Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7d7da0c3-c0a0-4dbb-a356-50448d749317/ed0967ac984b984db17b2d872e57cc842e8ece53.roa
File: ed0967ac984b984db17b2d872e57cc842e8ece53.roa (raw, json)
Hash identifier: 3wrcJb/YCucAwFB6Z6+cRH32S2H9RDYICrlfQ1VB46s=
Subject key identifier: 00:04:48:06:C4:10:E3:72:33:8B:6A:74:38:D4:A7:6D:AB:66:2C:A6
Certificate issuer: /CN=bca241a84c27bfe35e84dea65f4a7db00fab553c
Certificate serial: 063FF2
Authority key identifier: F4:58:60:FC:8C:F0:EC:66:8C:12:40:B7:75:C3:E2:4E:6C:36:03:80
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bca241a84c27bfe35e84dea65f4a7db00fab553c.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/7d7da0c3-c0a0-4dbb-a356-50448d749317/ed0967ac984b984db17b2d872e57cc842e8ece53.roa
Signing time: Tue 18 Jul 2023 20:02:18 +0000
ROA not before: Mon 17 Jul 2023 20:02:18 +0000
ROA not after: Fri 18 Jul 2025 20:02:18 +0000
asID: 7418
IP address blocks: 201.220.245.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 409586 (0x63ff2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bca241a84c27bfe35e84dea65f4a7db00fab553c
Validity
Not Before: Jul 17 20:02:18 2023 GMT
Not After : Jul 18 20:02:18 2025 GMT
Subject: CN=ed0967ac984b984db17b2d872e57cc842e8ece53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:99:f9:e2:0d:6b:a8:6a:18:21:47:a0:bb:8a:
46:06:8a:f7:6c:97:56:0f:94:96:4d:52:bf:ad:4d:
22:0d:f9:67:1f:8c:5c:06:d8:45:94:2f:d4:71:3c:
75:79:b5:60:c4:d4:7e:83:37:d0:de:f5:de:e7:a8:
78:bd:a2:48:a8:2b:2c:3f:2e:94:bc:32:1a:e3:43:
2d:6f:2d:12:c5:15:ac:b0:c2:05:30:0f:52:5c:9c:
c6:29:ac:53:5c:8f:6b:8b:2d:f1:73:ab:df:71:f0:
12:90:d2:77:a9:5d:0b:ad:63:36:e5:8c:db:d5:43:
c8:eb:0e:f6:b0:a1:60:cb:f6:c0:88:8a:38:b4:19:
d0:b1:c4:40:e8:8c:24:d8:a3:9f:ed:17:e4:fd:83:
be:ac:e0:5f:11:24:87:64:a8:3d:04:30:58:56:b9:
60:e0:b1:92:08:ca:45:5b:73:21:c4:4c:96:50:9d:
1f:43:53:0e:f3:34:ae:66:e8:8b:4d:72:2c:58:28:
33:23:03:a5:3a:df:27:54:8b:0e:3a:86:5a:ac:05:
5a:32:ef:aa:c9:ae:54:47:08:f7:ee:14:e3:2e:b6:
a0:aa:fa:2b:11:5e:0d:9b:82:62:3c:4e:ac:de:88:
05:03:99:a4:b2:3a:63:5a:32:37:5f:96:b4:28:be:
cf:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:04:48:06:C4:10:E3:72:33:8B:6A:74:38:D4:A7:6D:AB:66:2C:A6
X509v3 Authority Key Identifier:
keyid:F4:58:60:FC:8C:F0:EC:66:8C:12:40:B7:75:C3:E2:4E:6C:36:03:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bca241a84c27bfe35e84dea65f4a7db00fab553c.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7d7da0c3-c0a0-4dbb-a356-50448d749317/ed0967ac984b984db17b2d872e57cc842e8ece53.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/7d7da0c3-c0a0-4dbb-a356-50448d749317/bca241a84c27bfe35e84dea65f4a7db00fab553c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.220.245.0/24
Signature Algorithm: sha256WithRSAEncryption
87:b6:5b:15:04:f2:5c:a5:a6:60:2e:c4:6c:d8:7a:4c:50:76:
4f:85:b7:d6:36:dd:b9:54:a5:13:c4:d6:77:bf:c6:cd:9a:54:
7d:52:b8:78:09:e9:e8:24:38:e2:42:00:6e:b4:29:d4:56:48:
cd:c2:1d:8c:a8:79:4d:fd:c4:6d:f5:35:87:ea:f3:c8:b6:35:
1e:5c:7d:cd:d6:d0:64:92:86:1d:da:d4:bc:47:b2:9f:d8:20:
c1:63:20:27:71:33:66:08:c7:27:be:9f:20:96:96:30:4e:64:
a4:e6:de:b7:bd:0d:08:4c:e5:3c:3a:ea:98:38:cf:f5:61:a1:
94:2a:5b:b9:61:fd:5c:b4:79:21:ff:43:3e:69:69:fd:35:83:
43:c9:18:6a:f3:99:50:54:63:55:8a:2d:bc:0e:33:a0:18:73:
0f:b0:34:40:cf:f3:7c:f8:f2:7c:1d:26:a7:e4:a4:9d:f3:f5:
c9:6c:b7:50:c0:52:cf:8e:bc:0f:9e:14:3e:d9:b4:fb:13:77:
8e:1a:ba:9c:54:4c:1b:6f:98:6a:1f:54:f6:6d:61:57:36:95:
bd:8c:68:dd:a5:a5:48:d7:87:57:e0:d6:52:4e:80:a7:39:03:
f7:43:0a:75:ed:59:70:98:ca:3a:aa:7b:76:6e:b6:2a:c3:75:
ab:91:2e:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:23 2024 by rpki-client on console-fra.rpki-client.org