Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/3230312e3136332e302e302f31362d3234203d3e203131313732.roa
File: 3230312e3136332e302e302f31362d3234203d3e203131313732.roa (raw, json)
Hash identifier: yirPkUeYS3Vd3klZY5nhMan/7Cx4KoxGzC9MLqNYygQ=
Subject key identifier: 66:4E:BA:19:A7:39:C6:BB:82:10:28:02:C7:A8:A6:29:5D:77:16:5E
Certificate issuer: /CN=E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15
Certificate serial: 4B8DA989F3D0117748EA817FEEEC5EFFC41019F8
Authority key identifier: E3:5D:D2:93:E1:C3:BC:5F:4D:E1:53:18:FA:C5:96:7E:7D:55:BF:15
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/3230312e3136332e302e302f31362d3234203d3e203131313732.roa
Signing time: Tue 05 Mar 2024 17:54:34 +0000
ROA not before: Tue 05 Mar 2024 17:49:34 +0000
ROA not after: Tue 04 Mar 2025 17:54:34 +0000
asID: 11172
IP address blocks: 201.163.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:8d:a9:89:f3:d0:11:77:48:ea:81:7f:ee:ec:5e:ff:c4:10:19:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15
Validity
Not Before: Mar 5 17:49:34 2024 GMT
Not After : Mar 4 17:54:34 2025 GMT
Subject: CN=664EBA19A739C6BB82102802C7A8A6295D77165E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d0:aa:28:9f:61:45:e0:63:b6:02:fb:c5:05:
04:d5:58:f2:d4:3e:5c:b8:50:0f:3f:52:d5:c8:25:
a4:3f:7d:99:32:26:ec:c9:2b:e9:84:13:ab:4a:9b:
78:6f:c4:8e:1e:ef:1c:94:00:a0:35:10:50:2d:47:
d5:cb:6d:a7:78:c1:8b:42:0b:80:6a:5a:99:ab:04:
96:cf:f9:97:41:53:5f:78:69:36:62:e4:9d:18:02:
a2:2f:c6:58:d8:09:3c:ee:de:4a:69:aa:ba:94:b3:
66:62:2a:85:f8:ef:ae:df:1a:4c:00:e3:1f:23:0d:
3b:cc:81:14:5e:87:e3:f7:c6:50:5f:62:9e:08:5e:
78:7d:bb:9f:95:64:b7:c5:a2:95:6c:d6:cd:3b:ea:
9b:c1:51:4d:1b:b8:ae:01:d1:a0:26:97:a5:ea:ed:
bc:9c:5f:4f:46:39:e4:df:ec:56:96:8c:f5:d0:b2:
78:ca:7d:b3:c5:9f:a8:b2:ef:2b:d9:8a:73:cd:83:
cd:60:7a:50:cc:d3:36:d0:11:41:8f:df:5e:2e:b4:
ff:b3:41:e3:ab:29:02:32:17:4d:d0:94:58:e1:b7:
3f:46:26:a8:56:29:3c:33:3b:8f:50:16:c1:aa:18:
76:2c:fa:8e:e2:9f:be:ee:99:77:06:a2:56:23:94:
af:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:4E:BA:19:A7:39:C6:BB:82:10:28:02:C7:A8:A6:29:5D:77:16:5E
X509v3 Authority Key Identifier:
keyid:E3:5D:D2:93:E1:C3:BC:5F:4D:E1:53:18:FA:C5:96:7E:7D:55:BF:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/3230312e3136332e302e302f31362d3234203d3e203131313732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.163.0.0/16
Signature Algorithm: sha256WithRSAEncryption
10:47:67:bb:52:3e:69:7f:01:0a:92:80:a4:05:2b:1d:54:1d:
d2:6f:89:c3:22:4f:21:4e:fc:ad:db:bd:0e:94:a1:ca:cd:3c:
02:da:7f:34:f4:aa:88:a2:40:88:20:cc:84:f4:89:8b:73:f0:
55:70:a5:f2:73:12:a6:e3:81:5d:02:9c:0b:68:20:92:27:79:
4b:6b:f9:c1:53:fe:ad:fe:f9:2f:c3:33:b1:6e:aa:cc:d7:42:
c4:aa:38:85:0f:aa:5a:59:a4:22:87:55:51:df:5c:87:cc:d0:
3c:75:0d:8c:9d:9e:2c:dc:28:e6:83:4a:5c:b8:63:af:36:1a:
50:27:0c:6a:d8:bc:d8:84:46:f6:63:bc:5f:e5:60:a0:da:2c:
de:06:c8:01:51:09:9e:52:bb:a4:43:3b:93:c7:54:92:40:8c:
6e:af:c5:86:5f:99:fe:15:ed:94:41:04:0c:c2:11:c8:ea:1c:
29:4e:e0:d4:8c:59:29:3e:7d:76:29:22:2b:62:38:1e:ca:cf:
cc:53:3e:c9:34:9f:f1:6c:de:04:a0:8a:47:01:a9:4f:e6:db:
b8:84:f5:63:1d:24:7d:93:9f:5b:da:21:5b:a0:ab:72:72:2c:
f2:c1:b8:ee:b7:1e:a8:c1:ca:44:84:e4:25:e3:9d:11:57:63:
aa:c3:6a:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 00:44:30 2025 by rpki-client