Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/553E915C78B115ED1EF6B8D6134A2D64DB6515223B082FD4FB27AB8146AA88A2/0/3132382e3230312e3136382e302f32342d3234203d3e20323635373436.roa
File: 3132382e3230312e3136382e302f32342d3234203d3e20323635373436.roa (raw, json)
Hash identifier: fIEuOyUM1LZubCOw4LduUjnPhhzZmITk1u4f5xjbm14=
Subject key identifier: 52:AB:C0:28:2A:42:59:6E:7D:31:C0:C9:27:15:A0:7C:4A:FB:E2:B6
Certificate issuer: /CN=D5490AC693B00C1BF51582B1691FC2DC46B71FA9
Certificate serial: 306C752A71CCAA3AB03EE84CFEC542792E5FFF80
Authority key identifier: D5:49:0A:C6:93:B0:0C:1B:F5:15:82:B1:69:1F:C2:DC:46:B7:1F:A9
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D5490AC693B00C1BF51582B1691FC2DC46B71FA9.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/553E915C78B115ED1EF6B8D6134A2D64DB6515223B082FD4FB27AB8146AA88A2/0/3132382e3230312e3136382e302f32342d3234203d3e20323635373436.roa
Signing time: Tue 05 Mar 2024 17:41:05 +0000
ROA not before: Tue 05 Mar 2024 17:36:05 +0000
ROA not after: Tue 04 Mar 2025 17:41:05 +0000
asID: 265746
IP address blocks: 128.201.168.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:6c:75:2a:71:cc:aa:3a:b0:3e:e8:4c:fe:c5:42:79:2e:5f:ff:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D5490AC693B00C1BF51582B1691FC2DC46B71FA9
Validity
Not Before: Mar 5 17:36:05 2024 GMT
Not After : Mar 4 17:41:05 2025 GMT
Subject: CN=52ABC0282A42596E7D31C0C92715A07C4AFBE2B6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:3b:29:ac:64:fc:76:dc:42:74:5c:78:3b:44:
82:c0:e7:2d:d9:27:c8:d5:77:d1:ac:d3:46:5d:96:
40:f7:9e:66:e5:8e:90:92:34:36:db:fb:96:e2:50:
72:b0:61:fc:8c:58:85:e4:a6:40:a8:12:c3:37:18:
13:8d:3e:3d:34:a9:3e:c7:85:9d:8f:13:b3:f1:2b:
29:66:37:6f:c6:4e:26:6a:5d:00:0c:98:91:85:67:
c0:fb:2d:eb:af:77:67:15:a0:a6:4b:de:0d:3a:ad:
78:e2:ce:fb:ca:2a:93:60:82:9c:2a:d2:b1:b6:87:
f2:63:a5:83:e2:22:f7:dd:38:d9:e2:a0:79:b2:3f:
4f:c8:12:ab:15:4d:07:27:44:34:b9:a1:a8:50:28:
6c:2e:8c:96:74:c4:0d:29:95:64:e1:b7:d4:1e:69:
7d:06:47:c9:d2:86:54:05:3b:a4:6b:0a:da:44:9d:
96:1c:cc:f1:8d:52:4b:77:2f:da:34:4f:67:d0:3d:
6b:d4:30:88:81:ea:d3:7d:e9:3b:e8:f6:28:3d:23:
8b:97:06:92:f1:e5:b8:2d:1a:3a:70:ac:f8:f2:01:
ae:1c:81:1c:91:ff:67:5e:51:00:42:4c:cf:b3:1d:
e1:03:89:91:90:2a:6a:3b:63:f8:69:fa:a1:04:4c:
ba:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:AB:C0:28:2A:42:59:6E:7D:31:C0:C9:27:15:A0:7C:4A:FB:E2:B6
X509v3 Authority Key Identifier:
keyid:D5:49:0A:C6:93:B0:0C:1B:F5:15:82:B1:69:1F:C2:DC:46:B7:1F:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/553E915C78B115ED1EF6B8D6134A2D64DB6515223B082FD4FB27AB8146AA88A2/0/D5490AC693B00C1BF51582B1691FC2DC46B71FA9.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D5490AC693B00C1BF51582B1691FC2DC46B71FA9.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/553E915C78B115ED1EF6B8D6134A2D64DB6515223B082FD4FB27AB8146AA88A2/0/3132382e3230312e3136382e302f32342d3234203d3e20323635373436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
128.201.168.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:fc:89:8a:f0:1c:a1:d7:bd:98:7b:22:b1:07:ae:f0:41:c7:
c7:86:80:e8:df:b6:2e:6a:c5:4a:9f:43:db:cd:8b:62:1b:0e:
79:4e:78:50:17:6e:9c:6b:ef:d8:c0:b5:4f:33:c6:33:da:f3:
00:e9:3b:e4:86:8f:f4:2e:27:ce:7f:10:2f:55:66:75:99:4b:
35:69:15:49:92:29:fd:ad:cf:01:5f:67:a8:11:ce:f9:8b:68:
ca:71:f2:e8:0d:7d:67:49:20:04:9a:b9:cd:f4:b3:ee:e7:7f:
eb:82:6b:97:52:d9:fb:56:36:83:d1:07:8c:75:f0:f9:ee:18:
06:2e:68:c6:c8:b1:0f:2a:85:1e:18:91:0e:01:5b:b2:85:20:
36:7f:59:47:cf:b2:ba:e3:b0:3a:9e:18:74:84:ff:9a:11:3b:
7d:ff:0e:e6:f9:45:a7:44:2c:b5:cd:aa:25:d4:51:d0:af:66:
73:eb:6b:7e:21:d4:ff:f8:52:7a:55:c6:7e:7e:1a:0e:6d:d6:
60:3e:b8:fd:f9:56:58:d3:fe:c2:0b:d7:83:18:36:74:6a:fb:
b3:25:d4:ba:99:d7:c0:9a:e3:60:62:cb:78:c5:e2:83:c5:78:
b5:85:5b:c2:0d:bb:1a:f8:f9:bd:f0:cb:8a:39:13:22:e4:cf:
36:0b:46:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:17:40 2025 by rpki-client