Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/42E4BDD1DCB849177F09B98E8C708AEE449C43F0B90D20CA36FF6428AC3EC88A/0/3137302e37392e3233322e302f32322d3234203d3e20323634383036.roa
File: 3137302e37392e3233322e302f32322d3234203d3e20323634383036.roa (raw, json)
Hash identifier: dD5mB8TTscWTtGDFvv9RwIlfE9ZVk++CCqdnWx5oAPs=
Subject key identifier: C7:56:11:B2:6A:12:08:D5:F0:FB:FC:5F:86:62:F9:52:70:F4:28:2E
Certificate issuer: /CN=1868F5026F00BB6EAA6EE135CAD2614421C56145
Certificate serial: 19596B9A6041E560898D8A1A141F519E863A37DB
Authority key identifier: 18:68:F5:02:6F:00:BB:6E:AA:6E:E1:35:CA:D2:61:44:21:C5:61:45
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1868F5026F00BB6EAA6EE135CAD2614421C56145.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/42E4BDD1DCB849177F09B98E8C708AEE449C43F0B90D20CA36FF6428AC3EC88A/0/3137302e37392e3233322e302f32322d3234203d3e20323634383036.roa
Signing time: Tue 05 Mar 2024 17:57:05 +0000
ROA not before: Tue 05 Mar 2024 17:52:05 +0000
ROA not after: Tue 04 Mar 2025 17:57:05 +0000
asID: 264806
IP address blocks: 170.79.232.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:59:6b:9a:60:41:e5:60:89:8d:8a:1a:14:1f:51:9e:86:3a:37:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1868F5026F00BB6EAA6EE135CAD2614421C56145
Validity
Not Before: Mar 5 17:52:05 2024 GMT
Not After : Mar 4 17:57:05 2025 GMT
Subject: CN=C75611B26A1208D5F0FBFC5F8662F95270F4282E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:ff:8b:bd:93:bc:0d:8f:b6:76:69:2a:3a:03:
82:cd:5d:fe:58:64:cf:82:5c:38:5c:de:d4:97:7e:
8a:de:7e:54:e4:17:91:04:7a:e4:ed:d5:b1:6f:4a:
15:53:de:41:91:15:8f:58:90:43:f2:d3:90:63:d1:
3b:3c:57:2f:19:6f:90:0e:f6:e0:b6:e8:b7:64:e4:
31:50:70:3e:f1:3d:eb:89:24:f6:70:dc:b8:42:ef:
a2:1e:dd:7d:12:2a:69:13:d5:1a:9b:82:e8:d1:a5:
88:04:a5:a8:ae:6a:42:53:83:31:bb:64:3c:b0:d1:
e1:36:91:ad:74:5c:ef:be:f1:17:12:6b:80:b5:57:
8d:bf:fc:f4:8c:64:dd:4c:31:0b:9f:76:04:8a:de:
f9:d8:ba:86:85:a0:54:b6:fa:76:3b:a4:c0:f3:da:
3d:0b:f3:3c:06:99:bb:d6:73:56:9b:46:bf:63:3c:
d5:63:ca:9c:d4:5c:30:49:b6:04:f5:4e:a8:ec:ec:
1a:4c:ed:07:d1:6b:2a:24:28:c7:4a:81:fc:06:72:
67:ea:50:e3:d3:85:2d:86:8d:53:6e:ae:df:ff:b5:
50:19:62:64:ae:26:95:77:95:ef:42:76:0a:34:15:
49:51:34:90:c7:50:52:ef:ca:8b:23:d6:2a:25:e7:
6d:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:56:11:B2:6A:12:08:D5:F0:FB:FC:5F:86:62:F9:52:70:F4:28:2E
X509v3 Authority Key Identifier:
keyid:18:68:F5:02:6F:00:BB:6E:AA:6E:E1:35:CA:D2:61:44:21:C5:61:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/42E4BDD1DCB849177F09B98E8C708AEE449C43F0B90D20CA36FF6428AC3EC88A/0/1868F5026F00BB6EAA6EE135CAD2614421C56145.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1868F5026F00BB6EAA6EE135CAD2614421C56145.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/42E4BDD1DCB849177F09B98E8C708AEE449C43F0B90D20CA36FF6428AC3EC88A/0/3137302e37392e3233322e302f32322d3234203d3e20323634383036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.79.232.0/22
Signature Algorithm: sha256WithRSAEncryption
18:c7:58:63:47:bd:77:b3:90:12:78:99:ce:ef:d7:ba:88:59:
3b:a5:11:d7:8f:ee:e7:f9:ca:51:f0:ab:84:34:7b:dd:14:e5:
ac:aa:a9:3b:fc:25:0d:eb:3c:78:23:94:c1:9e:7b:8a:9a:7b:
8d:72:59:27:61:b8:2f:58:d0:cc:63:2d:ab:d4:0a:ed:ca:50:
3e:e2:21:12:a6:dd:6f:07:92:7c:25:5b:4d:0d:53:f9:fd:c4:
2c:19:c6:74:de:ce:86:8e:df:ca:b5:1b:cf:6a:26:67:a9:a7:
82:ca:60:a1:fd:dd:02:f3:ff:00:d1:29:32:7c:a4:00:61:b8:
cc:31:77:12:fd:1d:30:bf:22:b3:0f:59:52:c5:4c:45:13:bd:
19:ca:ff:0c:ff:66:81:23:88:de:b2:29:f9:b4:e4:a9:06:a4:
5b:a3:c5:ae:c7:a1:a7:fe:a1:20:01:71:1e:b6:f2:a4:31:3f:
98:94:41:eb:de:3a:a7:a1:1c:d8:f5:d7:d4:79:55:a2:92:fe:
7a:38:db:0b:20:7f:d3:28:ca:b7:f5:5a:13:df:0b:95:74:b7:
d0:c3:85:2e:f9:bd:fc:36:e7:68:93:e8:22:bc:4f:43:95:a3:
15:cd:3d:72:cb:3b:a7:81:92:f3:4a:7c:c3:15:01:65:6e:ef:
ba:4d:b3:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 00:31:26 2025 by rpki-client