Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/cc245053ab513081dff7145ce2ea13a95e27270a.roa
File: cc245053ab513081dff7145ce2ea13a95e27270a.roa (raw, json)
Hash identifier: zPM4SRfPyUIcu5QdK4S6Pnre1rpwTRThPJA/YPpXnTM=
Subject key identifier: 40:D4:99:1B:91:F8:76:EE:D7:CB:52:00:62:DA:46:B0:80:88:8B:D9
Certificate issuer: /CN=bfbb4d3a6dd5e649a6554c4817ce0ed277429136
Certificate serial: 122165
Authority key identifier: 76:7F:42:4D:48:34:06:C4:20:E5:DF:19:BE:BE:99:3F:72:5A:F7:B6
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/cc245053ab513081dff7145ce2ea13a95e27270a.roa
Signing time: Wed 29 Nov 2023 15:31:55 +0000
ROA not before: Wed 29 Nov 2023 15:31:55 +0000
ROA not after: Sat 29 Nov 2025 15:31:55 +0000
asID: 267786
IP address blocks: 201.251.146.0/24 maxlen: 24
201.251.206.0/24 maxlen: 24
201.251.207.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1188197 (0x122165)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfbb4d3a6dd5e649a6554c4817ce0ed277429136
Validity
Not Before: Nov 29 15:31:55 2023 GMT
Not After : Nov 29 15:31:55 2025 GMT
Subject: CN=cc245053ab513081dff7145ce2ea13a95e27270a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:01:4f:26:bc:c4:b9:8b:64:39:a2:a1:86:33:
1c:6a:1a:e4:8e:ca:e1:5a:09:d3:2a:39:72:bb:59:
5d:9c:cf:57:0d:91:eb:a2:af:8f:84:51:15:87:90:
1f:36:b7:78:fa:01:17:f4:e4:38:0f:4b:1c:02:fc:
3f:b7:11:76:ab:51:45:e4:ad:e6:d2:36:8f:cf:8e:
98:df:fe:59:ba:2a:58:5a:97:0d:38:d1:a4:bd:55:
7c:ca:4c:f4:aa:88:6f:79:bc:0c:df:54:03:70:b2:
d4:ae:f3:b4:58:90:30:27:df:b7:e8:6a:9a:07:a6:
44:fe:45:3e:cb:c6:65:76:86:24:8a:dc:c8:b9:08:
58:d2:75:49:9d:e8:08:63:0c:26:78:d7:7b:88:9f:
cc:20:d7:fd:9e:87:f0:3b:71:89:fd:48:16:e4:ce:
9a:5d:96:7f:20:01:1b:4b:a4:c1:ee:bb:86:1c:30:
1c:52:55:19:54:e5:58:90:2a:f5:89:24:3f:54:8e:
42:cd:b4:d5:f8:23:72:76:b5:3a:03:08:a5:9c:77:
1e:7a:b1:ef:18:3a:b6:7c:9f:0e:b1:0f:32:d1:cb:
89:20:32:bd:49:37:53:3b:4e:74:89:09:83:27:b1:
3f:ed:26:80:0d:ae:02:f3:e4:dd:52:fc:c4:c0:27:
35:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:D4:99:1B:91:F8:76:EE:D7:CB:52:00:62:DA:46:B0:80:88:8B:D9
X509v3 Authority Key Identifier:
keyid:76:7F:42:4D:48:34:06:C4:20:E5:DF:19:BE:BE:99:3F:72:5A:F7:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/cc245053ab513081dff7145ce2ea13a95e27270a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.251.146.0/24
201.251.206.0/23
Signature Algorithm: sha256WithRSAEncryption
22:1b:47:09:b8:0d:43:89:1f:d1:aa:86:93:7f:f4:42:24:d0:
a2:2f:7b:e2:51:01:5d:52:12:f7:c7:49:f6:96:8a:4b:78:5e:
af:bc:aa:bd:3b:ef:9f:f4:e3:b6:88:1d:1b:98:00:be:82:54:
5f:15:ce:c9:22:d2:a2:d8:99:e3:b5:3e:4d:e6:52:cd:14:69:
9f:c2:6b:cb:4b:44:46:de:2a:43:aa:1a:39:58:43:9a:c6:5c:
ba:20:d1:51:84:47:fd:d7:5e:0b:06:4a:7e:75:c9:12:f9:b8:
87:d4:e1:b5:c9:12:85:be:35:c4:2e:ce:fe:55:79:89:5a:fd:
99:ff:ff:ae:ec:dd:7b:94:9d:e1:3c:15:b0:e6:4d:e5:72:b4:
a5:ba:ba:a6:04:9c:87:5d:36:aa:82:83:e7:01:a3:9a:cf:35:
fc:a2:3e:aa:bf:95:5c:56:c3:4b:a7:83:25:0c:a8:5e:ce:25:
f0:f4:0a:fa:e7:2b:2c:20:45:2f:20:9f:d1:c7:a5:60:a4:07:
fa:26:a9:37:ec:09:df:1b:72:86:d2:fc:4c:e7:16:92:0f:3a:
14:26:6f:9d:fd:82:b9:33:c1:88:74:89:f7:e0:49:62:35:3a:
33:e6:89:47:48:02:84:6d:ef:9e:3b:38:71:b3:cf:70:7f:6d:
c4:4f:99:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:35 2024 by rpki-client on console-ams.rpki-client.org