Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/c1942d7bedd9d718636909d18136cf040a11b870.roa
File: c1942d7bedd9d718636909d18136cf040a11b870.roa (raw, json)
Hash identifier: BTElsVgszv94gkhNuO5VCrjWpAJ0VJVeeUdL/jSLDsc=
Subject key identifier: 90:96:20:54:AD:7D:95:62:14:4B:73:62:47:C9:2A:2C:5F:F6:77:4D
Certificate issuer: /CN=d85da304334fb36204a370e950487689e811a2c8
Certificate serial: 21F41A
Authority key identifier: 95:A8:9C:41:76:01:10:8E:0E:98:02:3D:07:26:F4:4A:7C:51:0F:4B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d85da304334fb36204a370e950487689e811a2c8.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/c1942d7bedd9d718636909d18136cf040a11b870.roa
Signing time: Tue 25 Apr 2023 15:04:39 +0000
ROA not before: Mon 24 Apr 2023 15:04:37 +0000
ROA not after: Fri 25 Apr 2025 15:04:37 +0000
asID: 27915
IP address blocks: 201.218.232.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2225178 (0x21f41a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d85da304334fb36204a370e950487689e811a2c8
Validity
Not Before: Apr 24 15:04:37 2023 GMT
Not After : Apr 25 15:04:37 2025 GMT
Subject: CN=c1942d7bedd9d718636909d18136cf040a11b870
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:e7:bc:8d:e8:1a:ee:dc:53:c8:92:54:38:d7:
07:7d:c9:0c:85:1a:33:fd:a3:2b:ec:96:4e:8e:91:
1c:30:a2:25:3f:ba:fa:7b:62:76:43:9c:36:61:af:
ee:8e:62:4f:22:42:48:e6:e0:8a:8f:c2:c9:d3:29:
c0:37:bc:72:6d:65:99:3f:d3:83:78:26:cf:17:23:
63:f7:e3:5c:0e:3c:cc:7f:c1:6f:24:07:17:b6:35:
f7:d2:bd:9f:cc:cd:81:1a:e8:46:46:d0:74:f7:fb:
61:f4:05:99:55:96:64:9c:4c:1e:78:b3:d9:0b:54:
ff:3c:86:30:27:f0:97:b6:3a:53:71:ce:b1:a2:8f:
b3:e3:7c:f8:cc:97:28:b1:4f:25:c1:bc:20:08:13:
5b:3b:8d:eb:e9:a4:f2:06:33:e2:37:f1:7e:cc:ab:
d3:4b:72:5a:ea:62:0a:38:d8:02:d5:06:d5:a1:73:
8b:29:be:ed:ac:ac:3b:99:c3:56:ba:0c:de:37:06:
16:25:e7:17:f7:24:6c:3d:56:a3:55:08:00:a9:53:
a4:9f:9c:96:73:d8:d6:7d:be:10:7c:bb:51:3a:6f:
89:91:d1:9e:d2:ec:da:15:15:9c:86:24:d6:51:a3:
72:d5:44:a5:81:86:a0:d0:82:00:92:b6:82:8b:ba:
5d:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:96:20:54:AD:7D:95:62:14:4B:73:62:47:C9:2A:2C:5F:F6:77:4D
X509v3 Authority Key Identifier:
keyid:95:A8:9C:41:76:01:10:8E:0E:98:02:3D:07:26:F4:4A:7C:51:0F:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d85da304334fb36204a370e950487689e811a2c8.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/c1942d7bedd9d718636909d18136cf040a11b870.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/d85da304334fb36204a370e950487689e811a2c8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.218.232.0/24
Signature Algorithm: sha256WithRSAEncryption
32:fb:57:d7:29:aa:29:79:96:06:3e:7b:c9:b1:8b:2d:d5:53:
d0:92:c6:08:45:71:ef:89:fb:63:05:d4:6f:2b:f1:39:e9:03:
f5:81:73:43:5c:a7:13:b6:be:a6:0a:48:1c:55:69:3c:9b:b3:
0a:38:58:65:55:cf:dd:35:2e:5b:fb:83:a9:4b:77:c7:b6:f7:
6b:aa:b2:79:2a:b4:50:40:9e:61:9c:16:2f:c1:e5:03:ed:3f:
3d:26:ed:7f:87:fc:d0:f9:73:06:a2:29:03:8f:47:fd:7e:10:
7d:e5:7a:8d:e0:7a:89:bf:03:e4:61:b3:2d:a7:95:8c:ca:21:
35:95:b7:d4:07:b1:24:3d:ea:93:d4:01:03:db:d1:cb:af:7f:
49:f3:4a:2a:aa:34:73:ea:15:e3:0c:77:1f:d7:b1:d4:a9:d3:
78:23:ca:d5:0f:60:ad:9e:2c:f3:47:ab:b6:ac:83:25:57:18:
b1:f0:d5:00:0b:20:de:e8:43:0f:13:25:42:13:8b:c4:9a:5c:
5e:7d:0e:94:6b:da:70:0d:67:20:cf:71:a5:19:76:ef:74:7c:
c4:57:7f:9b:a1:f9:a7:1c:fd:94:eb:33:1d:bf:61:d6:35:00:
cf:29:65:f7:6e:e8:72:21:81:fe:62:b1:b9:7f:0c:7d:fa:e2:
85:91:70:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:17 2024 by rpki-client on console-ams.rpki-client.org