Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E52FD6A6A46B7828B44D62F7E0AB52216C5E6EEAD8DE8F789F9A0C8D1195A94C/0/3133382e3230342e31342e302f32342d3234203d3e203431303935.roa
File: 3133382e3230342e31342e302f32342d3234203d3e203431303935.roa (raw, json)
Hash identifier: 0Q8TE79nWrQiNJUt1dNoMP1qJ9dkoLah5skOFwjJpG8=
Subject key identifier: 03:6D:A3:DA:0C:39:44:D7:EA:52:0A:AB:51:74:4A:5C:53:B2:29:D0
Certificate issuer: /CN=DCD3F0E4EE043C5BA9858A89B5A60E7FF2D355C6
Certificate serial: 2DBB4971B8B7E855AF556B023F540E40BAA130EC
Authority key identifier: DC:D3:F0:E4:EE:04:3C:5B:A9:85:8A:89:B5:A6:0E:7F:F2:D3:55:C6
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCD3F0E4EE043C5BA9858A89B5A60E7FF2D355C6.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/E52FD6A6A46B7828B44D62F7E0AB52216C5E6EEAD8DE8F789F9A0C8D1195A94C/0/3133382e3230342e31342e302f32342d3234203d3e203431303935.roa
Signing time: Thu 11 Apr 2024 14:45:00 +0000
ROA not before: Thu 11 Apr 2024 14:40:00 +0000
ROA not after: Thu 10 Apr 2025 14:45:00 +0000
asID: 41095
IP address blocks: 138.204.14.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:bb:49:71:b8:b7:e8:55:af:55:6b:02:3f:54:0e:40:ba:a1:30:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DCD3F0E4EE043C5BA9858A89B5A60E7FF2D355C6
Validity
Not Before: Apr 11 14:40:00 2024 GMT
Not After : Apr 10 14:45:00 2025 GMT
Subject: CN=036DA3DA0C3944D7EA520AAB51744A5C53B229D0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:bb:52:42:e2:46:8d:91:1d:0c:95:44:81:d7:
d8:b7:a6:79:43:1a:d7:a4:23:37:9d:54:86:2c:c1:
68:f5:2f:4a:ec:1c:09:b6:ae:9b:2d:98:97:2e:ef:
4c:38:98:26:73:3d:95:3f:9f:8b:d6:6c:3a:7e:31:
91:93:33:d9:da:0a:7c:79:62:ce:0e:cc:ac:89:30:
dc:ca:4c:14:f4:d0:3b:77:ae:3a:26:fb:9a:d7:db:
20:2a:98:ba:ad:f0:c1:86:77:7e:69:ef:72:30:48:
98:b4:78:01:10:50:9c:c0:c1:13:89:30:71:4f:9d:
10:30:38:88:f7:3e:7a:1e:49:13:2f:18:15:ca:24:
21:77:52:2a:60:6f:50:fb:ae:e9:92:f8:d0:91:e2:
d9:77:b6:2c:cb:cb:d9:20:2a:32:b6:fa:c8:89:34:
7d:4c:c2:8a:32:ac:c4:3b:24:30:87:93:0f:88:b2:
60:ea:cc:e0:60:4c:b3:60:56:b8:91:c8:15:1c:e1:
39:c1:89:cb:e4:90:4d:1f:35:a6:f8:2b:05:bb:1d:
25:86:02:f3:21:4a:00:20:cd:6d:19:1d:b3:90:67:
f7:64:61:64:10:fd:9f:b9:2e:ab:3d:bf:99:79:e7:
6f:31:ef:0e:55:6a:54:b4:8a:ee:4b:e0:77:2e:62:
15:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:6D:A3:DA:0C:39:44:D7:EA:52:0A:AB:51:74:4A:5C:53:B2:29:D0
X509v3 Authority Key Identifier:
keyid:DC:D3:F0:E4:EE:04:3C:5B:A9:85:8A:89:B5:A6:0E:7F:F2:D3:55:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/E52FD6A6A46B7828B44D62F7E0AB52216C5E6EEAD8DE8F789F9A0C8D1195A94C/0/DCD3F0E4EE043C5BA9858A89B5A60E7FF2D355C6.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCD3F0E4EE043C5BA9858A89B5A60E7FF2D355C6.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E52FD6A6A46B7828B44D62F7E0AB52216C5E6EEAD8DE8F789F9A0C8D1195A94C/0/3133382e3230342e31342e302f32342d3234203d3e203431303935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.204.14.0/24
Signature Algorithm: sha256WithRSAEncryption
74:8b:51:4a:46:d9:97:d5:87:a5:e2:59:35:27:a7:95:0f:06:
3e:11:c7:52:bf:65:9b:00:2f:eb:4c:0a:86:2d:5a:01:99:c2:
00:7b:7a:98:ea:a7:86:c5:15:f7:68:be:f2:51:80:ef:49:d2:
05:c5:6d:01:f2:cf:82:ae:68:24:63:90:38:de:59:78:4d:36:
1c:2e:6f:b9:f8:ce:13:1d:94:70:be:c0:4d:85:70:c1:e9:e3:
3b:9f:c8:e3:dc:4e:fd:dd:1a:72:ba:12:9e:02:00:bf:b6:b7:
bd:c9:7b:73:37:12:b1:fd:07:9d:46:9b:c2:d0:1e:2b:e6:d5:
20:1e:58:c9:ad:3a:82:89:e3:64:37:0c:87:ad:5e:78:70:0f:
ea:59:94:e7:8f:32:5e:8d:3e:26:1c:31:49:97:3f:22:af:8a:
1b:50:e3:cf:a6:2c:e8:e7:07:6f:29:ad:08:dd:ab:34:98:ae:
25:a9:76:d4:fb:aa:88:89:69:6c:b3:0e:1d:ab:8a:77:6e:db:
55:31:54:a5:9f:e4:50:7a:41:4d:57:f5:c1:89:94:c4:6a:3c:
a9:b9:a3:b6:6c:47:c2:f3:b0:28:48:bb:e4:09:41:5b:ba:c1:
e7:e6:15:32:8c:6b:ee:a3:54:44:79:ab:83:b1:89:34:ee:27:
ae:f5:74:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:45:57 2025 by rpki-client