Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/3139312e3130332e3132382e302f31372d3137203d3e203133343839.roa
File: 3139312e3130332e3132382e302f31372d3137203d3e203133343839.roa (raw, json)
Hash identifier: jxEc+scYZZs7TIl1m3XYhGksiOX/0nYrPu1sIgih+04=
Subject key identifier: 08:CD:E5:82:DD:84:D8:BF:C2:FF:4C:37:D6:33:0B:87:BE:5D:96:90
Certificate issuer: /CN=34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7
Certificate serial: 6BA31C2EA9092E437DE5E8CC3518F6438F064DCE
Authority key identifier: 34:03:9F:5B:AD:EC:D4:DF:B4:2E:3F:4E:0C:5E:CE:97:A3:01:80:A7
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/3139312e3130332e3132382e302f31372d3137203d3e203133343839.roa
Signing time: Thu 09 Jan 2025 20:05:00 +0000
ROA not before: Thu 09 Jan 2025 20:00:00 +0000
ROA not after: Thu 08 Jan 2026 20:05:00 +0000
asID: 13489
IP address blocks: 191.103.128.0/17 maxlen: 17
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:a3:1c:2e:a9:09:2e:43:7d:e5:e8:cc:35:18:f6:43:8f:06:4d:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7
Validity
Not Before: Jan 9 20:00:00 2025 GMT
Not After : Jan 8 20:05:00 2026 GMT
Subject: CN=08CDE582DD84D8BFC2FF4C37D6330B87BE5D9690
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:5a:46:95:62:3e:4f:b9:e6:2e:66:21:c5:c1:
ff:26:f5:b6:b7:ee:2c:4c:9d:e2:f2:36:01:b8:f6:
fe:c6:a7:5e:d2:c9:77:d0:ba:30:13:35:20:13:c8:
63:14:89:6d:28:87:ee:9e:45:b3:1a:c6:f6:00:b7:
3e:4c:87:bf:2d:62:3e:71:75:c1:0b:38:a0:e9:5f:
5c:c1:ee:a7:6d:58:a8:65:bf:15:72:6b:e3:07:6e:
df:46:8f:05:af:bc:7a:ef:04:2a:28:25:de:f4:e5:
04:4e:46:42:03:91:1a:6b:62:d6:db:9b:16:bf:db:
60:8c:53:65:46:1c:6c:53:08:5e:1c:73:1b:af:e0:
60:62:44:38:9b:7d:f3:67:18:67:57:81:34:d2:f9:
52:d1:57:76:e8:b1:e7:4a:aa:52:bc:bf:d7:6e:b8:
77:7a:c9:ea:f2:81:28:f1:08:09:88:34:10:d1:58:
8c:42:69:de:71:a8:81:e8:ac:dd:14:48:b0:08:29:
d6:a6:61:59:03:e1:35:49:d1:3e:fe:bb:a9:e5:75:
89:a7:35:59:85:85:5e:c4:50:0d:75:23:1e:58:a0:
bd:bd:70:1a:d9:4d:f8:3d:b0:d6:39:e7:df:e3:47:
a6:5d:49:33:20:95:4c:b0:a8:df:77:94:11:d1:a4:
a3:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:CD:E5:82:DD:84:D8:BF:C2:FF:4C:37:D6:33:0B:87:BE:5D:96:90
X509v3 Authority Key Identifier:
keyid:34:03:9F:5B:AD:EC:D4:DF:B4:2E:3F:4E:0C:5E:CE:97:A3:01:80:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/3139312e3130332e3132382e302f31372d3137203d3e203133343839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.103.128.0/17
Signature Algorithm: sha256WithRSAEncryption
a0:76:65:ae:d0:f3:85:be:7e:b0:29:0a:23:8d:67:41:d1:5d:
67:31:40:dc:f4:a6:37:a1:1a:51:57:19:06:2c:0d:3d:34:42:
51:f3:56:4e:94:6c:fd:7d:5a:e1:7b:f1:2e:e7:3d:13:df:9e:
a4:bf:d5:ef:67:b2:e8:f7:aa:db:73:98:36:c3:89:ab:0b:6c:
75:0d:fb:07:c1:e2:e0:fc:36:60:66:2c:82:17:57:77:8d:73:
8f:79:ed:eb:71:e7:2a:dc:e0:4c:7f:f3:1c:d3:be:9e:e4:3a:
46:03:e3:83:01:ec:66:4c:ed:4b:86:ac:5d:86:f2:20:17:ad:
12:13:e9:e9:88:10:df:ca:76:f0:ec:e8:99:7e:61:af:b4:c9:
1c:62:97:3f:17:ac:22:02:07:c6:06:fe:bd:ff:23:2e:38:79:
32:ec:cb:a5:f2:61:da:7d:4f:46:c8:04:a3:f1:40:27:ba:d7:
a4:f9:ff:f8:74:b3:4f:44:01:ec:13:af:64:1f:1b:11:d2:4a:
61:50:16:15:ef:c3:d8:9c:db:29:c8:58:37:9b:ce:5a:d5:61:
ed:4a:8d:af:f7:17:ea:94:f3:c5:d9:6d:6a:4d:ca:f6:85:f7:
83:86:41:43:3e:b0:c8:70:87:7c:00:3b:c8:ae:e7:51:ac:d9:
43:46:de:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 02:29:51 2025 by rpki-client