Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4D09661F6A550B3E21627E54957D8CD8E8C7C5FEDD92226C1FB01961E2593F10/0/3138352e37342e31392e302f32342d3234203d3e203532333335.roa
File: 3138352e37342e31392e302f32342d3234203d3e203532333335.roa (raw, json)
Hash identifier: tyEYC3lImyDjaTqK+zJ6Rn4xhZpldd3WNze4ltQFlk4=
Subject key identifier: 3A:60:18:21:50:2E:56:79:CB:AE:E6:C6:C6:89:13:97:66:D9:23:B9
Certificate issuer: /CN=CFF4EB94A3CA4240E99D515F818C70090A5BEF59
Certificate serial: 113968191D9649DD902E1468F85197FF2371A798
Authority key identifier: CF:F4:EB:94:A3:CA:42:40:E9:9D:51:5F:81:8C:70:09:0A:5B:EF:59
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CFF4EB94A3CA4240E99D515F818C70090A5BEF59.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4D09661F6A550B3E21627E54957D8CD8E8C7C5FEDD92226C1FB01961E2593F10/0/3138352e37342e31392e302f32342d3234203d3e203532333335.roa
Signing time: Tue 05 Mar 2024 17:41:20 +0000
ROA not before: Tue 05 Mar 2024 17:36:20 +0000
ROA not after: Tue 04 Mar 2025 17:41:20 +0000
asID: 52335
IP address blocks: 185.74.19.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:39:68:19:1d:96:49:dd:90:2e:14:68:f8:51:97:ff:23:71:a7:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CFF4EB94A3CA4240E99D515F818C70090A5BEF59
Validity
Not Before: Mar 5 17:36:20 2024 GMT
Not After : Mar 4 17:41:20 2025 GMT
Subject: CN=3A601821502E5679CBAEE6C6C689139766D923B9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:45:6a:a8:fb:2c:b4:55:53:db:37:46:b9:62:
b0:2f:32:3a:d9:66:e8:e1:a8:6f:c3:6b:59:14:68:
ef:03:f6:61:de:48:03:c9:cb:6b:67:24:8c:e9:cd:
d4:52:84:63:04:8e:d8:f1:a7:97:6a:aa:8f:24:0f:
34:1b:2b:bc:c3:52:83:60:ae:a2:c4:f4:b7:a1:41:
d4:41:55:34:61:f4:f6:67:d0:c0:66:f6:61:2e:16:
4f:f9:60:e1:ce:41:00:56:fc:63:14:51:1c:1f:38:
60:f2:45:b1:af:7d:ef:5a:64:72:22:19:a5:e2:0a:
61:49:c8:59:ce:31:c5:fc:c7:00:1e:93:d6:a8:15:
26:b4:da:81:8c:30:f2:17:50:41:bc:68:76:ab:30:
d7:1b:3b:a9:08:d7:80:c4:2b:76:eb:e2:c0:2a:12:
f1:50:99:ac:d9:77:84:94:9e:3b:b8:8d:eb:02:01:
fb:30:33:aa:b0:90:e0:6c:88:05:16:6f:b4:5b:b2:
1d:67:57:01:f2:15:ba:2a:d5:47:1d:e0:56:2e:9f:
e8:b3:e2:f3:ba:cd:e3:5e:76:cf:64:0e:b8:65:b6:
aa:c9:12:7f:1b:85:e6:4b:67:d8:98:93:d9:fc:cb:
09:03:8b:9b:bb:d2:e8:e7:3f:41:f1:3e:be:5e:99:
e3:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:60:18:21:50:2E:56:79:CB:AE:E6:C6:C6:89:13:97:66:D9:23:B9
X509v3 Authority Key Identifier:
keyid:CF:F4:EB:94:A3:CA:42:40:E9:9D:51:5F:81:8C:70:09:0A:5B:EF:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/4D09661F6A550B3E21627E54957D8CD8E8C7C5FEDD92226C1FB01961E2593F10/0/CFF4EB94A3CA4240E99D515F818C70090A5BEF59.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CFF4EB94A3CA4240E99D515F818C70090A5BEF59.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4D09661F6A550B3E21627E54957D8CD8E8C7C5FEDD92226C1FB01961E2593F10/0/3138352e37342e31392e302f32342d3234203d3e203532333335.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.74.19.0/24
Signature Algorithm: sha256WithRSAEncryption
43:46:c8:a7:22:23:3f:05:58:a8:a7:cd:36:40:2e:7b:20:f4:
21:64:ab:81:a1:97:52:a3:aa:27:6a:d7:99:4d:bc:27:7d:95:
06:e0:38:19:00:27:cc:ee:65:49:65:4c:b0:04:4b:5f:ec:26:
ca:6e:f1:a4:d6:04:23:f3:d5:d9:11:76:86:62:76:88:8f:fc:
57:b5:d6:2b:d9:c0:95:c4:6a:2c:2b:70:99:f2:9d:e5:54:54:
39:29:8e:18:76:29:71:73:d5:9a:cf:e3:98:df:ae:06:66:af:
1f:cc:a9:18:3f:7b:ae:71:ff:e2:83:15:a2:d8:9c:c1:b3:1d:
b8:3d:96:eb:2f:20:e8:ec:c7:86:f6:52:8c:a7:db:5b:08:25:
78:8b:65:da:ab:68:6c:a2:09:91:40:ae:81:08:ce:71:d5:bb:
33:14:b6:a1:22:eb:73:06:c2:35:54:2e:8f:6e:c0:e6:94:9d:
31:e0:db:6a:1b:07:b3:f0:2e:70:e9:28:b4:07:40:c9:b0:12:
3f:0d:59:2d:37:84:34:e6:a7:94:16:ff:79:87:40:7b:97:f8:
91:a4:d7:d5:c9:2d:5f:3d:3f:79:97:3d:ad:34:bc:08:6e:2e:
f1:89:b3:bc:a4:ec:bc:98:6d:64:3e:37:e3:0f:61:d4:25:f6:
a9:5b:22:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 20:56:29 2025 by rpki-client