Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/977d3d35-bbec-4cad-a0c5-0607a29e1f0f/252d31b334427287d638e2f744ac43b24c3df7f1.roa
File: 252d31b334427287d638e2f744ac43b24c3df7f1.roa (raw, json)
Hash identifier: wb+5wOmJhvk3RciFIZNjZz+CuGRwUvlcgloUxe0Z/oc=
Subject key identifier: 82:57:8A:E5:9E:B6:8B:6D:A5:8B:97:AE:58:8F:42:BF:9C:85:AF:6E
Certificate issuer: /CN=5d32623b33e04fadc1af80fccf6d12aabbcfbfa5
Certificate serial: 24D611
Authority key identifier: 7E:3D:3D:84:5A:21:26:7B:9C:7E:F6:54:A8:53:05:ED:86:7E:E9:1B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5d32623b33e04fadc1af80fccf6d12aabbcfbfa5.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/977d3d35-bbec-4cad-a0c5-0607a29e1f0f/252d31b334427287d638e2f744ac43b24c3df7f1.roa
Signing time: Wed 06 Dec 2023 07:30:00 +0000
ROA not before: Wed 06 Dec 2023 07:30:00 +0000
ROA not after: Fri 05 Dec 2025 07:30:00 +0000
asID: 271835
IP address blocks: 201.218.159.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2414097 (0x24d611)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d32623b33e04fadc1af80fccf6d12aabbcfbfa5
Validity
Not Before: Dec 6 07:30:00 2023 GMT
Not After : Dec 5 07:30:00 2025 GMT
Subject: CN=252d31b334427287d638e2f744ac43b24c3df7f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e9:0b:cb:05:cf:73:21:cb:5f:a2:51:8a:b6:
7b:6f:15:4c:6b:9d:3d:49:83:4b:0a:c6:90:d8:93:
01:91:26:10:23:13:d2:a4:f5:3b:86:2e:98:12:61:
49:92:d0:a2:37:9a:3e:ea:01:27:36:de:15:13:ef:
44:fe:14:58:e7:a7:ab:b4:7c:6b:8f:76:f0:7b:c7:
dd:8d:d8:79:90:09:f6:37:71:e6:55:19:0c:5c:7d:
12:f8:04:37:6e:f9:a5:6c:c7:0a:cf:12:84:f7:0c:
02:06:62:d7:bb:2d:1d:43:bd:de:42:eb:28:b8:ae:
cb:2c:51:af:93:8e:00:6b:26:3a:e5:a4:e4:88:35:
28:a5:a5:6b:1d:6f:de:80:cd:c6:32:60:25:db:ec:
90:06:74:4a:9b:19:a5:12:98:c6:63:a4:15:d7:52:
8e:6c:b5:15:3c:ae:3b:ba:b4:f4:1a:54:73:db:bb:
b4:cf:b5:60:d8:ac:c4:85:7c:61:e2:13:ea:5e:46:
bc:e7:d0:f9:5e:66:0c:37:c7:b7:57:43:50:fa:a5:
53:3c:e2:30:6e:09:3f:c4:ec:88:23:67:51:34:6e:
4f:bb:98:8a:b1:22:e2:a5:48:f4:0e:7d:2b:82:b9:
d5:5a:4a:ce:47:8e:86:21:fb:8b:c4:7f:59:59:e1:
0e:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:57:8A:E5:9E:B6:8B:6D:A5:8B:97:AE:58:8F:42:BF:9C:85:AF:6E
X509v3 Authority Key Identifier:
keyid:7E:3D:3D:84:5A:21:26:7B:9C:7E:F6:54:A8:53:05:ED:86:7E:E9:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5d32623b33e04fadc1af80fccf6d12aabbcfbfa5.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/977d3d35-bbec-4cad-a0c5-0607a29e1f0f/252d31b334427287d638e2f744ac43b24c3df7f1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/977d3d35-bbec-4cad-a0c5-0607a29e1f0f/5d32623b33e04fadc1af80fccf6d12aabbcfbfa5.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.218.159.0/24
Signature Algorithm: sha256WithRSAEncryption
66:66:c8:92:9e:18:b0:0a:e2:0d:70:77:34:96:e6:9d:55:47:
5d:90:e1:b1:42:71:f3:27:d1:6f:ce:cf:9a:a5:a7:fc:ea:44:
0a:7a:f3:96:0a:99:ba:c6:e1:84:40:46:7f:70:2b:cd:91:9b:
e3:36:ea:fa:a7:fd:d5:47:4c:e7:38:1a:87:af:47:a9:3f:88:
e9:bd:db:f5:b0:24:44:aa:d0:c6:61:2c:28:4b:36:62:a7:f2:
3d:39:87:43:70:77:ac:5d:54:74:a3:48:ff:d6:b9:04:05:79:
9f:26:be:77:2f:5d:65:76:b8:1d:49:1d:8e:36:03:21:ea:25:
cc:66:f4:74:0a:b0:b3:83:89:6b:ae:6d:8e:52:28:86:21:97:
ac:f7:26:98:57:32:9b:bb:27:53:e1:ee:ba:f6:af:6a:ee:56:
db:32:85:8d:90:dd:56:0b:9a:12:ac:6b:91:7c:44:89:ee:a9:
ce:ac:fc:90:9e:e8:a8:58:a2:cc:73:2a:45:fe:74:34:47:ed:
77:32:69:5e:48:d4:98:28:75:6a:8b:58:c2:9b:ef:eb:8e:61:
a5:24:37:5a:9f:74:8a:8f:60:6b:08:92:f2:2c:c9:9f:cd:fd:
b1:e3:7d:1f:27:3d:94:7d:bf:08:d9:25:40:39:61:3b:75:60:
1f:1b:bb:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:25 2024 by rpki-client on console-fra.rpki-client.org