Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/07D0AD335E61C788F1CFF1422E994CD61DBBB16D1B22DC8EECAA6875470393D3/0/3133382e39342e3134302e302f32322d3234203d3e203238333937.roa
File: 3133382e39342e3134302e302f32322d3234203d3e203238333937.roa (raw, json)
Hash identifier: 5MXwWE8Dej0HWKthdKvx2tP2K43FZ3HQo4Xh+sn9xU8=
Subject key identifier: 2C:C7:43:C0:3E:6A:21:F1:C4:10:55:BF:84:29:9A:6F:5A:70:3F:3B
Certificate issuer: /CN=854635177B013A723EEB20E0A79AEBE128081C13
Certificate serial: 335B52105E58ECB005EB6D1D043758055A96584E
Authority key identifier: 85:46:35:17:7B:01:3A:72:3E:EB:20:E0:A7:9A:EB:E1:28:08:1C:13
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/854635177B013A723EEB20E0A79AEBE128081C13.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/07D0AD335E61C788F1CFF1422E994CD61DBBB16D1B22DC8EECAA6875470393D3/0/3133382e39342e3134302e302f32322d3234203d3e203238333937.roa
Signing time: Tue 05 Mar 2024 18:19:21 +0000
ROA not before: Tue 05 Mar 2024 18:14:21 +0000
ROA not after: Tue 04 Mar 2025 18:19:21 +0000
asID: 28397
IP address blocks: 138.94.140.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:5b:52:10:5e:58:ec:b0:05:eb:6d:1d:04:37:58:05:5a:96:58:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=854635177B013A723EEB20E0A79AEBE128081C13
Validity
Not Before: Mar 5 18:14:21 2024 GMT
Not After : Mar 4 18:19:21 2025 GMT
Subject: CN=2CC743C03E6A21F1C41055BF84299A6F5A703F3B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b2:bb:90:99:62:67:60:ba:c9:97:c0:21:33:
18:f4:fc:b4:fa:53:fe:64:6f:af:d2:7a:a9:09:b7:
55:dd:25:00:30:42:86:8c:af:ff:dd:be:59:fd:e8:
04:f8:b6:70:ce:00:6d:58:2b:c5:a5:d6:63:ed:1e:
40:55:b6:86:8c:bf:2b:85:e9:6f:29:1d:30:4d:46:
ec:af:02:7b:fb:41:fa:0c:a2:c7:90:d6:4e:c8:73:
99:d0:b7:a9:9b:b0:5f:d9:18:1e:50:23:53:fc:96:
5c:23:30:7a:ae:98:ac:a5:54:12:2f:61:2a:fe:61:
78:e7:4f:3e:4a:71:3c:aa:98:63:08:7c:ac:d5:2e:
14:33:c8:c1:d1:0a:c7:f2:70:04:84:7c:e7:08:d5:
f6:a1:69:1c:d2:a4:de:89:6b:37:f3:b8:56:be:53:
f2:8c:91:c2:75:c5:c3:7e:17:25:17:ce:06:94:66:
d7:20:7a:60:5d:03:56:b8:ee:b3:0d:e5:6f:dd:5a:
25:c6:b8:e8:2c:45:9e:ac:af:ef:41:b7:ed:e6:a9:
9b:32:e5:4d:51:e7:d8:ef:66:18:e4:40:b8:df:bd:
8b:5b:29:4c:35:d5:6c:d1:c5:27:bd:d4:c2:d4:90:
4b:4f:3f:95:44:5b:f9:4f:fe:ac:ab:22:bb:f6:06:
b3:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:C7:43:C0:3E:6A:21:F1:C4:10:55:BF:84:29:9A:6F:5A:70:3F:3B
X509v3 Authority Key Identifier:
keyid:85:46:35:17:7B:01:3A:72:3E:EB:20:E0:A7:9A:EB:E1:28:08:1C:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/07D0AD335E61C788F1CFF1422E994CD61DBBB16D1B22DC8EECAA6875470393D3/0/854635177B013A723EEB20E0A79AEBE128081C13.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/854635177B013A723EEB20E0A79AEBE128081C13.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/07D0AD335E61C788F1CFF1422E994CD61DBBB16D1B22DC8EECAA6875470393D3/0/3133382e39342e3134302e302f32322d3234203d3e203238333937.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.94.140.0/22
Signature Algorithm: sha256WithRSAEncryption
b5:aa:13:dc:94:0f:f5:14:a8:e0:75:4d:96:78:63:de:67:7e:
86:bb:0c:3c:97:f9:18:f5:43:21:32:55:00:d9:a6:79:52:aa:
4d:83:71:66:ac:da:35:fb:53:2f:92:1b:3d:54:7f:0a:fe:51:
c4:fb:21:f9:59:34:3d:fa:cb:bb:39:ab:3f:7b:09:7d:ef:d5:
53:4a:3c:79:5c:1b:db:72:40:24:9c:8c:40:2e:c3:97:f1:a7:
36:16:75:5c:b2:2c:d3:f3:87:91:e4:69:f7:28:48:65:e6:83:
b1:14:b8:ef:f8:55:5d:82:23:fe:93:f6:7f:f9:6c:02:e1:3a:
81:f3:0f:98:c1:7f:e2:bf:62:b0:f3:91:25:86:90:c6:ef:0e:
c1:3a:9c:55:95:a9:ad:15:8d:49:df:23:af:39:49:ad:11:e2:
54:a1:26:fa:40:72:cf:93:d3:f4:70:92:d7:ac:22:ea:b8:df:
54:b5:ad:7e:77:91:e4:9e:9e:57:9e:24:e8:85:c3:59:73:5f:
97:0b:5f:0e:ca:cf:0b:4c:d0:69:85:3a:1b:6b:05:28:11:60:
75:57:06:6e:75:ff:80:85:c2:a4:ca:89:4b:b7:5b:97:6f:33:
e5:88:10:c5:2d:c3:ec:e7:7d:03:33:46:83:f6:06:01:49:0e:
9c:49:44:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 15:57:57 2025 by rpki-client