Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D55ACDDF47E4A075D61197B1AE6007754B50DC828C73BBC692CDC7D225EFD800/0/3231332e3233362e352e302f32342d3234203d3e20323734303130.roa
File: 3231332e3233362e352e302f32342d3234203d3e20323734303130.roa (raw, json)
Hash identifier: 7iHJTGZmoIjY6Sc0a9+9gRHTIZq4K+TQxRkySz/pHqU=
Subject key identifier: 6F:70:24:58:94:86:62:AF:75:47:F4:91:5B:92:2B:28:36:97:51:A0
Certificate issuer: /CN=BE957D4790B53F8EB46A62C1A40A7C9D7E4DB030
Certificate serial: 4A0643F52BA00A773CF5229BEA11E27891458D7F
Authority key identifier: BE:95:7D:47:90:B5:3F:8E:B4:6A:62:C1:A4:0A:7C:9D:7E:4D:B0:30
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BE957D4790B53F8EB46A62C1A40A7C9D7E4DB030.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D55ACDDF47E4A075D61197B1AE6007754B50DC828C73BBC692CDC7D225EFD800/0/3231332e3233362e352e302f32342d3234203d3e20323734303130.roa
Signing time: Tue 28 Jan 2025 14:40:01 +0000
ROA not before: Tue 28 Jan 2025 14:35:01 +0000
ROA not after: Tue 27 Jan 2026 14:40:01 +0000
asID: 274010
IP address blocks: 213.236.5.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:06:43:f5:2b:a0:0a:77:3c:f5:22:9b:ea:11:e2:78:91:45:8d:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BE957D4790B53F8EB46A62C1A40A7C9D7E4DB030
Validity
Not Before: Jan 28 14:35:01 2025 GMT
Not After : Jan 27 14:40:01 2026 GMT
Subject: CN=6F702458948662AF7547F4915B922B28369751A0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:fc:3f:eb:fb:63:12:a3:6c:9a:0c:95:d8:a3:
10:b8:cc:a0:aa:d5:f3:be:f0:cd:67:f0:5d:a3:a5:
ec:d6:ce:10:30:dd:af:8c:74:88:1a:ce:57:17:a1:
84:1b:5d:e6:3f:41:97:d1:35:a6:9c:03:e5:b9:4b:
c0:04:a6:41:12:33:4a:9a:90:d5:fc:2e:59:50:e9:
b0:09:76:1b:2e:74:0e:eb:c1:6d:cd:e4:fa:db:9c:
02:87:38:e6:7d:be:9c:0f:83:ae:59:ae:54:39:62:
ca:00:54:e9:b1:ca:5b:9b:85:64:de:71:4b:20:a2:
42:bb:84:b6:cf:80:ab:11:4e:09:5c:21:d6:42:ae:
36:ef:90:f8:a1:05:b2:17:49:58:d5:d5:f8:c1:d5:
99:ee:94:84:26:3c:94:3a:de:28:0a:69:3b:e3:8c:
db:90:e2:49:25:3e:2e:4d:ac:f5:a3:7d:7f:bb:fb:
4a:4d:7f:59:bf:71:6e:08:89:ee:78:bc:d9:23:3c:
16:5c:38:34:fe:3e:7d:49:ce:b6:92:09:28:86:53:
06:87:b5:7f:e7:a3:9e:2d:87:61:1d:35:2e:d8:76:
c4:38:be:78:db:3d:61:e2:d5:69:69:79:fb:9a:d2:
6f:7b:b9:e3:9f:9b:2a:c7:94:13:94:64:16:87:93:
d3:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:70:24:58:94:86:62:AF:75:47:F4:91:5B:92:2B:28:36:97:51:A0
X509v3 Authority Key Identifier:
keyid:BE:95:7D:47:90:B5:3F:8E:B4:6A:62:C1:A4:0A:7C:9D:7E:4D:B0:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/D55ACDDF47E4A075D61197B1AE6007754B50DC828C73BBC692CDC7D225EFD800/0/BE957D4790B53F8EB46A62C1A40A7C9D7E4DB030.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BE957D4790B53F8EB46A62C1A40A7C9D7E4DB030.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D55ACDDF47E4A075D61197B1AE6007754B50DC828C73BBC692CDC7D225EFD800/0/3231332e3233362e352e302f32342d3234203d3e20323734303130.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.236.5.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:aa:1b:3c:18:25:c0:f7:a3:ac:7d:d2:6a:a3:63:c3:b9:6f:
c7:06:0c:5c:6e:37:7f:7a:50:49:79:93:dc:3a:f4:43:83:60:
a6:66:56:42:95:97:45:b5:24:82:bd:f5:e1:cd:e8:6a:78:cf:
2b:6c:b4:38:0a:78:08:e3:cc:d8:53:1f:82:16:c6:7f:85:ff:
a3:a4:64:5a:95:ed:9d:9b:fc:8b:c5:d0:88:09:de:47:5c:6f:
06:9d:5a:e8:61:44:25:9c:cf:a5:b6:b2:be:77:5d:10:8e:35:
7e:90:c7:c9:cf:db:f6:35:76:f3:4e:e3:da:59:55:5c:5f:14:
23:e0:12:b1:f1:65:70:f2:f5:d4:87:ca:3e:6f:19:26:8c:ea:
bb:65:61:12:32:41:0c:95:29:61:f7:78:fc:e2:c2:cc:c5:1f:
06:5c:7b:af:22:eb:d3:dc:18:f7:05:16:85:8d:a0:6c:8f:f5:
8c:f4:b5:68:28:36:d0:b3:fc:41:37:0c:00:49:73:65:10:0d:
21:31:80:1c:68:d2:b1:71:e0:b7:0e:a4:a9:33:28:33:e8:1a:
99:3f:04:cd:1d:9a:2c:13:7d:38:c8:0a:d1:4c:ac:54:2e:6f:
fd:73:41:22:1e:d0:23:37:82:3c:8c:d3:e9:e8:5f:46:99:fa:
c8:81:0e:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 20:56:17 2025 by rpki-client