Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4B71DE7CD160FB471BE4FA8EB772197AF8BD8CE3637458D218FFE303DE48AB98/0/3139302e3130382e37322e302f32342d3234203d3e20323633323436.roa
File: 3139302e3130382e37322e302f32342d3234203d3e20323633323436.roa (raw, json)
Hash identifier: /BieShxkN4PrFWE+vkre5kIKgFAVrXOcgqrvzLp7pEI=
Subject key identifier: FD:39:8F:6B:65:9B:68:70:FD:B3:03:41:D4:63:54:F8:08:60:B7:BE
Certificate issuer: /CN=EE0F3FF0E8430A1CB45AD3260983A9D349722624
Certificate serial: 5CA75BAF67FED25E7D9D686E91CE371C4E9E1254
Authority key identifier: EE:0F:3F:F0:E8:43:0A:1C:B4:5A:D3:26:09:83:A9:D3:49:72:26:24
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EE0F3FF0E8430A1CB45AD3260983A9D349722624.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4B71DE7CD160FB471BE4FA8EB772197AF8BD8CE3637458D218FFE303DE48AB98/0/3139302e3130382e37322e302f32342d3234203d3e20323633323436.roa
Signing time: Tue 05 Mar 2024 17:59:22 +0000
ROA not before: Tue 05 Mar 2024 17:54:22 +0000
ROA not after: Tue 04 Mar 2025 17:59:22 +0000
asID: 263246
IP address blocks: 190.108.72.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:a7:5b:af:67:fe:d2:5e:7d:9d:68:6e:91:ce:37:1c:4e:9e:12:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EE0F3FF0E8430A1CB45AD3260983A9D349722624
Validity
Not Before: Mar 5 17:54:22 2024 GMT
Not After : Mar 4 17:59:22 2025 GMT
Subject: CN=FD398F6B659B6870FDB30341D46354F80860B7BE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:dc:6d:97:33:15:74:d9:90:6c:47:06:06:a3:
80:82:d7:7d:ee:e9:45:e0:bb:5c:e0:c1:5b:b6:2b:
2c:83:5f:cd:3f:31:a0:37:93:cd:8f:c3:c2:17:13:
32:fc:b8:11:29:dd:97:66:ec:20:19:f9:ab:51:02:
04:dd:30:c5:71:f6:70:5f:23:6f:64:5b:8b:83:44:
f2:0d:bd:79:8f:3e:ff:7f:bd:15:36:fa:8a:bb:73:
21:2a:31:02:52:3c:b8:0f:1a:4e:d9:62:84:d1:80:
ac:3b:7a:ae:8a:62:e8:24:70:23:4c:f5:f9:5b:63:
1a:74:23:6a:18:cb:fe:7e:c9:09:14:76:fc:e4:d6:
c3:ca:f7:0c:a0:6a:83:71:5d:df:55:97:9f:a9:1f:
86:9a:d2:14:76:b5:2f:3c:92:fc:a5:1b:4c:66:86:
57:ca:74:84:94:a3:e5:f4:82:07:16:e4:d2:6f:c0:
4c:77:35:4c:61:f8:bc:c2:79:df:e4:92:ee:dd:f7:
92:3f:77:b9:76:96:a6:5c:84:79:7d:f8:d7:1e:ee:
c2:5c:6d:cb:0d:f4:d2:4c:e3:6c:52:14:7d:16:9a:
03:78:29:13:8d:d0:ab:24:8f:2d:53:fb:d0:df:18:
07:57:d4:06:86:97:f5:2c:17:1c:19:15:62:7b:e7:
41:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:39:8F:6B:65:9B:68:70:FD:B3:03:41:D4:63:54:F8:08:60:B7:BE
X509v3 Authority Key Identifier:
keyid:EE:0F:3F:F0:E8:43:0A:1C:B4:5A:D3:26:09:83:A9:D3:49:72:26:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/4B71DE7CD160FB471BE4FA8EB772197AF8BD8CE3637458D218FFE303DE48AB98/0/EE0F3FF0E8430A1CB45AD3260983A9D349722624.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EE0F3FF0E8430A1CB45AD3260983A9D349722624.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4B71DE7CD160FB471BE4FA8EB772197AF8BD8CE3637458D218FFE303DE48AB98/0/3139302e3130382e37322e302f32342d3234203d3e20323633323436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.108.72.0/24
Signature Algorithm: sha256WithRSAEncryption
51:fa:ff:bb:0f:f5:da:f5:3b:3a:bf:83:3b:c0:46:fa:c6:ef:
d6:79:a4:7b:21:96:9a:91:98:ce:70:85:fb:cd:9a:e3:23:90:
78:07:b3:1c:fc:3c:e3:69:d5:95:67:73:80:28:15:29:ae:f5:
58:e7:7d:46:7e:8d:53:c8:9c:59:00:eb:bc:79:76:56:f9:c0:
0f:c5:e2:af:52:eb:1a:b2:90:3c:c0:26:96:24:a9:9a:af:e7:
4b:e9:a8:0b:1f:c5:66:16:9d:4e:e4:f7:2b:e3:07:1a:9c:ec:
43:3c:cc:44:84:d7:92:5d:13:28:0d:c7:62:58:b9:16:b4:fc:
7e:70:f4:45:d8:0b:70:63:87:43:c6:2a:b1:73:1c:ab:56:b7:
f5:89:e0:54:84:c5:f1:d6:d5:6d:44:2f:93:08:44:34:89:59:
1b:19:55:14:89:ec:d1:10:20:33:f5:8a:44:65:e1:46:30:7a:
84:07:8f:11:ee:78:eb:86:35:c4:27:ad:c5:ac:be:39:af:26:
dd:08:b8:98:61:e2:cb:57:13:4f:19:83:e7:3a:6b:88:92:cb:
9c:63:60:d6:ee:cc:02:bf:a8:d1:73:c8:84:0c:6c:4b:ab:36:
36:e4:d7:9a:cd:f3:29:94:17:40:3f:d7:7b:bf:bf:f2:e7:fa:
ee:c9:5a:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 04:05:08 2025 by rpki-client