Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/3138392e3230342e3235302e302f32342d3234203d3e203138373334.roa
File: 3138392e3230342e3235302e302f32342d3234203d3e203138373334.roa (raw, json)
Hash identifier: CHy8gzDJ0Rn8eR2hr6Uc6Zo9k7+2eqtR/41yYi9yj+Y=
Subject key identifier: A0:EF:1F:87:3A:A7:3A:FB:30:0A:B7:B6:B4:49:4C:E1:5B:55:5E:0C
Certificate issuer: /CN=7997A25836B429E9E6D15518DC739700B6C9C4FD
Certificate serial: 263639B1077ADBCFA7EB4EA4BF95D9D40EA6389C
Authority key identifier: 79:97:A2:58:36:B4:29:E9:E6:D1:55:18:DC:73:97:00:B6:C9:C4:FD
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/3138392e3230342e3235302e302f32342d3234203d3e203138373334.roa
Signing time: Tue 05 Mar 2024 17:50:39 +0000
ROA not before: Tue 05 Mar 2024 17:45:39 +0000
ROA not after: Tue 04 Mar 2025 17:50:39 +0000
asID: 18734
IP address blocks: 189.204.250.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:36:39:b1:07:7a:db:cf:a7:eb:4e:a4:bf:95:d9:d4:0e:a6:38:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7997A25836B429E9E6D15518DC739700B6C9C4FD
Validity
Not Before: Mar 5 17:45:39 2024 GMT
Not After : Mar 4 17:50:39 2025 GMT
Subject: CN=A0EF1F873AA73AFB300AB7B6B4494CE15B555E0C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:37:e8:ae:f2:e1:c3:0c:35:e6:f7:08:6a:e4:
71:9f:50:78:7d:be:29:5e:87:3b:6e:2a:78:0e:d7:
45:e1:9e:c4:10:e2:fc:62:21:88:98:04:e3:e8:13:
26:43:18:eb:f7:f7:63:3a:0b:9d:e4:48:d0:cc:63:
fa:88:2a:c7:51:7f:02:a3:ca:fa:40:77:2e:37:b9:
2c:76:00:db:6d:44:7b:07:72:ed:7b:4c:71:c3:03:
ef:b0:6a:77:ef:fe:27:7f:6c:ff:9a:60:20:ac:d9:
ae:ed:2b:1f:b4:35:d1:7b:75:e0:41:8b:b1:3d:da:
ef:79:be:7f:5e:2d:a2:68:5c:ac:43:a6:13:eb:6d:
bc:c2:5f:05:75:aa:bf:30:3d:db:1c:93:bc:e4:98:
00:b0:dc:76:db:bc:50:25:b5:27:1b:af:ef:b1:1d:
f7:56:a9:be:59:20:26:f3:7f:a4:33:90:58:f7:1f:
36:e1:38:45:2d:78:e8:12:40:b3:0b:3b:ec:1c:a6:
5c:6d:6b:1f:d1:55:33:c6:f0:3e:4d:cc:1e:0c:b5:
c5:0e:cf:49:79:5f:f9:dd:2d:95:54:7d:d6:b7:ed:
4c:b0:ca:4b:4d:6c:07:d7:50:d8:14:a9:14:e5:bc:
a2:82:eb:e5:97:8d:d9:ad:ec:d0:04:3d:31:4f:29:
3d:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:EF:1F:87:3A:A7:3A:FB:30:0A:B7:B6:B4:49:4C:E1:5B:55:5E:0C
X509v3 Authority Key Identifier:
keyid:79:97:A2:58:36:B4:29:E9:E6:D1:55:18:DC:73:97:00:B6:C9:C4:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/3138392e3230342e3235302e302f32342d3234203d3e203138373334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.204.250.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:52:bc:a2:c9:89:0b:94:a2:28:23:28:f4:c7:e1:be:14:fd:
3f:07:d9:8b:ed:36:a1:b2:23:0e:b4:32:fa:ad:1b:3a:6b:c6:
ac:95:a5:43:36:4f:0c:fc:01:8b:0e:c4:2b:89:6a:4e:be:1c:
27:52:1c:f4:c3:55:c5:69:93:37:26:d2:93:a6:73:93:bf:6c:
1b:1b:5c:d6:ee:51:eb:39:8f:5a:16:3c:b5:a4:bd:49:39:89:
04:b8:6f:9b:91:12:94:a8:2e:64:76:0d:1b:de:cf:ba:1d:18:
b1:ea:36:01:1d:d3:bd:b4:3d:3d:8c:68:66:76:ba:dd:dc:cb:
23:42:d0:ef:49:29:bb:e5:43:d0:0c:56:fc:1a:96:c5:d8:6f:
19:64:83:d6:8d:2b:2c:bb:f8:a0:e1:dc:bb:a3:6e:59:2c:dd:
78:74:2c:88:fc:dd:04:28:7f:06:e4:32:d4:bc:2a:e8:44:3d:
6a:e4:0c:09:46:83:5d:e4:06:70:89:09:9c:fc:5a:b2:0a:32:
57:8e:8e:c3:3f:ef:a5:00:13:96:60:96:a9:71:16:ab:2e:ce:
78:3e:20:6a:45:10:44:60:a4:8c:cb:40:63:7c:47:93:5b:bc:
2f:6b:e2:4b:30:de:e6:9b:7d:9c:41:4a:36:af:49:8b:d9:91:
65:ca:dd:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:21:47 2025 by rpki-client