Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/3133322e3235312e3132382e302f31382d3234203d3e203139393035.roa
File: 3133322e3235312e3132382e302f31382d3234203d3e203139393035.roa (raw, json)
Hash identifier: J2QByCKfk+mHcotM/JJoRIIGcCaV+VbBoKt/Cpuk87U=
Subject key identifier: 2B:B8:4E:28:51:7B:F8:79:11:EE:32:34:10:A8:2D:59:B8:66:9E:25
Certificate issuer: /CN=24D42265AC44C52C720364B7A5C0074DD2179046
Certificate serial: 5BC3CBBAEE7A3ACD06842E75F88CB4F6779340F2
Authority key identifier: 24:D4:22:65:AC:44:C5:2C:72:03:64:B7:A5:C0:07:4D:D2:17:90:46
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24D42265AC44C52C720364B7A5C0074DD2179046.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/3133322e3235312e3132382e302f31382d3234203d3e203139393035.roa
Signing time: Tue 05 Mar 2024 17:56:43 +0000
ROA not before: Tue 05 Mar 2024 17:51:43 +0000
ROA not after: Tue 04 Mar 2025 17:56:43 +0000
asID: 19905
IP address blocks: 132.251.128.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:c3:cb:ba:ee:7a:3a:cd:06:84:2e:75:f8:8c:b4:f6:77:93:40:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24D42265AC44C52C720364B7A5C0074DD2179046
Validity
Not Before: Mar 5 17:51:43 2024 GMT
Not After : Mar 4 17:56:43 2025 GMT
Subject: CN=2BB84E28517BF87911EE323410A82D59B8669E25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:00:da:3c:27:4b:02:5a:2c:61:77:88:fa:83:
4f:0b:e8:73:3a:16:03:85:35:68:ec:ab:22:e9:71:
c5:ba:5e:09:65:32:ce:a8:36:90:ab:fb:73:eb:fa:
7d:81:fa:39:c4:35:d8:19:c8:26:48:bf:16:39:89:
01:d8:dc:ef:36:33:1a:f9:db:a6:ed:4a:69:0d:43:
e6:8d:bd:5a:c6:82:15:e1:1d:a8:56:9c:1f:2d:b7:
71:8a:95:56:d3:68:04:94:48:3f:ef:37:04:37:ef:
63:ff:6c:2a:bc:17:31:54:ac:9c:9a:c4:9a:59:fc:
ed:27:14:0c:d2:c1:e1:28:80:12:16:da:3f:5d:0e:
fb:b1:4d:ff:b8:3a:9a:de:f7:48:d5:74:eb:42:9c:
06:7b:fe:07:dc:d2:c5:df:c4:21:56:ac:31:35:e0:
eb:83:5e:99:a1:d1:e9:8d:e9:7a:e8:4f:de:1e:4f:
9a:4e:34:18:e1:44:b7:e0:d3:1b:08:86:9d:37:60:
8c:c9:62:02:e5:c5:30:a7:b7:1b:57:00:d9:c8:e1:
17:eb:6a:08:e3:8c:bd:79:75:34:9d:e7:ef:f2:67:
c5:57:05:ac:2c:20:ad:c5:99:df:03:8d:58:47:98:
d9:59:4d:cc:e6:8f:7b:d6:38:f9:ac:de:ea:a6:90:
c2:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:B8:4E:28:51:7B:F8:79:11:EE:32:34:10:A8:2D:59:B8:66:9E:25
X509v3 Authority Key Identifier:
keyid:24:D4:22:65:AC:44:C5:2C:72:03:64:B7:A5:C0:07:4D:D2:17:90:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/24D42265AC44C52C720364B7A5C0074DD2179046.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24D42265AC44C52C720364B7A5C0074DD2179046.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/3133322e3235312e3132382e302f31382d3234203d3e203139393035.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
132.251.128.0/18
Signature Algorithm: sha256WithRSAEncryption
18:73:9d:04:04:45:2a:d6:63:f0:1c:93:89:4e:f1:98:ec:94:
34:31:9d:9b:a1:9e:de:d8:0d:f3:cd:26:9a:d0:fe:0e:88:25:
1b:0b:b2:9d:57:66:f5:69:f5:b7:da:66:d6:b8:7e:60:d1:3a:
26:ca:ce:8c:1d:41:c6:3e:53:d2:bd:28:a4:72:71:10:2e:18:
f2:23:3d:d6:c0:55:06:70:0b:23:bf:d2:93:02:3b:e5:7d:f6:
09:79:a3:65:3a:aa:0b:24:2d:b2:ce:1c:cb:8c:0b:52:cd:f5:
2e:24:69:55:3f:28:30:75:e8:a7:4b:bb:c5:a2:b8:b1:1c:62:
ae:d0:9d:88:f0:a1:a2:43:05:7e:45:66:bc:3a:7d:9a:eb:b8:
97:19:b3:8e:89:3b:48:3f:41:59:0d:b5:e5:95:da:af:e5:e5:
30:97:a9:28:bb:a2:74:56:9a:28:6e:05:a0:a7:e9:c1:5a:d4:
18:88:5f:7d:59:eb:e4:69:6f:d3:18:22:41:17:0c:64:09:da:
b0:31:6d:f7:05:5d:d4:04:e5:7e:ca:11:fd:fe:86:ab:a9:e0:
40:bd:16:2d:1f:da:43:29:22:28:75:62:05:7b:39:b3:30:c1:
46:d3:db:19:84:bd:4d:fb:7a:e5:33:30:c1:29:c8:fe:d1:9a:
71:71:f4:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:48:43 2025 by rpki-client