Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AF3C468FF2D26AFF6DC96BC449ED174C9B5F019E0ED2DF09FF9DB7C28DF69664/0/3137392e302e3138372e302f32342d3234203d3e20323730303437.roa
File: 3137392e302e3138372e302f32342d3234203d3e20323730303437.roa (raw, json)
Hash identifier: 4kRSgBo6f6OKEOrkbhPH0Ln/V62ZtYdyExLbTcrEg/M=
Subject key identifier: 2D:F3:FD:28:93:2C:8C:2A:20:89:9A:9D:2D:3B:EF:4D:7A:FC:41:3F
Certificate issuer: /CN=90AFD2ED986A4DAE86A448C1E6E567CE33186BC4
Certificate serial: 4A152DC1BAF64F225C1D200E1E515039E70F7B08
Authority key identifier: 90:AF:D2:ED:98:6A:4D:AE:86:A4:48:C1:E6:E5:67:CE:33:18:6B:C4
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/90AFD2ED986A4DAE86A448C1E6E567CE33186BC4.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/AF3C468FF2D26AFF6DC96BC449ED174C9B5F019E0ED2DF09FF9DB7C28DF69664/0/3137392e302e3138372e302f32342d3234203d3e20323730303437.roa
Signing time: Tue 05 Mar 2024 18:01:52 +0000
ROA not before: Tue 05 Mar 2024 17:56:52 +0000
ROA not after: Tue 04 Mar 2025 18:01:52 +0000
asID: 270047
IP address blocks: 179.0.187.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:15:2d:c1:ba:f6:4f:22:5c:1d:20:0e:1e:51:50:39:e7:0f:7b:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90AFD2ED986A4DAE86A448C1E6E567CE33186BC4
Validity
Not Before: Mar 5 17:56:52 2024 GMT
Not After : Mar 4 18:01:52 2025 GMT
Subject: CN=2DF3FD28932C8C2A20899A9D2D3BEF4D7AFC413F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:24:21:4a:44:57:e0:8f:9e:80:06:ef:97:ed:
61:9a:4c:0b:d5:05:95:d1:90:cc:cf:d2:4a:d9:65:
55:81:cf:40:c7:64:5f:c9:44:0a:62:87:5e:e2:df:
99:18:52:32:7c:cc:d4:73:17:06:ca:b5:ab:5b:75:
31:81:d4:3a:cc:f7:a4:fd:58:a8:fb:e5:ab:ca:72:
b7:74:51:fb:65:bf:d3:28:c3:94:9c:d9:1d:b1:bf:
0d:8f:88:17:96:d3:2e:ff:be:e8:87:c0:7c:b1:46:
8a:80:ce:87:87:72:5c:66:b4:c9:a9:f3:9c:9d:8f:
2c:c5:f2:16:27:7b:96:b8:f4:74:46:7e:5a:5d:24:
98:fb:43:9c:15:ef:7b:49:56:cb:ae:31:91:e0:58:
5d:ba:62:e5:e1:55:6a:e5:d2:63:a0:40:f7:f5:5e:
ca:c9:bc:35:de:88:18:2f:90:f1:72:ed:54:fd:87:
aa:d6:e8:f5:0e:5b:14:57:d0:d7:cd:49:87:c4:94:
51:4f:54:17:27:5e:5d:61:77:bf:46:7c:c0:cf:16:
0d:3a:3b:47:e9:48:68:df:02:11:74:a3:97:e5:0b:
01:52:7f:5f:20:f3:ad:31:a1:60:c3:13:b1:8d:df:
71:71:8f:d0:93:0a:ad:b8:e2:e3:1b:1a:41:0d:29:
16:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:F3:FD:28:93:2C:8C:2A:20:89:9A:9D:2D:3B:EF:4D:7A:FC:41:3F
X509v3 Authority Key Identifier:
keyid:90:AF:D2:ED:98:6A:4D:AE:86:A4:48:C1:E6:E5:67:CE:33:18:6B:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/AF3C468FF2D26AFF6DC96BC449ED174C9B5F019E0ED2DF09FF9DB7C28DF69664/0/90AFD2ED986A4DAE86A448C1E6E567CE33186BC4.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/90AFD2ED986A4DAE86A448C1E6E567CE33186BC4.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AF3C468FF2D26AFF6DC96BC449ED174C9B5F019E0ED2DF09FF9DB7C28DF69664/0/3137392e302e3138372e302f32342d3234203d3e20323730303437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.0.187.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:0c:48:10:e4:58:9f:cd:60:1f:99:ef:4d:c4:28:9e:62:73:
c5:73:89:ec:7e:ee:9e:1f:b1:c1:9f:95:04:c4:c4:64:21:a6:
c4:a5:ab:44:73:5f:ef:02:3d:c5:55:2c:e4:f5:18:d2:3c:e0:
69:6f:96:29:aa:1b:16:37:5f:5d:19:ae:b4:31:09:89:f2:a1:
87:47:21:a0:38:96:ca:2e:08:7d:8d:e1:03:b6:90:9e:94:2a:
0e:0b:9b:22:1e:8c:c8:ce:48:a3:d3:c4:7f:f9:96:ff:7e:41:
2b:c0:4b:6b:e9:20:98:65:66:bf:78:17:58:ce:e7:f5:79:db:
26:5b:92:da:9c:aa:8b:d7:3b:b3:b0:3b:2e:9e:6f:aa:69:f3:
4f:b4:08:28:17:fe:00:a4:b8:35:9f:34:5a:65:c1:22:e2:ce:
1c:59:57:35:f0:41:15:cd:03:6d:3b:03:72:bd:29:7c:09:5c:
76:1c:4e:98:e4:c1:67:24:ab:7a:6d:b2:cd:e6:e9:79:5d:85:
6a:82:fa:94:be:4d:85:a7:cc:b5:98:87:52:f0:b7:ba:d6:36:
9e:fe:66:60:06:b8:20:f2:e7:c4:8e:7d:14:c1:c6:7c:5e:98:
fb:08:e0:de:2a:d1:36:af:33:15:81:df:99:5c:9f:ec:ff:5a:
1b:61:a9:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 02:15:21 2025 by rpki-client