Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a33383a3a2f34382d3438203d3e20323731383931.roa
File: 323830313a3135313a33383a3a2f34382d3438203d3e20323731383931.roa (raw, json)
Hash identifier: pGfPIeweBdvQSJD6cn9d1rk1WYFZcWYPgZwYkTReM+Y=
Subject key identifier: 69:45:6B:1A:98:D8:DF:63:3A:93:E5:41:A1:09:18:9A:93:F8:F2:F9
Certificate issuer: /CN=4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279
Certificate serial: 57959120885AB81135537D643DCBE872336A32B2
Authority key identifier: 43:12:AC:B2:22:6F:8B:88:E5:E8:9E:F2:F1:44:2B:8E:EF:B3:B2:79
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a33383a3a2f34382d3438203d3e20323731383931.roa
Signing time: Tue 04 Feb 2025 18:45:20 +0000
ROA not before: Tue 04 Feb 2025 18:40:20 +0000
ROA not after: Tue 03 Feb 2026 18:45:20 +0000
asID: 271891
IP address blocks: 2801:151:38::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:95:91:20:88:5a:b8:11:35:53:7d:64:3d:cb:e8:72:33:6a:32:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279
Validity
Not Before: Feb 4 18:40:20 2025 GMT
Not After : Feb 3 18:45:20 2026 GMT
Subject: CN=69456B1A98D8DF633A93E541A109189A93F8F2F9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:de:ff:c9:fc:3a:bf:c2:6d:73:eb:bd:1b:fb:
dd:03:c5:96:7d:7c:08:ad:ee:d2:b8:f4:62:ec:c0:
68:af:43:77:18:96:bb:9a:f8:c1:9b:6e:93:a0:2b:
56:6a:d5:6d:f7:16:ce:fd:4a:e2:04:54:97:b9:e9:
3b:eb:19:56:91:a7:38:00:86:43:a2:c2:f3:79:1a:
9a:2e:7c:79:b4:1a:3c:a5:88:16:c1:ef:b0:66:26:
ee:93:9b:ef:e3:37:67:3e:c9:76:49:12:2a:11:9f:
c0:04:e4:9b:dd:9a:1d:a6:86:5c:59:22:c4:36:6c:
94:c9:55:e2:ac:b9:30:cd:af:d5:76:a8:99:f1:66:
7e:72:d7:e7:6f:e0:73:d5:98:b9:01:5b:15:8f:1c:
ff:50:39:fc:9e:df:3c:75:8f:9c:34:88:67:39:d2:
ec:c8:6b:69:71:60:67:e1:a0:e9:87:4f:8a:ed:08:
55:69:16:bb:75:bd:5a:b7:1d:f7:d4:e5:63:7d:80:
89:07:c2:14:79:24:58:95:74:e5:fa:f4:1c:25:b4:
b1:f2:6b:78:57:82:34:56:ca:6a:4e:34:80:30:94:
f9:2e:8d:89:0b:23:10:a1:2c:43:02:fd:c8:99:13:
19:08:d5:d5:54:df:54:e9:64:84:28:ab:de:2f:04:
e5:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:45:6B:1A:98:D8:DF:63:3A:93:E5:41:A1:09:18:9A:93:F8:F2:F9
X509v3 Authority Key Identifier:
keyid:43:12:AC:B2:22:6F:8B:88:E5:E8:9E:F2:F1:44:2B:8E:EF:B3:B2:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a33383a3a2f34382d3438203d3e20323731383931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2801:151:38::/48
Signature Algorithm: sha256WithRSAEncryption
af:26:2d:b7:88:52:ab:1e:97:e2:74:2e:90:ca:35:59:e6:eb:
fc:52:29:59:c2:78:df:88:bf:a1:f0:5b:89:04:55:27:6a:f3:
c0:b9:d4:e7:37:b7:fe:51:06:7c:ca:d8:ae:4a:d3:3e:84:5c:
a2:4c:bb:19:44:8a:c9:f9:a4:85:fd:67:4b:ba:16:37:6a:37:
03:72:1a:bb:a2:dc:d9:65:59:7a:d3:5e:74:b1:9c:90:bb:a2:
94:51:3f:48:9b:52:74:91:9a:ce:e2:49:e5:41:7b:38:cc:f5:
52:05:f3:d1:7b:33:5e:0c:46:fa:7f:a8:ab:9e:ad:2b:17:89:
1f:9a:d9:5c:a0:bc:37:6a:c0:20:be:ad:ea:55:29:8b:15:11:
b3:ee:d4:45:24:15:a4:40:06:47:03:47:3c:32:dd:0e:7c:a0:
45:43:bc:30:0c:36:a8:8c:d6:8b:14:cb:16:8f:e7:ef:9c:15:
e4:f5:af:4c:36:8c:07:8c:ec:2e:bb:bf:20:09:ba:92:eb:bd:
b6:1c:28:54:4c:43:f8:14:f7:8a:12:a8:1d:87:12:1b:72:6f:
a6:1a:ee:de:80:e3:70:5f:bf:ce:3c:5f:44:6e:90:f8:f7:2e:
ea:4b:9d:4a:55:a8:d5:d3:da:46:3c:22:bd:f3:5d:66:b8:4d:
a8:1c:77:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:01:36 2025 by rpki-client