Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AF3C468FF2D26AFF6DC96BC449ED174C9B5F019E0ED2DF09FF9DB7C28DF69664/0/3137392e302e3138352e302f32342d3234203d3e20323730303437.roa
File: 3137392e302e3138352e302f32342d3234203d3e20323730303437.roa (raw, json)
Hash identifier: oRNBvCIvGQNXz9eerIIMEPLwWxEBn/5Jhf7IkndQr5Q=
Subject key identifier: 71:EA:A2:B4:AC:9E:87:C1:9C:7C:C5:30:9D:23:31:7F:E1:A6:19:99
Certificate issuer: /CN=90AFD2ED986A4DAE86A448C1E6E567CE33186BC4
Certificate serial: 2EE8D5D486D942A7EDE09B026729A8C8006327C1
Authority key identifier: 90:AF:D2:ED:98:6A:4D:AE:86:A4:48:C1:E6:E5:67:CE:33:18:6B:C4
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/90AFD2ED986A4DAE86A448C1E6E567CE33186BC4.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/AF3C468FF2D26AFF6DC96BC449ED174C9B5F019E0ED2DF09FF9DB7C28DF69664/0/3137392e302e3138352e302f32342d3234203d3e20323730303437.roa
Signing time: Tue 05 Mar 2024 18:01:53 +0000
ROA not before: Tue 05 Mar 2024 17:56:53 +0000
ROA not after: Tue 04 Mar 2025 18:01:53 +0000
asID: 270047
IP address blocks: 179.0.185.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:e8:d5:d4:86:d9:42:a7:ed:e0:9b:02:67:29:a8:c8:00:63:27:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90AFD2ED986A4DAE86A448C1E6E567CE33186BC4
Validity
Not Before: Mar 5 17:56:53 2024 GMT
Not After : Mar 4 18:01:53 2025 GMT
Subject: CN=71EAA2B4AC9E87C19C7CC5309D23317FE1A61999
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:21:ed:76:62:be:b2:cb:41:9a:58:1b:8d:c4:
38:5e:5e:66:97:67:5d:1e:72:4d:84:50:22:03:36:
d1:d1:e6:aa:a3:9e:1c:83:e5:8b:db:b0:4f:98:84:
1a:f0:cf:4c:1b:ad:42:34:96:d2:15:f3:e6:79:1b:
31:4c:66:1f:77:52:a3:ec:1f:ee:a3:00:f5:95:91:
65:57:1d:ba:10:87:22:34:5b:27:fb:3d:38:07:8f:
a4:c4:ca:e7:9e:c8:74:e0:07:ac:99:08:63:25:6b:
56:cf:d3:57:0a:eb:5f:fc:3d:ac:bd:4f:63:ef:d9:
49:31:15:11:97:9b:65:7a:2e:00:e4:7c:02:d2:c8:
b6:fd:fc:f7:13:e0:90:0e:06:3e:d4:af:5f:52:83:
ac:1c:e5:c6:3d:8f:f3:d4:aa:80:46:9a:71:66:5a:
b3:0a:c3:c6:ea:06:3d:2f:81:a7:96:6b:91:05:48:
93:17:29:38:45:5a:02:f8:5b:cb:eb:65:a7:5b:ea:
49:7f:50:45:2e:8f:7e:a1:72:27:19:a0:58:91:cf:
32:56:4c:eb:57:cc:aa:db:5b:fc:e9:65:a4:1c:f3:
b6:ed:38:8d:55:ef:70:44:87:b2:70:29:89:28:d3:
3b:f7:d2:7b:ca:b7:31:f8:d8:c0:e4:6d:af:5b:16:
f9:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:EA:A2:B4:AC:9E:87:C1:9C:7C:C5:30:9D:23:31:7F:E1:A6:19:99
X509v3 Authority Key Identifier:
keyid:90:AF:D2:ED:98:6A:4D:AE:86:A4:48:C1:E6:E5:67:CE:33:18:6B:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/AF3C468FF2D26AFF6DC96BC449ED174C9B5F019E0ED2DF09FF9DB7C28DF69664/0/90AFD2ED986A4DAE86A448C1E6E567CE33186BC4.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/90AFD2ED986A4DAE86A448C1E6E567CE33186BC4.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AF3C468FF2D26AFF6DC96BC449ED174C9B5F019E0ED2DF09FF9DB7C28DF69664/0/3137392e302e3138352e302f32342d3234203d3e20323730303437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.0.185.0/24
Signature Algorithm: sha256WithRSAEncryption
75:33:a6:d7:de:42:45:7c:6c:b3:73:b5:d8:5a:62:c2:ce:24:
7f:b6:8e:6a:8d:c6:58:78:22:e6:e5:3a:04:69:c7:da:80:0a:
68:22:94:d3:b2:7f:eb:92:6b:4a:52:72:26:46:ee:03:16:f5:
ff:40:94:82:b9:4a:42:f6:5e:e7:fc:68:91:8a:e0:72:a8:84:
cc:4f:51:d5:bd:75:36:32:c0:ea:a4:f2:3b:7b:21:f0:25:21:
f4:be:76:55:f4:c8:55:33:a8:4e:8f:d4:e9:d8:c4:11:18:5c:
7e:20:dc:f6:19:e4:f3:a7:94:c7:f7:69:15:ec:c2:d4:b2:f5:
74:e7:49:5d:59:f1:53:c2:45:58:27:61:d4:73:32:61:83:3c:
65:84:1a:5e:ee:3a:96:a8:c6:d7:cc:ce:d1:57:b5:e1:1f:f5:
79:bf:3d:04:dc:a3:ac:57:1c:c2:3a:47:6b:89:2b:cd:56:aa:
6d:66:f0:f5:34:ec:90:7b:c6:2e:bc:87:14:55:45:62:81:94:
97:23:4d:a8:b6:9e:99:6b:f7:5a:13:37:5c:66:20:33:18:4e:
b5:44:9e:6a:f7:0f:cd:1b:3e:0c:88:be:49:37:65:70:85:93:
f6:d4:dc:4b:e7:60:ca:a9:06:7e:bf:15:80:25:88:f0:fe:ca:
2c:00:f9:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 21:55:55 2025 by rpki-client