Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a55bd147-b47d-46e7-b41a-725d6cd53c38/eb4e664825b928fee3213570b8cab21a82fdebf2.roa
File: eb4e664825b928fee3213570b8cab21a82fdebf2.roa (raw, json)
Hash identifier: GfKOpIQx4urJY/YfpOqc9EBalfvWVAdQt1IwCcBaxRY=
Subject key identifier: EA:04:01:59:38:A7:27:E7:B2:E3:06:BE:F8:EE:6E:04:05:DE:99:07
Certificate issuer: /CN=2bf3d12e8561859cc7cdf433de0d131a66c1a43b
Certificate serial: 24ED0F
Authority key identifier: 29:CE:0E:D7:67:F1:1B:7E:6F:C5:91:DE:73:6F:70:51:0B:2D:FB:4F
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2bf3d12e8561859cc7cdf433de0d131a66c1a43b.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/a55bd147-b47d-46e7-b41a-725d6cd53c38/eb4e664825b928fee3213570b8cab21a82fdebf2.roa
Signing time: Wed 01 Nov 2023 12:57:15 +0000
ROA not before: Wed 01 Nov 2023 12:57:15 +0000
ROA not after: Sat 01 Nov 2025 12:57:15 +0000
asID: 263746
IP address blocks: 138.121.240.0/22 maxlen: 22
2803:6c40::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2419983 (0x24ed0f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bf3d12e8561859cc7cdf433de0d131a66c1a43b
Validity
Not Before: Nov 1 12:57:15 2023 GMT
Not After : Nov 1 12:57:15 2025 GMT
Subject: CN=eb4e664825b928fee3213570b8cab21a82fdebf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f4:20:71:38:7a:05:0b:c5:21:3a:fa:72:59:
1b:b1:3e:57:55:ed:fe:7b:5f:af:72:db:92:57:45:
19:10:e4:b6:5c:40:46:84:c8:9e:b8:78:07:d9:23:
17:b3:60:43:f1:c1:cb:40:a5:2e:8f:39:a3:26:bf:
76:3c:4f:17:ba:cc:fc:fe:7e:2f:42:41:e5:b7:a8:
61:4c:39:8f:27:6e:69:2c:e6:ae:7f:25:a9:55:ba:
ff:0e:19:2f:f7:97:ef:8b:e8:a5:26:c7:e6:c4:59:
53:a3:a8:22:a2:20:c3:e9:8b:3e:7e:68:b4:27:e2:
cb:e8:a2:b5:08:67:70:3d:e3:69:a2:9c:22:51:a5:
ad:2f:9e:3d:fe:5b:93:fe:86:19:e2:7b:f4:d7:95:
b0:05:11:fe:53:15:1f:dd:98:fc:89:80:58:54:6c:
9a:47:68:f5:41:dd:51:89:22:3f:c9:03:8b:06:c9:
cb:28:88:45:67:19:ad:49:8b:1a:3f:1b:e6:d4:e7:
75:7b:3e:83:26:0f:93:40:74:c8:e1:6e:e9:94:ed:
bf:dc:44:c1:fe:08:dd:b9:30:e8:35:32:5c:2d:85:
c4:d4:e5:75:15:f4:c6:8a:07:26:de:8e:1f:c5:1e:
a3:04:7c:5e:6d:cf:34:ea:13:19:6e:96:33:f0:70:
43:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:04:01:59:38:A7:27:E7:B2:E3:06:BE:F8:EE:6E:04:05:DE:99:07
X509v3 Authority Key Identifier:
keyid:29:CE:0E:D7:67:F1:1B:7E:6F:C5:91:DE:73:6F:70:51:0B:2D:FB:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2bf3d12e8561859cc7cdf433de0d131a66c1a43b.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a55bd147-b47d-46e7-b41a-725d6cd53c38/eb4e664825b928fee3213570b8cab21a82fdebf2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/a55bd147-b47d-46e7-b41a-725d6cd53c38/2bf3d12e8561859cc7cdf433de0d131a66c1a43b.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.121.240.0/22
IPv6:
2803:6c40::/32
Signature Algorithm: sha256WithRSAEncryption
41:65:19:30:a7:a4:6d:98:e7:78:79:37:d6:66:e0:78:aa:1f:
de:01:b3:df:bb:f6:f5:6b:4d:eb:0c:dd:a6:d8:cd:85:f9:7b:
91:26:a7:6f:bf:1a:a1:8d:94:02:95:05:17:4d:16:fb:ad:75:
58:01:db:f4:da:ee:b6:00:f4:ba:e6:e7:00:e6:7d:b0:d2:f2:
ef:93:44:d7:e0:c0:ea:d4:0f:5a:24:c9:06:14:4d:2f:3d:76:
ec:0b:46:56:7e:c4:8d:7b:21:db:ae:ee:f3:10:51:7e:93:5a:
e8:1c:34:96:2b:c0:85:a6:67:70:04:81:28:cf:cb:76:38:b9:
17:fb:69:76:dc:67:31:65:72:72:c5:05:41:4a:60:51:82:3f:
cb:37:33:fe:cc:43:dd:73:d0:3d:58:5f:86:d7:50:fe:73:eb:
99:8a:b5:4a:b0:54:05:9f:6e:d3:89:30:9b:e5:af:35:26:56:
d0:47:d5:92:24:8e:31:b4:0b:41:4f:a9:49:0b:3f:df:db:91:
e0:ed:6e:3d:2b:b0:d0:41:05:83:a2:50:89:24:13:bd:72:91:
cb:e0:a9:02:c2:02:ba:41:e4:71:2a:a3:60:92:1c:df:dd:94:
15:67:2d:fb:cf:f4:6c:84:cb:02:20:71:fd:f3:ef:14:ac:e9:
0d:ec:4a:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 20:35:27 2025 by rpki-client