Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/103C4FFE8F3FFFA4F8F3FBD4DED3EDD0D8232E29429547E80EDF1F23E23C0D1A/0/3230302e31342e34322e302f32342d3234203d3e203237383130.roa
File: 3230302e31342e34322e302f32342d3234203d3e203237383130.roa (raw, json)
Hash identifier: AhCE8f0tqUNlgK/3CClsPpz/GTFvz56WBfRXBCZVH/w=
Subject key identifier: 54:85:BB:82:F6:22:D7:7C:D0:D5:41:49:87:BB:15:6A:B8:5F:36:84
Certificate issuer: /CN=ACFD9D629DD7DC5504C90BEB82187223A99FEEA7
Certificate serial: 3218D8AD7E4C7B440D318EC8E322588191CB7D60
Authority key identifier: AC:FD:9D:62:9D:D7:DC:55:04:C9:0B:EB:82:18:72:23:A9:9F:EE:A7
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ACFD9D629DD7DC5504C90BEB82187223A99FEEA7.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/103C4FFE8F3FFFA4F8F3FBD4DED3EDD0D8232E29429547E80EDF1F23E23C0D1A/0/3230302e31342e34322e302f32342d3234203d3e203237383130.roa
Signing time: Tue 05 Mar 2024 18:11:13 +0000
ROA not before: Tue 05 Mar 2024 18:06:13 +0000
ROA not after: Tue 04 Mar 2025 18:11:13 +0000
asID: 27810
IP address blocks: 200.14.42.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:18:d8:ad:7e:4c:7b:44:0d:31:8e:c8:e3:22:58:81:91:cb:7d:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ACFD9D629DD7DC5504C90BEB82187223A99FEEA7
Validity
Not Before: Mar 5 18:06:13 2024 GMT
Not After : Mar 4 18:11:13 2025 GMT
Subject: CN=5485BB82F622D77CD0D5414987BB156AB85F3684
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:59:4c:4f:5f:f0:0d:7f:41:46:51:c6:4d:0a:
35:e1:f3:4b:a1:14:00:98:ac:1b:72:a1:0e:c0:c0:
c1:eb:15:ea:44:17:85:46:9e:bb:4a:98:dc:5c:54:
a2:5d:5b:a7:56:0b:30:22:bb:63:23:45:14:00:da:
30:e3:78:a5:1f:11:35:da:44:64:0e:d4:b0:66:59:
14:ae:d9:a3:85:c3:85:6f:ca:db:a0:24:09:47:48:
7c:3c:04:1a:d3:bb:d7:79:71:95:97:1d:29:e4:a2:
e3:5e:e4:4b:f9:f3:90:39:b0:f0:8e:8d:19:7b:08:
c6:79:1f:c6:d4:75:75:ca:1c:12:25:c7:65:ec:a3:
48:8c:ee:7b:82:c7:af:34:d4:1c:74:8c:74:d8:74:
5f:99:5b:2a:e9:07:22:1d:74:8a:f8:34:02:1a:40:
2d:41:6d:37:36:a2:99:23:eb:e3:bf:f1:be:f4:36:
89:e7:09:41:5e:f7:61:b3:4a:72:eb:f1:2a:f4:07:
5d:9c:37:dc:37:80:93:58:2d:18:a8:c5:cf:98:59:
da:e9:1a:2b:7c:14:df:92:0a:cd:f0:9b:87:96:b5:
c4:48:f8:87:d3:8e:01:4f:1a:7d:2f:c2:13:ec:32:
fd:a7:d9:62:fe:62:bd:67:90:8c:68:57:69:9a:24:
51:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:85:BB:82:F6:22:D7:7C:D0:D5:41:49:87:BB:15:6A:B8:5F:36:84
X509v3 Authority Key Identifier:
keyid:AC:FD:9D:62:9D:D7:DC:55:04:C9:0B:EB:82:18:72:23:A9:9F:EE:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/103C4FFE8F3FFFA4F8F3FBD4DED3EDD0D8232E29429547E80EDF1F23E23C0D1A/0/ACFD9D629DD7DC5504C90BEB82187223A99FEEA7.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ACFD9D629DD7DC5504C90BEB82187223A99FEEA7.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/103C4FFE8F3FFFA4F8F3FBD4DED3EDD0D8232E29429547E80EDF1F23E23C0D1A/0/3230302e31342e34322e302f32342d3234203d3e203237383130.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.14.42.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:9a:f2:60:b3:9b:c3:36:80:54:6d:81:b6:94:92:bf:a4:30:
ff:a1:d4:49:89:54:9e:4c:a3:70:dc:be:c1:6f:91:4e:e5:48:
41:02:88:a7:24:3a:ad:eb:e8:5f:ca:99:0f:89:75:76:16:0d:
80:4f:f6:de:04:c6:e0:8e:81:bb:34:67:b4:4a:2e:0c:8c:2c:
dd:87:15:b7:49:11:41:23:80:14:c8:61:2b:02:db:0d:fc:22:
68:4c:35:03:79:ac:af:53:31:3b:2b:6a:cb:73:4a:73:20:83:
99:79:7a:73:e4:ec:32:58:b9:60:52:1b:28:31:3f:da:c7:c4:
be:49:42:e9:b4:91:1c:e7:8a:df:97:4f:3d:25:d5:ab:7b:eb:
48:71:fb:f6:b3:f9:c1:af:79:56:8f:43:b5:6c:d1:32:6c:b6:
af:8e:e1:d5:81:b1:13:95:93:f1:5a:cf:be:5e:fb:4f:76:20:
0e:d5:4d:30:70:55:e9:c3:8a:7d:b5:53:8b:20:15:4d:86:78:
7c:36:d5:26:57:11:4b:07:f6:4c:cd:30:5e:04:e6:43:24:07:
50:b2:5a:a4:12:d5:db:cd:62:1a:10:59:90:c0:88:48:02:f5:
46:71:be:ce:df:6f:84:0b:e2:60:5f:5d:c4:27:d2:44:db:6b:
e6:5a:8a:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:55:32 2025 by rpki-client