Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0299cbc8-a693-4889-aba2-8f4f9c51b5d3/d81312069b28d4a522469a14f5f5a4c05eb648ca.roa
File: d81312069b28d4a522469a14f5f5a4c05eb648ca.roa (raw, json)
Hash identifier: D47sdFgsp1TmbJmnnXKtHM3PWLy38gH3HTvO++UuZao=
Subject key identifier: 5E:80:82:6E:56:47:39:1F:1E:07:AC:CD:2C:AC:10:A5:EA:CB:B6:56
Certificate issuer: /CN=9e7a5fab05d84621ad4b78ccf141868a98875d29
Certificate serial: 2805E8
Authority key identifier: 6E:4A:37:C8:01:68:41:93:FF:F7:E0:63:E3:9D:2C:C9:C5:B5:79:11
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9e7a5fab05d84621ad4b78ccf141868a98875d29.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0299cbc8-a693-4889-aba2-8f4f9c51b5d3/d81312069b28d4a522469a14f5f5a4c05eb648ca.roa
Signing time: Wed 06 Mar 2024 06:58:32 +0000
ROA not before: Wed 06 Mar 2024 06:58:32 +0000
ROA not after: Fri 06 Mar 2026 06:58:32 +0000
asID: 265524
IP address blocks: 131.196.248.0/22 maxlen: 24
181.191.244.0/22 maxlen: 24
181.191.248.0/21 maxlen: 24
192.141.124.0/22 maxlen: 24
201.182.20.0/22 maxlen: 24
2806:2eb::/32 maxlen: 48
2806:286::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2622952 (0x2805e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e7a5fab05d84621ad4b78ccf141868a98875d29
Validity
Not Before: Mar 6 06:58:32 2024 GMT
Not After : Mar 6 06:58:32 2026 GMT
Subject: CN=d81312069b28d4a522469a14f5f5a4c05eb648ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c0:0e:de:f6:45:bb:3c:0a:7e:d5:bf:d6:65:
99:6c:eb:54:59:26:d5:df:b6:74:a8:75:c8:75:f0:
6a:db:db:31:db:f4:bf:60:24:fd:3c:22:45:ef:fa:
31:f0:2a:cb:4b:dc:c8:50:ff:0b:98:b1:21:92:3a:
a7:3c:64:ab:bb:a7:7b:04:3e:c7:17:fa:1a:f5:7a:
2c:6e:55:5c:0d:b5:8b:6d:9b:51:cf:92:0d:36:1c:
a2:79:fa:f3:62:b3:9b:22:64:bd:d0:0b:e9:e6:8c:
94:ec:95:70:8f:2a:30:a5:14:4f:de:b4:5f:38:d9:
43:3e:d5:06:b5:df:ad:9d:da:f2:19:93:1e:42:e2:
c7:21:d2:f2:2f:cb:45:5c:6a:eb:84:6b:8f:a7:77:
38:bc:e9:96:87:8f:d4:7e:4f:cd:ae:77:8e:c6:70:
da:fb:1c:3c:e2:41:07:0d:57:de:bb:65:d8:ec:d6:
73:5e:cf:32:33:8a:cd:e5:b8:3f:00:ef:05:2b:67:
d2:5e:b0:8b:e4:7b:89:0a:56:b5:a8:28:5e:80:54:
15:2d:3c:a4:0a:20:37:48:dd:82:a4:ec:70:2a:b5:
1d:b2:9f:32:3f:4c:8b:16:65:4d:13:2f:df:9f:81:
26:41:f6:a5:b5:09:5b:b8:1d:53:69:68:6b:b3:2a:
4c:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:80:82:6E:56:47:39:1F:1E:07:AC:CD:2C:AC:10:A5:EA:CB:B6:56
X509v3 Authority Key Identifier:
keyid:6E:4A:37:C8:01:68:41:93:FF:F7:E0:63:E3:9D:2C:C9:C5:B5:79:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9e7a5fab05d84621ad4b78ccf141868a98875d29.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0299cbc8-a693-4889-aba2-8f4f9c51b5d3/d81312069b28d4a522469a14f5f5a4c05eb648ca.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/0299cbc8-a693-4889-aba2-8f4f9c51b5d3/9e7a5fab05d84621ad4b78ccf141868a98875d29.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.196.248.0/22
181.191.244.0-181.191.255.255
192.141.124.0/22
201.182.20.0/22
IPv6:
2806:286::/32
2806:2eb::/32
Signature Algorithm: sha256WithRSAEncryption
10:8c:7b:21:3d:17:96:45:32:e6:e5:d9:30:34:b2:09:8e:95:
a0:51:02:05:06:b1:1f:86:74:70:d5:c9:f3:c8:c6:78:5c:cf:
ca:73:d7:7e:a2:6e:ea:45:a9:27:26:a8:e3:d7:36:0e:42:59:
96:5e:1c:d3:92:b1:dd:30:39:f5:53:79:cf:d7:7c:ef:ce:a4:
d8:bc:44:b6:be:2e:60:32:60:9a:52:f7:c4:1e:80:c7:0b:2b:
41:53:4b:be:27:01:4a:d3:cb:c2:95:95:b8:57:20:63:d8:1a:
54:12:37:71:15:f0:71:d6:aa:a3:28:c9:cd:f8:89:16:c4:e3:
18:e9:88:58:fa:84:d8:4e:a3:4e:7a:10:e8:da:85:15:4f:00:
e9:4b:47:c5:ab:32:63:19:65:cc:13:b1:64:ce:f5:29:6b:ec:
85:8f:1e:6d:41:0f:cc:51:40:f1:7a:b2:da:de:23:f7:9b:59:
1a:42:6b:cb:25:a5:ab:ff:40:25:6c:9b:9f:46:b1:21:fe:7f:
67:99:4f:e2:24:c4:07:fe:e2:1c:76:9c:36:28:9c:9a:1d:6c:
54:35:e3:f5:33:11:61:ef:3f:3a:be:9b:60:6c:84:57:69:ff:
c6:7f:21:52:a9:13:3a:6b:bd:c5:a0:53:2d:2f:75:1c:b6:b0:
2f:9d:7c:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 14:28:18 2025 by rpki-client