Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/07F7E70533B53DEB460E345785342E0ED22DD2C75131E2C43F4624E1A2435ADA/0/3134382e3232322e3135322e302f32342d3234203d3e20323732343033.roa
File: 3134382e3232322e3135322e302f32342d3234203d3e20323732343033.roa (raw, json)
Hash identifier: ur7IPphDbNBeNsC1EyQ9d5M3I8JdE27lhPlIKOpjcLI=
Subject key identifier: FA:8A:44:A0:06:AB:4E:11:69:41:5F:04:31:B0:D0:88:FA:67:E5:DF
Certificate issuer: /CN=9F6F899DA067FC03FDE230388E44F7A4A92EC00B
Certificate serial: 05E646858E26C42067AC9BAB4E849685C19C7A93
Authority key identifier: 9F:6F:89:9D:A0:67:FC:03:FD:E2:30:38:8E:44:F7:A4:A9:2E:C0:0B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F6F899DA067FC03FDE230388E44F7A4A92EC00B.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/07F7E70533B53DEB460E345785342E0ED22DD2C75131E2C43F4624E1A2435ADA/0/3134382e3232322e3135322e302f32342d3234203d3e20323732343033.roa
Signing time: Mon 27 Jan 2025 20:20:00 +0000
ROA not before: Mon 27 Jan 2025 20:15:00 +0000
ROA not after: Mon 26 Jan 2026 20:20:00 +0000
asID: 272403
IP address blocks: 148.222.152.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:e6:46:85:8e:26:c4:20:67:ac:9b:ab:4e:84:96:85:c1:9c:7a:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9F6F899DA067FC03FDE230388E44F7A4A92EC00B
Validity
Not Before: Jan 27 20:15:00 2025 GMT
Not After : Jan 26 20:20:00 2026 GMT
Subject: CN=FA8A44A006AB4E1169415F0431B0D088FA67E5DF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:a7:3d:62:0b:ef:d5:85:1b:d5:2f:0c:10:01:
42:46:6b:78:6e:8e:9a:e9:b7:61:88:ee:7b:b1:1e:
f4:f6:d8:56:90:09:c9:af:04:75:eb:4b:d4:75:2c:
86:b2:08:1f:28:b5:ec:47:46:86:78:2c:82:0e:e1:
38:6f:f6:22:64:af:92:e3:73:11:21:8d:60:9b:63:
90:19:47:48:f2:bc:66:81:93:cf:4e:40:6b:24:c6:
4b:04:26:cd:f8:de:38:d7:2c:5a:97:20:53:08:d2:
82:0c:a3:b2:23:4f:ef:57:45:a3:d8:a1:41:cd:18:
56:33:8a:f7:f2:ac:d4:e6:f4:37:73:23:17:03:e5:
b4:ba:6d:82:e7:2f:70:e0:9d:4f:7d:1e:21:0f:5b:
c2:21:74:e1:b7:6c:33:f2:51:b9:6b:e0:e9:8e:83:
5a:e8:65:4b:a6:1c:55:84:0b:d9:e3:24:17:53:4d:
90:f5:0d:f3:6e:ff:16:89:22:33:de:24:e6:62:38:
ad:16:9d:6e:bb:3c:f6:d1:9c:b0:b3:f6:a2:99:b9:
cd:bb:f8:a9:60:db:5c:03:c4:3c:c8:73:de:49:2c:
da:c3:fa:52:d6:9d:02:4c:b8:d7:f8:35:9b:e1:3b:
d5:d4:d4:5b:d8:31:60:f8:a4:de:31:0d:f2:ca:15:
dd:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:8A:44:A0:06:AB:4E:11:69:41:5F:04:31:B0:D0:88:FA:67:E5:DF
X509v3 Authority Key Identifier:
keyid:9F:6F:89:9D:A0:67:FC:03:FD:E2:30:38:8E:44:F7:A4:A9:2E:C0:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/07F7E70533B53DEB460E345785342E0ED22DD2C75131E2C43F4624E1A2435ADA/0/9F6F899DA067FC03FDE230388E44F7A4A92EC00B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F6F899DA067FC03FDE230388E44F7A4A92EC00B.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/07F7E70533B53DEB460E345785342E0ED22DD2C75131E2C43F4624E1A2435ADA/0/3134382e3232322e3135322e302f32342d3234203d3e20323732343033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
148.222.152.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:9e:4b:f6:3b:57:81:06:f4:ec:c9:39:9c:26:fd:12:15:e4:
a0:97:7f:d8:19:fa:22:74:99:fb:d7:15:21:b5:fa:d8:a8:76:
06:37:4d:55:6e:70:53:c6:00:7f:67:be:c6:68:06:8b:cb:bd:
53:b5:46:bb:1d:b8:1b:89:00:7d:bd:1d:3b:b4:76:b8:8a:42:
48:90:b8:c4:a9:ed:7f:4a:52:ac:b4:a7:43:1a:44:ac:b6:92:
a2:0b:0d:52:eb:c0:58:c1:df:69:79:ad:8c:cf:ec:d5:a1:d7:
d9:7e:a2:77:4d:29:dd:d2:82:47:a8:9f:b6:35:4b:1b:8c:ff:
af:f8:b7:ed:7d:c9:37:f5:2f:5f:48:2e:d9:8a:d0:de:cf:47:
30:82:a3:c7:1c:ef:d1:d7:be:3a:06:fd:f2:8b:92:d2:6c:61:
c1:06:87:94:4e:9a:74:2a:ff:55:44:72:f5:6f:20:22:25:b1:
81:f2:78:4b:01:a2:61:79:70:c6:d7:7e:ae:ce:65:43:83:19:
14:fa:95:f1:a8:35:93:da:55:25:8b:3f:3a:0e:68:0d:53:73:
23:57:06:56:0f:bf:ef:ed:8e:9e:be:f4:21:f6:67:f3:bc:29:
07:9e:39:f6:48:20:fc:d1:9f:b7:89:7d:24:32:be:a4:6b:68:
06:16:fb:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 09:26:57 2025 by rpki-client