Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E3A4BF7D183720DD957CA93C4E07F4DEFB10388FC59FE80E3EA8F15C4094461B/0/3230302e35392e32342e302f32312d3234203d3e203238303838.roa
File: 3230302e35392e32342e302f32312d3234203d3e203238303838.roa (raw, json)
Hash identifier: BCN7IYnq0vmdoF4B/gjHji/u8OGpoYJ/rGBVGsEL3C4=
Subject key identifier: F7:98:0D:63:62:3B:E6:98:05:89:A9:CA:AC:26:21:06:10:43:C9:FE
Certificate issuer: /CN=2ED42DFF196F3F11B82464DE1FB7DDD1793DD227
Certificate serial: 2B8F7C8236765BF323753D43F08229578CEF397D
Authority key identifier: 2E:D4:2D:FF:19:6F:3F:11:B8:24:64:DE:1F:B7:DD:D1:79:3D:D2:27
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2ED42DFF196F3F11B82464DE1FB7DDD1793DD227.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/E3A4BF7D183720DD957CA93C4E07F4DEFB10388FC59FE80E3EA8F15C4094461B/0/3230302e35392e32342e302f32312d3234203d3e203238303838.roa
Signing time: Tue 05 Mar 2024 18:09:24 +0000
ROA not before: Tue 05 Mar 2024 18:04:24 +0000
ROA not after: Tue 04 Mar 2025 18:09:24 +0000
asID: 28088
IP address blocks: 200.59.24.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:8f:7c:82:36:76:5b:f3:23:75:3d:43:f0:82:29:57:8c:ef:39:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ED42DFF196F3F11B82464DE1FB7DDD1793DD227
Validity
Not Before: Mar 5 18:04:24 2024 GMT
Not After : Mar 4 18:09:24 2025 GMT
Subject: CN=F7980D63623BE6980589A9CAAC2621061043C9FE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:5f:ef:d1:3e:e9:ed:30:04:86:6b:a4:6d:9f:
f9:c3:58:c1:ea:ab:55:62:be:cd:c4:0f:1b:07:93:
91:0a:07:b9:e5:47:52:df:1d:98:aa:9d:6b:8f:11:
3b:67:b7:46:07:ca:79:db:8f:51:79:51:0c:81:e8:
04:20:41:d6:bf:ad:b0:16:71:70:5a:74:07:70:e4:
0a:6e:3f:7e:44:d9:49:11:f9:4c:e4:13:30:32:90:
a8:5b:cf:49:64:29:e8:43:4b:2f:4d:55:2b:7b:b5:
7f:fb:b9:14:e9:d7:c9:69:1a:4d:03:f6:37:bf:4a:
99:2d:1d:30:6f:95:94:f5:a5:66:f8:3e:2a:22:17:
ab:13:d7:be:80:f7:7b:b2:1b:00:c8:be:38:de:52:
11:f2:90:c5:49:d5:2e:f5:b4:89:7b:21:2d:d6:dc:
d4:5d:86:22:2f:4e:d0:42:80:f4:f0:f7:b0:b0:c0:
33:4a:c5:61:1a:42:66:d1:ec:dc:26:c8:b7:f9:19:
eb:94:2f:e1:34:0b:a0:0d:07:f9:7b:b3:21:f3:98:
44:1e:2b:69:a1:ef:fa:10:73:ea:bc:50:15:0a:fe:
fc:12:2d:a3:35:41:37:08:9e:6c:ed:28:e8:fb:d0:
4b:24:5f:f8:6d:cd:20:b0:c8:c4:7b:49:4b:89:5d:
e9:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:98:0D:63:62:3B:E6:98:05:89:A9:CA:AC:26:21:06:10:43:C9:FE
X509v3 Authority Key Identifier:
keyid:2E:D4:2D:FF:19:6F:3F:11:B8:24:64:DE:1F:B7:DD:D1:79:3D:D2:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/E3A4BF7D183720DD957CA93C4E07F4DEFB10388FC59FE80E3EA8F15C4094461B/0/2ED42DFF196F3F11B82464DE1FB7DDD1793DD227.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2ED42DFF196F3F11B82464DE1FB7DDD1793DD227.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E3A4BF7D183720DD957CA93C4E07F4DEFB10388FC59FE80E3EA8F15C4094461B/0/3230302e35392e32342e302f32312d3234203d3e203238303838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.59.24.0/21
Signature Algorithm: sha256WithRSAEncryption
66:61:81:44:52:4a:d6:f1:ba:17:63:20:e6:b5:41:c3:0c:7b:
47:6c:8c:92:a3:58:9b:ba:ae:87:2e:f5:5c:70:19:0d:d2:62:
22:23:ce:0b:30:c6:53:67:14:64:97:0c:66:b3:06:61:74:d1:
f7:29:d8:ae:df:de:dc:61:bb:74:9d:fb:a3:60:d5:d6:88:fd:
fc:d7:71:21:30:eb:ea:d0:23:59:d1:a7:6c:c9:79:16:4f:11:
5d:72:84:65:1e:69:23:eb:29:ae:5f:69:c4:30:27:d9:48:aa:
de:cd:9c:eb:8b:cd:2f:64:8d:36:da:a0:c7:72:40:08:25:bb:
fa:eb:5c:10:74:ae:ac:0e:fd:36:dd:8e:e4:95:45:7f:3b:ad:
0b:b3:99:17:2c:00:82:20:7f:b9:68:03:be:06:64:0d:33:0a:
7d:e6:04:35:19:bc:86:02:d0:71:77:a7:f6:95:40:f2:f7:78:
06:4e:b7:59:a1:d7:a2:02:5c:61:50:f6:26:5b:81:c2:db:79:
b8:d1:d1:6a:b2:42:73:8b:25:05:0a:dd:f0:7c:d4:fc:7a:6c:
f7:2a:d7:72:b2:cb:70:39:9a:d5:a9:04:6f:4f:f4:f3:17:f1:
0a:28:d8:b7:4b:29:ef:81:02:c2:27:3f:d9:30:e3:bc:3f:7c:
16:a3:47:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 05:26:20 2025 by rpki-client