Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5D2665180959F31AB0FC833CCD759F5CA6CA5B61674D8A7B78E7EE072ADAA739/0/3133382e302e3132302e302f32332d3234203d3e20323732303134.roa
File: 3133382e302e3132302e302f32332d3234203d3e20323732303134.roa (raw, json)
Hash identifier: 5rexdHaTObbgeTz0fegEDH/geWZQsbcWgrtLU+wuPc0=
Subject key identifier: 0C:04:99:B4:94:DF:35:EA:EF:D1:2B:A4:C7:16:21:33:1A:18:7C:79
Certificate issuer: /CN=2DCCD1347B8E4A264380CB0C336092CD0A179491
Certificate serial: 72F2E5B4DC9E0ACFDB194D64B40F41EECC97E1DA
Authority key identifier: 2D:CC:D1:34:7B:8E:4A:26:43:80:CB:0C:33:60:92:CD:0A:17:94:91
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2DCCD1347B8E4A264380CB0C336092CD0A179491.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5D2665180959F31AB0FC833CCD759F5CA6CA5B61674D8A7B78E7EE072ADAA739/0/3133382e302e3132302e302f32332d3234203d3e20323732303134.roa
Signing time: Tue 05 Mar 2024 17:46:13 +0000
ROA not before: Tue 05 Mar 2024 17:41:13 +0000
ROA not after: Tue 04 Mar 2025 17:46:13 +0000
asID: 272014
IP address blocks: 138.0.120.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:f2:e5:b4:dc:9e:0a:cf:db:19:4d:64:b4:0f:41:ee:cc:97:e1:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2DCCD1347B8E4A264380CB0C336092CD0A179491
Validity
Not Before: Mar 5 17:41:13 2024 GMT
Not After : Mar 4 17:46:13 2025 GMT
Subject: CN=0C0499B494DF35EAEFD12BA4C71621331A187C79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:7f:7e:e8:66:1e:bd:a1:e6:91:63:59:9f:44:
1a:11:c9:0b:58:82:fb:98:34:54:7f:6a:bf:04:c1:
54:d0:aa:5b:c5:c7:1d:0e:07:93:52:c3:f1:cd:33:
c8:b1:71:4d:74:33:d0:f2:dd:4a:29:1f:21:3f:b8:
62:42:8e:36:3c:f2:dc:26:7f:7f:98:2e:8d:23:3b:
41:dd:5b:40:8d:2b:48:92:8f:72:2f:87:db:2e:bd:
e9:48:24:ce:0a:70:d2:39:d5:57:eb:35:a4:ca:97:
c4:2e:29:84:bb:9a:f3:8d:a0:27:8f:82:34:49:e5:
59:27:ee:52:c2:ff:ab:33:a2:94:3c:60:87:c9:ab:
9f:75:d2:62:72:a1:cd:bd:f9:18:c4:0e:32:a5:6c:
3d:9d:ec:87:85:26:ea:06:c6:ae:c0:45:3e:eb:c8:
65:a2:c3:f4:93:dd:c3:7e:04:17:75:e6:14:8a:01:
f4:ce:45:d1:68:68:34:45:7a:2b:b8:47:0a:e2:35:
11:a6:c6:30:cc:fd:01:f2:db:0e:5f:d2:84:e7:9a:
94:70:1c:c0:b2:b6:c4:3e:ba:2f:fb:54:53:00:fe:
0e:a9:65:d5:3f:b4:68:61:e8:d1:ad:45:95:89:52:
da:cc:bf:1d:b8:82:26:07:f2:34:d1:f5:82:5c:a5:
6e:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:04:99:B4:94:DF:35:EA:EF:D1:2B:A4:C7:16:21:33:1A:18:7C:79
X509v3 Authority Key Identifier:
keyid:2D:CC:D1:34:7B:8E:4A:26:43:80:CB:0C:33:60:92:CD:0A:17:94:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/5D2665180959F31AB0FC833CCD759F5CA6CA5B61674D8A7B78E7EE072ADAA739/0/2DCCD1347B8E4A264380CB0C336092CD0A179491.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2DCCD1347B8E4A264380CB0C336092CD0A179491.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5D2665180959F31AB0FC833CCD759F5CA6CA5B61674D8A7B78E7EE072ADAA739/0/3133382e302e3132302e302f32332d3234203d3e20323732303134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.0.120.0/23
Signature Algorithm: sha256WithRSAEncryption
68:cb:a1:17:f9:f7:3d:78:51:2c:1e:a2:e7:10:97:c8:b7:f2:
f8:b0:4a:0f:b6:69:8d:20:f9:d4:24:2a:e7:75:fc:0b:0f:d8:
aa:98:9d:3c:9d:1b:82:09:3d:26:9c:49:0f:47:97:0b:c2:89:
6a:b3:d3:d4:da:1f:92:38:5f:f8:20:eb:e4:c4:6c:98:ce:e7:
ab:15:86:b9:2d:72:44:a2:c5:bc:27:f9:4b:45:dc:d5:c7:d3:
41:04:5d:02:27:14:b2:fe:bb:1d:12:2c:43:e3:b3:72:fe:97:
34:4b:5a:63:f8:c0:82:1a:0c:45:44:27:84:65:3c:0f:db:d7:
92:e4:bd:b6:a9:7e:e3:23:98:e6:7b:76:68:3c:43:6f:4c:44:
06:3b:19:d8:a1:ef:5f:fa:92:c9:95:0c:72:26:80:7a:43:b1:
f6:41:b2:ec:ae:e9:2a:2d:47:bd:a5:49:d4:04:c3:17:aa:85:
1b:1d:60:25:23:4f:f6:86:54:eb:f8:84:08:b1:53:8b:7c:7c:
de:c8:e1:79:c2:74:1e:3e:af:73:54:1f:b1:f8:75:e2:e3:e3:
0c:d0:a8:39:4e:e7:0d:3e:60:59:2f:15:17:a9:60:c4:08:69:
b8:db:f5:00:ca:76:9d:cd:b4:06:a5:15:11:67:c5:3c:0d:cc:
aa:05:bd:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 00:21:21 2025 by rpki-client