Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3230312e3137342e31362e302f32312d3234203d3e203332303938.roa
File: 3230312e3137342e31362e302f32312d3234203d3e203332303938.roa (raw, json)
Hash identifier: A/5aTpra9Mt88mg7yWUDXWTpnBY2pk3P7Z+1oPmmqdI=
Subject key identifier: 77:7F:29:1E:5D:FF:61:C8:FE:48:44:FD:A6:0C:FE:59:3D:A2:2A:CF
Certificate issuer: /CN=0D01CF02784E73C34A5AF36C6029E9464A070D38
Certificate serial: 54091401B8A8612E0A65E5E2D5F3DD4065B4AF67
Authority key identifier: 0D:01:CF:02:78:4E:73:C3:4A:5A:F3:6C:60:29:E9:46:4A:07:0D:38
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3230312e3137342e31362e302f32312d3234203d3e203332303938.roa
Signing time: Tue 05 Mar 2024 18:17:54 +0000
ROA not before: Tue 05 Mar 2024 18:12:54 +0000
ROA not after: Tue 04 Mar 2025 18:17:54 +0000
asID: 32098
IP address blocks: 201.174.16.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:09:14:01:b8:a8:61:2e:0a:65:e5:e2:d5:f3:dd:40:65:b4:af:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0D01CF02784E73C34A5AF36C6029E9464A070D38
Validity
Not Before: Mar 5 18:12:54 2024 GMT
Not After : Mar 4 18:17:54 2025 GMT
Subject: CN=777F291E5DFF61C8FE4844FDA60CFE593DA22ACF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:97:0a:e1:77:70:f3:f9:ac:25:3a:b1:f7:df:
52:68:7c:9c:53:00:e0:6c:e5:cc:21:4b:df:a2:96:
a1:1c:1a:81:56:bd:ef:39:10:62:2a:a3:24:7a:4a:
f1:62:de:67:c7:54:22:7b:33:cd:15:8f:b3:64:09:
f7:7c:7b:78:3e:63:c5:72:bd:0e:80:21:98:bb:6b:
2d:0c:14:21:d5:b6:e7:da:af:ab:8d:54:c0:41:75:
a3:3a:ce:53:24:4d:18:16:f4:09:68:4e:0e:03:31:
51:25:b3:82:08:51:f0:87:a0:ea:0e:80:5a:25:bd:
10:4b:c8:d6:a9:d1:74:6d:e4:8e:f1:9e:1b:99:25:
bf:97:c3:12:0c:02:94:9e:58:df:00:24:3d:71:1d:
35:99:89:d3:71:2b:bd:5f:69:13:1c:a0:1c:d5:ba:
ed:f2:e9:92:8b:23:78:20:1a:c6:e0:c3:54:83:7b:
28:ab:3d:4f:e2:69:34:c8:08:6b:93:c1:0e:54:0d:
42:98:59:16:25:40:aa:b1:11:fd:88:69:da:29:28:
84:5d:df:dd:3f:61:70:ba:e7:24:98:b3:8f:94:3c:
70:7b:33:70:71:25:dc:31:31:18:78:22:3c:37:d0:
1f:f6:0f:3d:81:65:cc:af:f8:50:83:90:e0:e9:4b:
d9:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:7F:29:1E:5D:FF:61:C8:FE:48:44:FD:A6:0C:FE:59:3D:A2:2A:CF
X509v3 Authority Key Identifier:
keyid:0D:01:CF:02:78:4E:73:C3:4A:5A:F3:6C:60:29:E9:46:4A:07:0D:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3230312e3137342e31362e302f32312d3234203d3e203332303938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.174.16.0/21
Signature Algorithm: sha256WithRSAEncryption
39:83:12:ca:c9:97:8b:97:f6:ce:94:2c:a4:3a:b9:a7:dc:f1:
5e:8a:43:a8:96:ad:e3:24:11:88:e7:2f:41:67:c0:7e:0e:2e:
db:98:92:06:4f:41:f4:68:a9:99:45:d8:90:24:58:c7:27:f7:
50:8e:d9:53:38:19:ed:57:30:77:62:25:17:5f:6c:75:76:ea:
02:cf:b8:cb:63:60:c6:79:84:23:71:20:d1:0a:00:e0:69:9c:
a4:88:1b:95:ce:7d:c8:dc:71:ed:eb:a9:07:4c:5c:d8:07:58:
e9:57:19:d7:54:4b:b5:cd:0c:39:30:c0:d8:c0:0b:a9:c9:9f:
4b:2d:f5:ce:a1:c5:da:b2:74:47:29:f5:c4:90:45:c8:c9:ad:
31:f1:98:74:07:65:3b:e3:54:79:f1:c8:65:bd:95:02:0c:a9:
c6:7b:e1:e1:d3:13:7d:d6:1d:d4:dd:e2:67:ec:02:a0:3b:34:
7c:83:47:5a:b8:3a:30:a3:3d:74:60:76:60:1e:3b:68:6b:f9:
1b:72:c6:da:ae:60:2d:98:13:48:f1:5a:5e:df:0d:8d:c4:52:
b7:fc:f0:6b:62:ad:08:f9:9f:78:ee:8b:f0:57:1d:be:ff:ec:
f9:0e:c3:f6:fd:87:8b:bc:7d:04:b3:7e:81:5f:73:8c:65:9d:
3b:31:ac:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:56:38 2025 by rpki-client