Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/05eb0511-bfcc-4f43-8c71-906df7993882/9c7ad9cdbaee38e79c4a30226d02fcfadb1f06be.roa
File: 9c7ad9cdbaee38e79c4a30226d02fcfadb1f06be.roa (raw, json)
Hash identifier: RaWMoy/quDA8aDOp8qVuLeukQSRmztt7vnHOvmBoY+4=
Subject key identifier: 36:C6:77:E7:39:95:09:A8:24:A4:54:89:09:48:3D:35:47:A0:A6:2F
Certificate issuer: /CN=c355af2587e04fcb2db519de3ca0af885d613b77
Certificate serial: 2402B5
Authority key identifier: BB:CB:68:E2:69:EA:41:9E:58:D5:D8:99:EF:09:D0:88:D0:94:A9:97
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c355af2587e04fcb2db519de3ca0af885d613b77.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/05eb0511-bfcc-4f43-8c71-906df7993882/9c7ad9cdbaee38e79c4a30226d02fcfadb1f06be.roa
Signing time: Mon 02 Oct 2023 20:04:50 +0000
ROA not before: Sun 01 Oct 2023 20:04:49 +0000
ROA not after: Thu 02 Oct 2025 21:04:49 +0000
asID: 1
IP address blocks: 168.227.21.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2359989 (0x2402b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c355af2587e04fcb2db519de3ca0af885d613b77
Validity
Not Before: Oct 1 20:04:49 2023 GMT
Not After : Oct 2 21:04:49 2025 GMT
Subject: CN=9c7ad9cdbaee38e79c4a30226d02fcfadb1f06be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:2e:e0:ca:d4:91:82:18:cb:3d:2a:58:0c:ba:
70:d5:62:59:e4:54:57:1a:b6:63:77:e1:f7:5c:1d:
24:0f:85:b9:49:53:3c:84:00:e7:a5:eb:9d:ff:02:
6b:c7:a3:2c:a3:02:80:a4:c7:44:be:17:b1:00:e9:
13:d8:2a:5b:3f:53:a6:7f:11:30:34:d3:1f:26:11:
40:46:c8:ee:27:6a:4b:23:ce:49:11:73:1d:f2:d5:
f5:0e:86:ba:e6:b5:61:21:61:fd:ec:a6:43:2d:7d:
62:27:b4:28:6d:cb:d0:8f:98:4a:6d:88:9f:10:8a:
8d:fb:2a:5c:d2:ff:10:93:5c:31:94:07:2c:60:db:
87:c3:39:2e:7c:17:a5:fe:f1:d9:d5:bf:34:d8:28:
9a:7f:0e:c0:ab:bd:68:96:b5:b2:40:0b:b6:83:4b:
09:40:08:5a:64:13:49:df:31:4f:6d:bf:b9:fb:30:
8d:05:51:e2:5c:1c:c8:bb:3c:ea:11:db:bd:3e:80:
d7:1f:88:25:c1:4a:0b:f4:6f:f7:eb:6e:10:f3:73:
2a:5f:2b:f7:bf:b3:08:e5:db:be:38:16:52:b5:27:
80:4a:81:c7:b1:76:81:8d:fd:77:fa:14:ff:2e:fa:
a8:6f:be:0a:b4:90:fd:21:e2:8a:72:cd:86:ed:de:
f6:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:C6:77:E7:39:95:09:A8:24:A4:54:89:09:48:3D:35:47:A0:A6:2F
X509v3 Authority Key Identifier:
keyid:BB:CB:68:E2:69:EA:41:9E:58:D5:D8:99:EF:09:D0:88:D0:94:A9:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c355af2587e04fcb2db519de3ca0af885d613b77.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/05eb0511-bfcc-4f43-8c71-906df7993882/9c7ad9cdbaee38e79c4a30226d02fcfadb1f06be.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/05eb0511-bfcc-4f43-8c71-906df7993882/c355af2587e04fcb2db519de3ca0af885d613b77.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.227.21.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:ae:13:2f:1d:fa:1d:36:fd:09:f3:16:ac:55:64:6b:15:83:
42:aa:58:f7:0c:b6:7c:ac:7a:3d:c5:a1:6a:1b:2c:bb:ff:58:
c6:e4:e6:90:eb:9f:d1:a6:e1:13:3f:64:7e:b2:d2:0b:78:de:
40:b5:13:70:be:6d:e9:4c:17:fc:c5:65:7c:5f:18:ac:b8:c1:
8e:14:4d:bb:c7:ae:53:41:e7:f4:b3:50:35:5f:ba:98:22:b6:
4e:78:c0:fe:9b:05:00:c1:5d:7f:4a:2e:ed:4c:7f:34:c6:f0:
c5:e0:69:0d:04:70:03:76:eb:40:be:4a:56:09:e3:7c:43:8b:
a7:89:d8:ab:d3:65:3e:81:00:a2:85:95:7d:24:f3:9f:65:1d:
49:84:69:ca:6b:2a:b7:88:9f:60:3b:d8:fa:04:0d:ce:a1:90:
7f:fb:be:fd:8c:24:0e:c5:e5:96:5e:d5:0d:16:ff:ad:0f:3d:
d3:a7:53:0e:23:37:b5:e7:6b:2b:73:66:ea:31:66:85:23:e5:
b5:a4:70:9a:85:36:37:90:94:8c:87:23:27:70:f2:b1:c0:d6:
15:70:6a:f9:0c:26:82:52:35:51:0a:cd:bd:fa:d2:da:5d:11:
c6:a6:b9:42:ca:df:b0:cb:a7:5d:1d:04:55:15:6c:f6:b5:29:
7f:7d:f4:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 02:25:43 2025 by rpki-client