Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1F00C0A324484A0E532189EE68B426AA220331435BA450CFFCF3816BF1031989/0/3136302e3232332e3230332e302f32342d3234203d3e203532343233.roa
File: 3136302e3232332e3230332e302f32342d3234203d3e203532343233.roa (raw, json)
Hash identifier: O9oBbnmxL9OZ2ySHauJReDbGV9wXwqYgKxX99ZBp0PY=
Subject key identifier: 65:F3:47:26:E1:50:36:47:27:39:01:6D:0A:F4:5B:4D:8D:E1:5B:50
Certificate issuer: /CN=044328B588D7E6AB4F049D26F9E6FDBB2FB51970
Certificate serial: 0E2B7B576B8D18F54F5244161A7A5E9E2CD8638B
Authority key identifier: 04:43:28:B5:88:D7:E6:AB:4F:04:9D:26:F9:E6:FD:BB:2F:B5:19:70
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/044328B588D7E6AB4F049D26F9E6FDBB2FB51970.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1F00C0A324484A0E532189EE68B426AA220331435BA450CFFCF3816BF1031989/0/3136302e3232332e3230332e302f32342d3234203d3e203532343233.roa
Signing time: Tue 05 Mar 2024 17:56:49 +0000
ROA not before: Tue 05 Mar 2024 17:51:49 +0000
ROA not after: Tue 04 Mar 2025 17:56:49 +0000
asID: 52423
IP address blocks: 160.223.203.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:2b:7b:57:6b:8d:18:f5:4f:52:44:16:1a:7a:5e:9e:2c:d8:63:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=044328B588D7E6AB4F049D26F9E6FDBB2FB51970
Validity
Not Before: Mar 5 17:51:49 2024 GMT
Not After : Mar 4 17:56:49 2025 GMT
Subject: CN=65F34726E15036472739016D0AF45B4D8DE15B50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:11:bd:b3:64:84:98:78:28:ea:09:4c:45:9c:
5f:79:ae:91:1a:3b:bf:85:36:de:15:db:95:38:52:
81:4f:5d:b1:4e:6c:07:d2:da:53:25:44:58:33:b4:
7e:fe:eb:7d:e2:13:c5:49:9f:4b:06:09:cf:f6:b5:
3f:64:16:a8:74:27:4c:06:a7:f3:b4:7f:30:80:3b:
77:37:b5:a5:02:70:7a:88:b5:b6:92:e0:64:68:0f:
2b:ed:68:06:f1:2d:3b:40:a3:06:69:c5:24:6f:68:
91:0c:5e:bc:dd:b1:d3:a2:e9:85:34:20:83:93:73:
d3:2a:a1:eb:48:b1:7a:19:1c:1c:69:69:ca:5f:19:
03:19:02:87:0a:35:30:11:16:a7:72:28:ed:9f:b1:
57:56:1f:46:e8:6e:d6:ca:b0:c5:9d:f3:81:1f:54:
24:21:ee:e1:2a:e9:2c:2a:cc:71:2c:9d:a4:94:0f:
bd:7e:03:cb:ea:6f:d5:11:e8:8d:81:82:a4:3a:74:
95:c6:5c:76:2f:30:c5:f1:ad:3d:0f:77:3d:b0:5f:
18:bd:d0:6e:9b:38:ba:7a:74:c6:90:ee:5a:fb:e6:
1a:f5:53:fd:b4:5a:27:74:37:b0:0c:92:81:9d:62:
2b:11:61:83:89:99:ce:92:7b:d5:8e:40:68:a5:0b:
37:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:F3:47:26:E1:50:36:47:27:39:01:6D:0A:F4:5B:4D:8D:E1:5B:50
X509v3 Authority Key Identifier:
keyid:04:43:28:B5:88:D7:E6:AB:4F:04:9D:26:F9:E6:FD:BB:2F:B5:19:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1F00C0A324484A0E532189EE68B426AA220331435BA450CFFCF3816BF1031989/0/044328B588D7E6AB4F049D26F9E6FDBB2FB51970.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/044328B588D7E6AB4F049D26F9E6FDBB2FB51970.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1F00C0A324484A0E532189EE68B426AA220331435BA450CFFCF3816BF1031989/0/3136302e3232332e3230332e302f32342d3234203d3e203532343233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.223.203.0/24
Signature Algorithm: sha256WithRSAEncryption
96:24:58:dc:75:5b:25:dc:63:d8:84:85:02:69:49:e0:bf:70:
ee:0f:de:d4:b6:83:67:ce:12:14:c4:3d:16:7c:bb:d0:6a:43:
93:d8:09:76:ec:d2:88:e7:84:c8:32:0b:29:fe:a3:83:16:48:
42:92:23:48:d4:7a:ba:fc:9f:3b:89:85:3c:8d:be:94:2c:fa:
1e:fe:70:00:9e:29:f6:2f:aa:6a:8a:78:50:5b:60:cc:58:c6:
49:95:b2:7e:bb:90:24:f8:ad:fe:d3:dc:49:5c:dc:66:70:91:
d3:80:80:dd:09:fc:69:bc:07:5c:99:f7:9f:f4:bb:41:e5:d9:
8d:94:a3:64:75:a2:5c:61:cc:e4:5b:fc:b7:3b:1a:30:14:54:
2f:78:62:d2:bc:ee:23:70:27:64:37:66:0f:db:a7:c8:74:8f:
d7:58:d2:42:4f:55:af:da:99:82:51:e4:02:54:56:ef:ca:68:
04:a8:1d:a9:d3:f3:2d:29:30:a9:51:e3:76:3e:d9:d8:86:88:
6c:34:18:94:89:ba:08:68:9e:01:4e:02:76:a5:92:8a:f8:d9:
b9:71:f4:24:46:34:61:96:42:b4:38:2f:2b:ed:49:6c:89:c8:
2d:26:2b:87:07:e4:15:6f:81:55:23:e5:24:80:4b:f4:b6:e9:
53:b3:f5:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 06:11:41 2025 by rpki-client