Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3230312e3137342e3230302e302f32312d3234203d3e203238353039.roa
File: 3230312e3137342e3230302e302f32312d3234203d3e203238353039.roa (raw, json)
Hash identifier: k7NqcvoQOONWtZ36AmeQ7ahqC6zlqluT5n3hgASpidY=
Subject key identifier: 2D:17:70:93:B3:E1:2C:21:C2:76:F4:95:55:E3:30:2E:3E:D6:F0:63
Certificate issuer: /CN=0D01CF02784E73C34A5AF36C6029E9464A070D38
Certificate serial: 31BE42BE64BFE6078B5049DF4DECD0742F0D71A7
Authority key identifier: 0D:01:CF:02:78:4E:73:C3:4A:5A:F3:6C:60:29:E9:46:4A:07:0D:38
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3230312e3137342e3230302e302f32312d3234203d3e203238353039.roa
Signing time: Tue 05 Mar 2024 18:17:51 +0000
ROA not before: Tue 05 Mar 2024 18:12:51 +0000
ROA not after: Tue 04 Mar 2025 18:17:51 +0000
asID: 28509
IP address blocks: 201.174.200.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:be:42:be:64:bf:e6:07:8b:50:49:df:4d:ec:d0:74:2f:0d:71:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0D01CF02784E73C34A5AF36C6029E9464A070D38
Validity
Not Before: Mar 5 18:12:51 2024 GMT
Not After : Mar 4 18:17:51 2025 GMT
Subject: CN=2D177093B3E12C21C276F49555E3302E3ED6F063
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:06:55:ff:64:58:21:64:e4:e9:da:b0:b4:b0:
53:b7:7a:f3:c3:69:1b:68:26:bb:0f:fe:b2:56:05:
96:d5:52:9e:5b:d6:17:c0:f5:61:f8:bb:01:31:de:
3a:a0:d9:56:42:ee:e1:b0:1d:01:bd:c5:fc:85:09:
71:09:b3:6b:61:c6:b2:f6:c3:19:e8:aa:eb:a0:e0:
b9:e1:58:9c:26:a1:d6:40:85:aa:1c:ef:cc:4c:4b:
e6:f3:2d:0d:a7:78:aa:01:de:20:78:87:09:fd:70:
dd:12:6a:b1:83:b3:27:74:15:2b:0a:a1:b6:ae:e6:
de:d8:27:e6:e1:09:36:a6:ee:4e:c8:cc:30:ba:96:
dd:a8:86:84:c2:71:c2:45:fe:db:14:20:8b:3e:6e:
2c:fe:4d:a0:cc:d6:fe:2b:82:82:86:88:91:2b:89:
ab:d3:0e:1f:96:2d:e9:16:77:2b:d5:85:f2:72:9f:
26:53:05:dd:de:ca:15:de:3e:85:0e:4b:d7:c0:87:
48:ed:1d:fa:d9:68:46:02:d2:fe:66:98:5a:12:90:
1c:1d:5f:b9:37:64:98:99:1a:42:05:c1:21:78:44:
21:54:6b:1d:35:4f:6f:d4:46:37:43:b8:16:16:ae:
75:1b:f6:56:78:3a:98:eb:18:4e:3d:73:64:f2:7f:
95:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:17:70:93:B3:E1:2C:21:C2:76:F4:95:55:E3:30:2E:3E:D6:F0:63
X509v3 Authority Key Identifier:
keyid:0D:01:CF:02:78:4E:73:C3:4A:5A:F3:6C:60:29:E9:46:4A:07:0D:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3230312e3137342e3230302e302f32312d3234203d3e203238353039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.174.200.0/21
Signature Algorithm: sha256WithRSAEncryption
93:4c:7b:1d:1d:8d:84:28:96:75:7d:0f:f5:94:14:04:88:bb:
88:fb:eb:87:af:b2:e3:a9:63:fe:7e:55:2b:83:b2:dc:e1:42:
49:b7:57:3e:86:c4:42:a7:e9:1f:59:84:d2:2f:90:a2:da:c3:
d5:67:0a:b4:30:a7:d5:eb:1d:ce:73:b4:e8:ad:b4:b3:bb:15:
e8:dd:4d:0b:05:58:12:af:d6:64:16:06:74:49:f1:59:04:5d:
b3:e9:6f:d2:f6:cf:57:8f:3d:2d:1b:4e:e6:e0:f4:bf:7c:d7:
88:6c:e2:b5:03:33:b3:70:ac:c5:d3:89:8f:fb:99:d2:ad:2b:
bb:63:67:a1:a6:20:5c:be:9b:49:90:85:7e:4f:6c:6c:9c:cd:
b3:6d:ed:6c:ce:a0:fb:67:1a:7b:b8:5d:15:40:39:8d:6a:37:
f7:38:4f:d8:cd:93:a6:e3:9a:99:8f:c9:89:d6:b4:b0:76:6f:
99:db:27:44:a7:81:20:c0:b5:d9:97:cd:c0:68:ba:32:2e:c6:
cb:35:07:d0:71:d1:b6:00:7b:de:9d:15:8f:c7:a3:4b:51:e6:
9a:c9:c0:5f:b2:ef:0a:35:9d:23:2e:54:de:28:3b:22:e5:08:
94:95:59:b3:a3:4b:93:fd:5b:42:7a:0e:8c:f0:1d:19:c3:78:
a1:37:ff:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:14:14 2025 by rpki-client