Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/3137392e34332e3132302e302f32342d3234203d3e203237383233.roa
File: 3137392e34332e3132302e302f32342d3234203d3e203237383233.roa (raw, json)
Hash identifier: eKf83VG+J1t1JygqN4ywAjIPzTV/LTvCiTDkMNefXOE=
Subject key identifier: 46:1A:60:87:F1:27:77:0C:27:74:D7:B8:73:2D:C3:A2:35:23:EF:E1
Certificate issuer: /CN=A5C31DCA4062FBA8FF4175C518EF2246CF570D80
Certificate serial: 124B5CBC1D028E49B29C1590030216011929BBF3
Authority key identifier: A5:C3:1D:CA:40:62:FB:A8:FF:41:75:C5:18:EF:22:46:CF:57:0D:80
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/3137392e34332e3132302e302f32342d3234203d3e203237383233.roa
Signing time: Tue 05 Mar 2024 17:40:11 +0000
ROA not before: Tue 05 Mar 2024 17:35:11 +0000
ROA not after: Tue 04 Mar 2025 17:40:11 +0000
asID: 27823
IP address blocks: 179.43.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:4b:5c:bc:1d:02:8e:49:b2:9c:15:90:03:02:16:01:19:29:bb:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A5C31DCA4062FBA8FF4175C518EF2246CF570D80
Validity
Not Before: Mar 5 17:35:11 2024 GMT
Not After : Mar 4 17:40:11 2025 GMT
Subject: CN=461A6087F127770C2774D7B8732DC3A23523EFE1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:8c:74:b0:62:61:93:a9:82:51:6e:11:4c:83:
76:dc:cb:8d:ea:78:d1:52:3e:8a:8c:8f:0c:c8:9d:
5f:65:a8:65:29:3b:7a:e0:19:96:19:73:89:ff:14:
50:6e:2a:88:2b:78:ef:23:48:59:7b:37:95:d4:0a:
ba:6e:ec:e9:57:da:00:5c:11:01:5d:3c:65:7b:43:
a0:11:c5:8c:89:21:0a:e4:d8:0e:93:1e:03:f2:9b:
53:f1:5d:be:43:ac:f9:6b:fc:93:f9:cd:38:c8:08:
ec:a6:86:64:cd:82:ba:80:9c:80:f6:ea:2f:fe:24:
e2:ec:cf:19:03:ca:48:a3:00:11:0c:49:46:59:b2:
90:0e:91:78:8c:81:55:96:ea:1a:52:82:43:af:ad:
1e:50:c0:9a:7e:5e:73:1b:bd:87:6b:58:70:df:07:
7a:57:af:ef:ce:12:7a:b2:6b:42:8e:de:55:ae:71:
0e:3b:9a:de:18:d4:5e:3f:44:28:b0:92:50:74:82:
17:17:3c:ec:11:db:17:bc:43:58:61:91:f8:9b:38:
04:88:e4:42:5c:3d:fa:47:3d:55:04:70:3c:5f:29:
81:bb:51:a9:97:eb:5b:ab:c1:22:fb:b4:0b:6a:c3:
03:02:71:e9:eb:5a:7a:5f:c8:a1:58:2c:e8:65:0e:
e4:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:1A:60:87:F1:27:77:0C:27:74:D7:B8:73:2D:C3:A2:35:23:EF:E1
X509v3 Authority Key Identifier:
keyid:A5:C3:1D:CA:40:62:FB:A8:FF:41:75:C5:18:EF:22:46:CF:57:0D:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/3137392e34332e3132302e302f32342d3234203d3e203237383233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.43.120.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:e1:f4:f4:d4:87:90:1f:ed:e6:46:ac:1a:5a:90:2d:9e:e7:
34:2b:79:d7:4b:6a:4a:e6:fa:bc:b9:f4:e7:ff:cd:cc:99:03:
f0:71:c9:b2:79:3a:e9:c0:56:96:73:c5:54:fd:b3:67:60:2e:
03:7b:b4:4e:7a:ca:5d:b9:7a:38:b4:eb:89:c1:27:8f:e9:0d:
4c:c0:7c:65:58:47:79:a5:b1:43:ae:f5:5c:5e:53:ef:02:14:
e7:66:41:5f:9e:51:46:41:11:5d:dc:61:4a:31:6e:35:8b:e0:
b6:aa:dc:03:ba:32:bd:25:05:ad:27:d1:a9:2e:c1:8d:ff:e5:
5a:51:e1:5c:71:4a:57:ca:1f:ac:e4:b6:5f:48:4d:3c:d1:99:
3a:52:da:19:6d:5e:a8:50:b5:b8:76:f1:8a:41:07:16:53:cb:
9b:a6:af:9e:49:bd:df:8c:25:5d:2f:3b:70:e1:6e:28:ec:70:
a9:b1:e8:15:a4:6c:4f:50:14:f4:70:2e:a0:5b:a4:bc:b0:84:
3b:a8:22:3d:13:8f:40:4c:58:17:0d:13:32:25:24:9b:d5:d5:
31:44:71:7a:87:c3:e0:5e:27:1d:68:c5:1c:57:bc:4b:75:df:
86:8d:35:b5:d2:d6:00:94:35:22:23:a7:b7:b3:9c:97:01:26:
9e:0a:c2:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 21:08:44 2025 by rpki-client