Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/13830BDE7A7DC7CBE2750590E8135E376B1634AC5C0EE69464D117EA0615126E/0/3230312e3135392e3136382e302f32312d3234203d3e20323632323536.roa
File: 3230312e3135392e3136382e302f32312d3234203d3e20323632323536.roa (raw, json)
Hash identifier: K7Yt8WUbfFR22Ki1d0U16O+OVXG1ZqMRIGIc/fhjb6Q=
Subject key identifier: 01:8A:0F:05:8A:15:E1:81:C7:83:04:66:1E:33:35:3F:AA:08:55:9D
Certificate issuer: /CN=B06551473984A7D021CE4C930068D4DD4CBA142A
Certificate serial: 23A58CBD9FEE919EEFA56561D4B8C1D9673C6281
Authority key identifier: B0:65:51:47:39:84:A7:D0:21:CE:4C:93:00:68:D4:DD:4C:BA:14:2A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B06551473984A7D021CE4C930068D4DD4CBA142A.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/13830BDE7A7DC7CBE2750590E8135E376B1634AC5C0EE69464D117EA0615126E/0/3230312e3135392e3136382e302f32312d3234203d3e20323632323536.roa
Signing time: Tue 05 Mar 2024 17:46:33 +0000
ROA not before: Tue 05 Mar 2024 17:41:33 +0000
ROA not after: Tue 04 Mar 2025 17:46:33 +0000
asID: 262256
IP address blocks: 201.159.168.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:a5:8c:bd:9f:ee:91:9e:ef:a5:65:61:d4:b8:c1:d9:67:3c:62:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B06551473984A7D021CE4C930068D4DD4CBA142A
Validity
Not Before: Mar 5 17:41:33 2024 GMT
Not After : Mar 4 17:46:33 2025 GMT
Subject: CN=018A0F058A15E181C78304661E33353FAA08559D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e5:15:73:a7:42:0f:82:2d:2a:2b:88:d7:14:
7c:fa:24:3d:f5:00:ca:bd:69:eb:a0:49:30:ee:8c:
44:de:5b:ed:1b:08:53:1c:d8:51:11:14:5d:74:01:
c8:ea:bf:fc:52:8d:bc:fc:43:18:db:f4:39:ec:d9:
a3:41:5c:b4:e2:68:5c:94:1b:50:82:77:50:10:bf:
8b:f6:20:fc:dc:97:36:08:19:05:c8:bc:2a:50:bc:
81:b1:c7:cf:14:06:27:c3:c8:c1:ea:d6:fb:d7:23:
bd:c4:8e:33:e9:77:9e:1a:ad:50:f0:02:0b:40:57:
f2:00:38:b0:f7:6a:cf:92:0a:e4:3e:50:3e:29:59:
a8:1c:b0:34:c9:0f:fa:ee:ea:a9:18:b2:2b:96:a1:
b3:2c:3d:c6:ae:be:18:b2:9e:29:ab:6d:db:c1:f9:
cf:7b:f6:ca:10:ff:f2:6f:fb:99:87:78:8f:75:3e:
2e:a5:e0:fe:f4:5a:97:07:88:f3:32:d7:2f:cd:e3:
e2:7d:35:5f:cc:85:4a:a5:3d:e4:3a:ea:74:e8:3c:
40:69:e4:e9:cc:9a:18:ff:6e:aa:68:5b:7c:b3:84:
42:6c:ee:3e:07:80:5b:c4:7d:41:ed:c7:ef:4d:0e:
5c:c7:0c:32:59:57:7a:95:8c:aa:19:29:19:37:04:
42:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:8A:0F:05:8A:15:E1:81:C7:83:04:66:1E:33:35:3F:AA:08:55:9D
X509v3 Authority Key Identifier:
keyid:B0:65:51:47:39:84:A7:D0:21:CE:4C:93:00:68:D4:DD:4C:BA:14:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/13830BDE7A7DC7CBE2750590E8135E376B1634AC5C0EE69464D117EA0615126E/0/B06551473984A7D021CE4C930068D4DD4CBA142A.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B06551473984A7D021CE4C930068D4DD4CBA142A.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/13830BDE7A7DC7CBE2750590E8135E376B1634AC5C0EE69464D117EA0615126E/0/3230312e3135392e3136382e302f32312d3234203d3e20323632323536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.159.168.0/21
Signature Algorithm: sha256WithRSAEncryption
92:09:e5:bc:98:71:d7:f8:98:8a:ee:fa:e9:ba:b0:81:d6:67:
c4:32:ab:eb:12:4c:c5:fc:f6:79:3d:4d:27:43:50:bc:7e:bc:
f2:9b:13:c3:3a:14:d3:a8:ab:92:4a:49:ef:e6:14:e1:be:eb:
b5:2a:78:37:71:bb:1d:17:99:cc:a6:c2:83:e6:32:ad:bc:b7:
02:95:1a:6e:24:64:e7:da:9e:c9:ca:76:0a:8e:69:3a:dc:5f:
fa:92:a7:3e:b9:ad:ed:ed:a5:72:52:eb:4c:f8:b0:fb:6b:3f:
34:26:01:ad:1c:4f:bc:1c:45:57:c6:a1:29:76:61:17:b3:8f:
b4:41:cc:f8:c0:fb:46:c0:71:47:8b:1c:89:ae:77:37:2f:a2:
ca:a5:10:56:cd:40:a7:86:3a:4e:94:53:28:8b:07:50:5c:71:
6a:87:82:00:9b:81:0d:ab:6f:55:c9:d3:8b:a0:43:df:1f:7b:
0d:11:2f:bb:6c:16:23:4d:a4:6b:bb:9e:12:ed:5f:78:59:e7:
2d:c6:7d:22:74:1c:c6:ba:51:e0:ba:e3:a5:a1:06:7c:31:95:
26:6e:27:3e:b9:7c:03:c9:b7:d1:2f:f7:84:e0:a5:45:9d:fd:
1a:c8:67:7c:96:a5:31:26:66:9f:95:be:2b:3d:fb:65:da:71:
2e:1b:1d:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 16:51:29 2025 by rpki-client