Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F75D7846CDF9FB1CA71BE06C6457403E505E7413414D57C619D92F7AD559ADFB/0/3136382e3233322e3136392e302f32342d3234203d3e20323634363936.roa
File: 3136382e3233322e3136392e302f32342d3234203d3e20323634363936.roa (raw, json)
Hash identifier: BwxNQJtHHBPiOJUH2U3kBmecknB+lk932asgPmd6AsM=
Subject key identifier: AB:31:23:12:C7:20:03:E8:30:98:B5:23:F5:0C:D4:F2:4F:BC:03:3E
Certificate issuer: /CN=D2A5337FA87797971D233BE327907396D0813D5E
Certificate serial: 5227D7CD461E502FC8406E2E28287ED96801EB5E
Authority key identifier: D2:A5:33:7F:A8:77:97:97:1D:23:3B:E3:27:90:73:96:D0:81:3D:5E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2A5337FA87797971D233BE327907396D0813D5E.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/F75D7846CDF9FB1CA71BE06C6457403E505E7413414D57C619D92F7AD559ADFB/0/3136382e3233322e3136392e302f32342d3234203d3e20323634363936.roa
Signing time: Tue 18 Feb 2025 22:10:11 +0000
ROA not before: Tue 18 Feb 2025 22:05:11 +0000
ROA not after: Tue 17 Feb 2026 22:10:11 +0000
asID: 264696
IP address blocks: 168.232.169.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:27:d7:cd:46:1e:50:2f:c8:40:6e:2e:28:28:7e:d9:68:01:eb:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2A5337FA87797971D233BE327907396D0813D5E
Validity
Not Before: Feb 18 22:05:11 2025 GMT
Not After : Feb 17 22:10:11 2026 GMT
Subject: CN=AB312312C72003E83098B523F50CD4F24FBC033E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:88:7d:2c:a2:5e:8f:4c:93:f5:29:48:eb:6d:
0b:30:68:ce:8c:0e:ec:2c:40:58:85:00:41:f7:bb:
57:c2:a4:76:8d:3d:54:d4:6e:c8:dc:06:f7:1e:ac:
d6:af:bf:b9:9c:52:05:15:5d:36:c0:d5:71:86:66:
81:23:4c:57:e5:58:43:96:38:38:e9:78:28:0f:38:
6e:76:54:9d:44:67:c7:15:35:52:12:fd:cd:9f:47:
b1:ac:1e:49:b3:3e:ac:8c:c3:7a:e7:e5:4a:ad:c8:
ab:91:65:c5:23:c0:3e:99:c9:0b:c0:c3:2d:52:d2:
84:ef:2d:0a:58:a2:a7:51:b9:58:33:77:eb:d3:f0:
e6:a2:7c:7b:ce:ac:f3:08:ed:ae:c0:3b:8c:ac:33:
90:89:80:b6:7d:a3:6e:dc:46:07:e5:ff:03:36:cb:
c6:59:f4:54:69:63:89:a2:f1:f3:69:c1:0a:a6:74:
f2:22:81:c2:f7:7d:88:c2:41:7c:2e:2a:5d:29:07:
8b:bc:46:cb:46:a3:63:eb:26:42:cc:ba:99:af:07:
7c:45:99:04:85:56:a5:7e:f4:98:b5:14:6e:21:a3:
13:a9:3b:dd:4a:e7:f1:50:d2:39:01:9b:82:96:3a:
dc:05:99:1d:38:3b:82:92:36:21:69:61:3b:b7:6a:
cd:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:31:23:12:C7:20:03:E8:30:98:B5:23:F5:0C:D4:F2:4F:BC:03:3E
X509v3 Authority Key Identifier:
keyid:D2:A5:33:7F:A8:77:97:97:1D:23:3B:E3:27:90:73:96:D0:81:3D:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/F75D7846CDF9FB1CA71BE06C6457403E505E7413414D57C619D92F7AD559ADFB/0/D2A5337FA87797971D233BE327907396D0813D5E.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2A5337FA87797971D233BE327907396D0813D5E.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F75D7846CDF9FB1CA71BE06C6457403E505E7413414D57C619D92F7AD559ADFB/0/3136382e3233322e3136392e302f32342d3234203d3e20323634363936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.232.169.0/24
Signature Algorithm: sha256WithRSAEncryption
90:b2:ef:9b:bb:57:4b:28:9f:56:88:e0:d0:32:e7:01:ed:8c:
37:25:b5:bc:a4:52:22:17:cf:d9:63:a2:d5:fa:4d:72:88:b1:
f9:94:bb:78:31:ba:30:86:03:93:7c:6a:f6:d4:83:11:ec:d6:
b3:ed:b8:aa:a7:99:58:ce:cd:46:e9:a3:17:35:0f:94:4d:d3:
61:df:bd:e5:61:77:5e:19:6d:74:a0:ca:e4:72:32:71:d2:d4:
4f:fb:67:89:f8:70:13:34:6b:58:41:c9:4c:d0:9e:a0:ce:03:
cd:9d:46:70:db:a2:20:50:43:4e:e3:06:9e:c3:d2:31:d8:2d:
1b:b1:db:d1:7c:f1:22:bc:70:0f:64:f8:0f:04:09:87:9c:d4:
99:49:91:de:19:85:08:ca:80:67:d5:f5:d8:2d:69:e2:0c:5a:
62:7d:01:6a:fc:59:3c:df:24:5f:76:09:75:2c:90:63:44:40:
b0:f9:2f:1f:f0:ec:3d:d2:9d:a0:6f:88:84:37:d1:de:ed:1a:
63:e2:0b:86:d6:26:50:ad:f5:5c:24:92:b3:56:7b:9c:f3:9e:
39:bf:77:27:ae:6b:ee:11:54:92:4f:c1:c3:65:cf:87:e1:be:
35:ce:34:79:35:ae:e9:30:db:09:1e:2f:6d:ea:4a:5d:99:e8:
c0:05:8b:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:00:13 2025 by rpki-client