Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CE7677F9C05E37FF4C0570E1707E405442B42C43723633F7E3091CD88BC2EE5D/0/3133382e3132312e3130302e302f32322d3234203d3e20323633373735.roa
File: 3133382e3132312e3130302e302f32322d3234203d3e20323633373735.roa (raw, json)
Hash identifier: xo4f7OeUaDivr+VwX4+INIWgR/yXezj1DTvdo9UWVh8=
Subject key identifier: AB:45:E4:56:24:EB:6C:C2:85:D0:B7:DC:43:8A:76:4B:53:8F:1A:40
Certificate issuer: /CN=C3B8E297B1CFDAFE3E214D9FDC1380260406DB97
Certificate serial: 7F834C2BB45197510E05A68D80778CBAC41772C3
Authority key identifier: C3:B8:E2:97:B1:CF:DA:FE:3E:21:4D:9F:DC:13:80:26:04:06:DB:97
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C3B8E297B1CFDAFE3E214D9FDC1380260406DB97.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/CE7677F9C05E37FF4C0570E1707E405442B42C43723633F7E3091CD88BC2EE5D/0/3133382e3132312e3130302e302f32322d3234203d3e20323633373735.roa
Signing time: Tue 05 Mar 2024 18:00:21 +0000
ROA not before: Tue 05 Mar 2024 17:55:21 +0000
ROA not after: Tue 04 Mar 2025 18:00:21 +0000
asID: 263775
IP address blocks: 138.121.100.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:83:4c:2b:b4:51:97:51:0e:05:a6:8d:80:77:8c:ba:c4:17:72:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C3B8E297B1CFDAFE3E214D9FDC1380260406DB97
Validity
Not Before: Mar 5 17:55:21 2024 GMT
Not After : Mar 4 18:00:21 2025 GMT
Subject: CN=AB45E45624EB6CC285D0B7DC438A764B538F1A40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:7d:46:45:2d:45:3c:b7:ed:9a:6e:90:5b:7b:
8b:0a:c1:78:a5:64:5c:8a:da:19:18:96:0c:92:d0:
63:72:27:08:4c:17:11:a7:4f:4f:23:97:ff:5c:ba:
79:38:5c:83:8a:64:95:5d:e7:e8:9d:3a:78:de:24:
fc:a0:49:f6:80:25:1d:97:d3:ac:58:66:d4:cd:58:
48:2a:83:74:cd:dc:23:ac:07:5b:4e:46:0c:d3:1e:
79:fb:cd:8c:62:66:b4:8d:8f:2d:99:76:f9:4b:c5:
dd:33:90:ec:1f:e2:26:af:ea:34:08:f6:10:84:4c:
74:00:f1:d3:6b:79:f3:47:40:9a:05:b6:e1:7d:e7:
c7:32:d3:3c:5f:77:00:7d:b4:38:26:9f:6e:df:7e:
12:6a:81:c3:2f:ea:44:16:37:a4:56:d5:ce:eb:f0:
09:59:b7:48:11:31:33:8a:2d:c3:06:e8:54:b5:dd:
1b:b2:13:81:1c:8a:04:0b:2b:96:7d:0d:a1:c3:54:
ee:d4:83:ee:eb:47:57:bd:55:ca:9f:c0:4a:79:a6:
2f:08:8b:34:3a:6a:0a:8c:42:52:3c:88:60:75:4c:
5c:61:42:d9:ae:af:28:41:58:52:84:8e:b8:9b:4c:
5d:53:ed:c2:81:f6:b4:4c:bc:12:7a:9c:57:6d:ce:
1d:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:45:E4:56:24:EB:6C:C2:85:D0:B7:DC:43:8A:76:4B:53:8F:1A:40
X509v3 Authority Key Identifier:
keyid:C3:B8:E2:97:B1:CF:DA:FE:3E:21:4D:9F:DC:13:80:26:04:06:DB:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/CE7677F9C05E37FF4C0570E1707E405442B42C43723633F7E3091CD88BC2EE5D/0/C3B8E297B1CFDAFE3E214D9FDC1380260406DB97.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C3B8E297B1CFDAFE3E214D9FDC1380260406DB97.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CE7677F9C05E37FF4C0570E1707E405442B42C43723633F7E3091CD88BC2EE5D/0/3133382e3132312e3130302e302f32322d3234203d3e20323633373735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.121.100.0/22
Signature Algorithm: sha256WithRSAEncryption
2d:4b:10:58:65:3e:8b:d6:f7:40:72:01:a4:a7:c5:e3:0b:f5:
77:39:29:fc:05:4f:79:fe:0d:b0:4c:9e:59:af:34:e9:18:ee:
58:c4:fb:50:ca:d6:45:54:e3:22:1b:ef:f6:b4:59:66:fb:25:
1b:d9:6d:4a:6e:04:be:37:de:9d:b9:3e:7a:8b:97:bd:48:af:
c3:c9:1d:15:a8:f7:4f:b5:87:c7:e6:9a:13:f0:f9:ca:32:df:
06:ac:4b:36:10:fd:c1:0a:00:59:59:55:1f:6c:8c:89:14:38:
8f:94:5f:ae:63:30:34:7d:92:40:b7:23:05:41:bd:3d:e9:9b:
5d:b9:0f:b2:04:f3:8c:c4:c8:79:78:c5:86:ad:12:da:84:bd:
7d:6b:49:b8:a3:8e:d2:0c:75:20:a6:94:e4:20:54:38:ad:a3:
ed:c1:d2:7a:d6:3b:36:4d:00:15:a6:90:9f:f3:55:a6:5d:44:
6e:63:e1:8f:c2:54:e2:8a:2a:36:01:e8:22:62:07:f2:02:95:
57:c7:a4:8a:d2:b9:ba:45:d6:3f:39:f9:68:27:ca:9e:12:c4:
6a:f3:ff:e6:fe:9f:15:53:0a:9a:f4:d9:01:0c:b9:4b:b1:29:
0f:31:85:ad:06:44:7e:ed:11:72:9e:72:e8:51:13:fc:42:da:
ab:26:9c:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 09:04:50 2025 by rpki-client