Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C7B2A63D66F42CB6E50354A629BFB5A68A3FC6F96DC2A2043A751D3A9C9D4321/0/3139302e3132382e3132382e302f31372d3234203d3e203233323031.roa
File: 3139302e3132382e3132382e302f31372d3234203d3e203233323031.roa (raw, json)
Hash identifier: FwjdASUMWpV45MWVbo5iYLuyxeOlIfNcGWv0CCoiOek=
Subject key identifier: 28:FE:31:03:5A:E1:38:D8:EA:72:3B:5D:F8:D5:C5:08:D6:BB:27:D4
Certificate issuer: /CN=9857400AE42A0A22A3E618304A1502E0E0C01DCA
Certificate serial: 0B3D1252522FEA216EC9895461427BE8D3F3FCE3
Authority key identifier: 98:57:40:0A:E4:2A:0A:22:A3:E6:18:30:4A:15:02:E0:E0:C0:1D:CA
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9857400AE42A0A22A3E618304A1502E0E0C01DCA.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/C7B2A63D66F42CB6E50354A629BFB5A68A3FC6F96DC2A2043A751D3A9C9D4321/0/3139302e3132382e3132382e302f31372d3234203d3e203233323031.roa
Signing time: Tue 05 Mar 2024 18:22:53 +0000
ROA not before: Tue 05 Mar 2024 18:17:53 +0000
ROA not after: Tue 04 Mar 2025 18:22:53 +0000
asID: 23201
IP address blocks: 190.128.128.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:3d:12:52:52:2f:ea:21:6e:c9:89:54:61:42:7b:e8:d3:f3:fc:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9857400AE42A0A22A3E618304A1502E0E0C01DCA
Validity
Not Before: Mar 5 18:17:53 2024 GMT
Not After : Mar 4 18:22:53 2025 GMT
Subject: CN=28FE31035AE138D8EA723B5DF8D5C508D6BB27D4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:43:34:03:49:83:2f:9f:57:54:f1:3b:3b:2a:
45:25:59:81:97:41:0f:f5:0d:67:b6:32:d8:ce:42:
5c:67:db:a0:b6:0d:a0:bd:86:ac:ef:e9:df:99:f9:
21:23:53:d7:f0:40:17:52:c6:4d:8a:c7:dc:83:22:
de:3d:39:d2:9f:e1:81:a4:3a:8a:ca:cb:22:39:58:
81:f2:f9:45:04:72:de:6b:7a:68:09:cc:f5:7f:54:
7a:57:9c:f7:f1:fc:c4:59:d3:35:4a:f2:c9:ca:7c:
3c:76:da:18:f5:9f:22:09:91:c5:4e:e9:8c:15:31:
25:37:54:c5:69:12:9b:86:fb:16:11:6a:d2:9d:f5:
0b:7a:39:e9:55:4b:99:52:f5:8c:5b:25:b1:40:8e:
7e:14:10:71:57:98:18:c4:0a:1c:81:89:93:be:20:
1e:f9:2c:a7:0e:f3:cb:ab:02:a8:f5:9f:3e:d4:31:
f0:51:9d:74:ad:f3:96:eb:ee:95:c1:73:38:6a:f2:
bf:db:9b:d6:de:6f:b4:52:43:94:a1:85:6d:e7:02:
49:a5:d9:ee:e9:71:04:f5:db:ee:4a:60:00:7a:4c:
1b:32:67:e9:81:aa:3d:65:60:43:64:21:bc:0b:ed:
8d:7e:ae:a8:eb:93:d9:a7:19:3e:84:7b:c1:24:ca:
ba:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:FE:31:03:5A:E1:38:D8:EA:72:3B:5D:F8:D5:C5:08:D6:BB:27:D4
X509v3 Authority Key Identifier:
keyid:98:57:40:0A:E4:2A:0A:22:A3:E6:18:30:4A:15:02:E0:E0:C0:1D:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/C7B2A63D66F42CB6E50354A629BFB5A68A3FC6F96DC2A2043A751D3A9C9D4321/0/9857400AE42A0A22A3E618304A1502E0E0C01DCA.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9857400AE42A0A22A3E618304A1502E0E0C01DCA.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C7B2A63D66F42CB6E50354A629BFB5A68A3FC6F96DC2A2043A751D3A9C9D4321/0/3139302e3132382e3132382e302f31372d3234203d3e203233323031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.128.128.0/17
Signature Algorithm: sha256WithRSAEncryption
86:b2:54:30:f0:f8:91:bd:f8:3a:89:31:7a:55:75:79:b5:b3:
1a:23:86:aa:4d:e9:2e:a5:ae:86:c4:61:9a:6b:63:2e:9b:ce:
2d:12:6e:27:20:62:77:43:ce:ee:9d:e3:80:60:38:99:85:0a:
7c:a5:54:49:80:27:cd:56:85:0f:ea:fc:07:85:37:1a:ab:6f:
d0:f6:e4:01:3c:9f:7c:f9:e8:99:24:4f:58:3b:70:b1:40:f1:
7f:55:8e:d5:0d:18:90:70:69:fc:e9:11:dc:c4:0e:c7:3a:88:
46:44:0e:23:2c:ba:11:d2:4d:95:3f:b5:22:ee:aa:6b:01:0e:
cd:74:9c:f6:bc:3e:ee:f4:3a:46:ae:22:a7:bf:7c:86:7f:8f:
b4:c3:a9:81:07:19:85:da:c0:db:13:02:94:28:39:5c:33:6c:
f9:3e:51:a2:34:a9:79:f8:50:94:12:f8:e7:87:c2:53:fb:cb:
eb:4c:7d:f7:09:48:03:15:a6:d6:fa:11:ca:59:65:e2:97:bc:
2a:27:11:2d:1a:d8:d4:ce:76:22:12:67:37:e6:d6:c6:53:e0:
7b:46:53:f6:03:92:71:7c:b0:c0:3a:a7:02:97:4c:47:bd:d3:
fd:b5:98:ba:b0:59:1d:4d:23:aa:72:20:38:e0:7d:f8:d1:cc:
50:c0:2b:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 08:40:33 2025 by rpki-client