki-client