Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C82A08B9FC1AC118692DD0F3F1AB1B4748C25BDA8551D63C2E8946A37B2B996C/0/3133382e3132322e3232382e302f32322d3234203d3e203237393535.roa
File: 3133382e3132322e3232382e302f32322d3234203d3e203237393535.roa (raw, json)
Hash identifier: aisH2fhSc2hVBCpFjSfJZ3QNFb65O+R7wpBwQC4UiYQ=
Subject key identifier: DD:0D:9B:32:E4:01:FC:70:E8:6D:13:90:C5:BA:82:F3:A3:6A:22:AF
Certificate issuer: /CN=93B74A06A1C42F54A933B70E1A98A7FFFD7D8DCF
Certificate serial: 6AFDC70AC86F429A7A3832223CB84E80302C7998
Authority key identifier: 93:B7:4A:06:A1:C4:2F:54:A9:33:B7:0E:1A:98:A7:FF:FD:7D:8D:CF
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/93B74A06A1C42F54A933B70E1A98A7FFFD7D8DCF.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/C82A08B9FC1AC118692DD0F3F1AB1B4748C25BDA8551D63C2E8946A37B2B996C/0/3133382e3132322e3232382e302f32322d3234203d3e203237393535.roa
Signing time: Tue 05 Mar 2024 17:45:09 +0000
ROA not before: Tue 05 Mar 2024 17:40:09 +0000
ROA not after: Tue 04 Mar 2025 17:45:09 +0000
asID: 27955
IP address blocks: 138.122.228.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:fd:c7:0a:c8:6f:42:9a:7a:38:32:22:3c:b8:4e:80:30:2c:79:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93B74A06A1C42F54A933B70E1A98A7FFFD7D8DCF
Validity
Not Before: Mar 5 17:40:09 2024 GMT
Not After : Mar 4 17:45:09 2025 GMT
Subject: CN=DD0D9B32E401FC70E86D1390C5BA82F3A36A22AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a2:92:2b:a0:35:60:49:33:15:20:5c:f4:bb:
fc:a7:14:3a:51:9a:a7:78:36:17:83:64:e7:29:5c:
6d:b8:8f:aa:b2:97:78:e0:17:33:0c:28:62:3b:4f:
e3:71:a2:93:f0:ea:2d:6f:ca:b5:45:5b:9b:fd:84:
c7:c6:c1:99:ec:74:88:7a:e9:83:ee:e9:34:29:1e:
c9:d3:6c:e5:c7:1c:b2:0e:6d:e6:69:88:07:13:d2:
1e:91:aa:f0:50:db:0c:c7:a6:1b:bd:1d:af:f5:3a:
c7:96:95:2f:04:ff:9a:dd:51:0a:e6:e3:67:8e:4d:
40:cc:bf:e4:82:19:ea:ec:7a:24:86:a6:cd:61:e3:
e1:61:1a:98:38:37:66:67:d7:2d:b7:73:65:11:35:
94:f6:65:d7:11:22:af:03:94:37:f2:82:7d:21:29:
b9:40:12:df:79:da:39:c4:7d:57:39:91:d9:07:3c:
03:30:51:06:8e:fd:b1:4a:8b:11:c0:f0:dc:9a:d8:
54:03:fc:16:6a:4b:47:40:29:ec:09:85:12:d4:19:
f5:54:5b:e6:cd:52:46:cd:db:86:a4:29:57:1d:93:
f1:99:95:13:54:50:b7:6a:4e:09:84:fc:50:ae:d8:
99:dd:b1:74:3d:23:91:e5:2c:1d:eb:29:68:f1:13:
0d:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:0D:9B:32:E4:01:FC:70:E8:6D:13:90:C5:BA:82:F3:A3:6A:22:AF
X509v3 Authority Key Identifier:
keyid:93:B7:4A:06:A1:C4:2F:54:A9:33:B7:0E:1A:98:A7:FF:FD:7D:8D:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/C82A08B9FC1AC118692DD0F3F1AB1B4748C25BDA8551D63C2E8946A37B2B996C/0/93B74A06A1C42F54A933B70E1A98A7FFFD7D8DCF.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/93B74A06A1C42F54A933B70E1A98A7FFFD7D8DCF.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C82A08B9FC1AC118692DD0F3F1AB1B4748C25BDA8551D63C2E8946A37B2B996C/0/3133382e3132322e3232382e302f32322d3234203d3e203237393535.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.122.228.0/22
Signature Algorithm: sha256WithRSAEncryption
80:1a:26:81:48:94:0f:98:37:d3:21:df:c6:52:0a:cd:a7:4d:
74:d2:93:63:40:db:0c:e4:6c:f4:49:93:28:dc:b5:c7:0a:0c:
ad:84:61:97:47:4c:d7:23:f7:1b:17:e2:b7:40:73:ff:7c:81:
a8:ce:75:7c:b4:7a:48:13:87:97:07:cd:53:8c:93:c6:30:4f:
bb:cc:de:ae:77:b2:c3:9f:6c:57:dc:b6:ef:ae:23:bd:7c:8b:
89:91:79:c7:d3:61:2d:a8:b4:88:a2:42:6d:d6:fa:1e:ef:32:
24:ee:ca:d9:a2:ff:e7:dc:33:a3:42:c9:33:99:a5:c5:3b:37:
e1:cf:cd:60:05:52:c0:63:7f:0a:0d:aa:3a:d9:f5:47:94:4f:
d6:43:bf:78:8e:55:d9:88:d2:d3:40:92:08:11:05:3d:d9:bc:
ad:4e:b4:d8:e8:e4:d5:37:69:dd:76:89:af:28:16:cf:1f:f8:
5a:fc:ab:42:92:83:66:3d:db:f3:24:05:7e:30:67:c4:39:45:
a6:5f:60:7f:af:57:82:12:4c:c9:e6:c5:d4:a8:62:38:10:0a:
46:cf:db:2c:79:13:94:0b:98:0d:9f:d7:92:2c:83:52:8a:e4:
8d:86:e6:e4:f5:8e:14:d5:e0:79:43:6e:57:51:4d:a5:b7:0c:
73:d6:69:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 00:12:06 2025 by rpki-client