Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/28C8A68704DD8B73E4DE39EEC2EE40C186813FE537AC494F96F4FD4DC09ED71A/0/3136382e3139352e3230342e302f32322d3234203d3e20323635353039.roa
File: 3136382e3139352e3230342e302f32322d3234203d3e20323635353039.roa (raw, json)
Hash identifier: N3uSK5DKY2VXDLHZGCmmXXILOIqFBLvD/C3Qh9NPj2k=
Subject key identifier: AE:9E:24:3F:08:18:8D:C7:4C:D8:9E:DA:A7:F5:F6:8C:2A:CB:2E:16
Certificate issuer: /CN=5FB2498BEC08819FA5A323BD3C5EC1E8AEE683BD
Certificate serial: 3630388B30E16893AA78CE84E251E4FF6CD8D3FB
Authority key identifier: 5F:B2:49:8B:EC:08:81:9F:A5:A3:23:BD:3C:5E:C1:E8:AE:E6:83:BD
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5FB2498BEC08819FA5A323BD3C5EC1E8AEE683BD.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/28C8A68704DD8B73E4DE39EEC2EE40C186813FE537AC494F96F4FD4DC09ED71A/0/3136382e3139352e3230342e302f32322d3234203d3e20323635353039.roa
Signing time: Tue 05 Mar 2024 17:51:18 +0000
ROA not before: Tue 05 Mar 2024 17:46:18 +0000
ROA not after: Tue 04 Mar 2025 17:51:18 +0000
asID: 265509
IP address blocks: 168.195.204.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:30:38:8b:30:e1:68:93:aa:78:ce:84:e2:51:e4:ff:6c:d8:d3:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5FB2498BEC08819FA5A323BD3C5EC1E8AEE683BD
Validity
Not Before: Mar 5 17:46:18 2024 GMT
Not After : Mar 4 17:51:18 2025 GMT
Subject: CN=AE9E243F08188DC74CD89EDAA7F5F68C2ACB2E16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:29:54:51:96:3c:40:00:7b:6f:eb:21:fb:f3:
1d:2b:83:a4:5b:78:69:6d:e8:ff:78:75:21:1e:4c:
eb:e5:43:60:b0:e7:1c:af:a3:cf:ea:d3:1f:97:51:
1e:1b:9a:97:00:97:c9:ff:dc:60:4e:f4:cb:23:d9:
a9:c5:50:5e:eb:05:88:55:29:99:79:d2:15:18:5c:
e3:e2:3f:77:c8:5c:c1:35:e3:6a:e8:d0:84:2c:0d:
c2:58:a8:5b:62:11:4f:d0:ce:95:b7:70:92:e4:79:
b1:1d:aa:e8:a8:61:de:21:74:d6:af:01:17:d5:b7:
02:9f:16:a1:01:49:0b:58:2a:03:46:52:f9:62:43:
8a:b2:e7:20:45:43:72:5a:f0:46:32:f8:5a:99:ba:
6b:0c:1d:a4:b0:7a:3d:a1:b0:24:db:e0:63:75:d6:
10:d6:c2:76:da:a4:6e:a0:2c:0f:ab:ec:e8:92:3b:
57:16:33:0a:25:b1:01:00:dd:79:9b:24:1a:5d:69:
c1:a0:62:a9:b8:89:22:e3:40:50:0e:62:87:be:a8:
62:b2:73:af:7d:23:77:62:3a:ad:3c:42:1b:de:0c:
48:4e:ca:ae:be:44:22:69:4b:62:f6:83:79:76:80:
fa:a7:46:16:53:b9:d8:c7:b2:eb:47:a8:66:80:99:
1b:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:9E:24:3F:08:18:8D:C7:4C:D8:9E:DA:A7:F5:F6:8C:2A:CB:2E:16
X509v3 Authority Key Identifier:
keyid:5F:B2:49:8B:EC:08:81:9F:A5:A3:23:BD:3C:5E:C1:E8:AE:E6:83:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/28C8A68704DD8B73E4DE39EEC2EE40C186813FE537AC494F96F4FD4DC09ED71A/0/5FB2498BEC08819FA5A323BD3C5EC1E8AEE683BD.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5FB2498BEC08819FA5A323BD3C5EC1E8AEE683BD.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/28C8A68704DD8B73E4DE39EEC2EE40C186813FE537AC494F96F4FD4DC09ED71A/0/3136382e3139352e3230342e302f32322d3234203d3e20323635353039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.195.204.0/22
Signature Algorithm: sha256WithRSAEncryption
02:77:30:22:5c:31:b8:12:d3:66:91:f8:90:9a:2d:35:72:76:
eb:2b:0b:03:54:7b:e8:d0:15:da:7d:c5:4c:e2:3f:0b:9b:58:
dc:ff:b3:c7:27:10:2e:94:a9:86:d4:1d:33:ea:b6:aa:57:9b:
67:7e:d8:44:1e:12:a9:b0:85:a7:6e:6b:77:5c:60:e1:74:c4:
a5:b0:5f:7f:c7:23:ec:35:e1:fb:c1:bc:77:eb:12:59:0b:00:
8a:d8:c7:4a:e5:6f:6b:62:2a:4d:97:31:e4:02:be:a0:a6:76:
cd:cb:25:c8:bd:9b:35:cd:ac:e5:06:74:8e:7f:f5:3e:97:ee:
13:4b:c7:b2:4a:2d:f9:f2:12:f8:c7:fb:c6:87:74:50:d0:23:
73:f4:80:a5:93:d1:b2:d4:dc:3f:6f:3b:20:a6:b8:2c:25:a1:
56:09:4a:d3:8d:e4:b1:eb:87:3e:c0:75:61:ca:44:4d:aa:21:
d7:34:80:18:26:2f:c4:d0:8c:46:94:af:6d:b3:2a:7b:56:fa:
96:f2:71:83:d5:c9:b0:09:99:f5:56:93:bc:a3:d6:38:d2:c8:
46:26:bf:59:bd:eb:e0:7c:65:c2:f9:ec:ac:dc:ed:c7:76:cc:
f3:27:49:87:cb:01:69:9b:f4:66:dd:65:2f:a1:dc:d8:d4:37:
68:1a:4e:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 00:07:00 2025 by rpki-client