Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/977d3d35-bbec-4cad-a0c5-0607a29e1f0f/f668e450328c73c27878c07e8637bc654d436254.roa
File: f668e450328c73c27878c07e8637bc654d436254.roa (raw, json)
Hash identifier: vKSRBHZVcC5rdl13VJYWRW5LEtf/opNnuKCSUf34iMY=
Subject key identifier: F0:66:7B:29:3D:7D:52:64:EF:76:C9:E8:7C:D3:94:CF:3B:B8:A5:42
Certificate issuer: /CN=5d32623b33e04fadc1af80fccf6d12aabbcfbfa5
Certificate serial: 1AD9BF
Authority key identifier: 7E:3D:3D:84:5A:21:26:7B:9C:7E:F6:54:A8:53:05:ED:86:7E:E9:1B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5d32623b33e04fadc1af80fccf6d12aabbcfbfa5.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/977d3d35-bbec-4cad-a0c5-0607a29e1f0f/f668e450328c73c27878c07e8637bc654d436254.roa
Signing time: Tue 15 Nov 2022 00:26:23 +0000
ROA not before: Mon 14 Nov 2022 00:24:02 +0000
ROA not after: Fri 15 Nov 2024 00:24:02 +0000
asID: 272848
IP address blocks: 201.218.139.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1759679 (0x1ad9bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d32623b33e04fadc1af80fccf6d12aabbcfbfa5
Validity
Not Before: Nov 14 00:24:02 2022 GMT
Not After : Nov 15 00:24:02 2024 GMT
Subject: CN=f668e450328c73c27878c07e8637bc654d436254
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ab:cf:8e:4f:d3:ef:e0:ed:0a:a0:24:24:20:
73:d4:de:8c:f4:ba:a4:40:72:7a:3f:01:59:2b:d5:
89:04:e4:10:d7:8a:8e:ab:59:1a:9d:9b:75:c5:d0:
c5:9a:7c:9a:27:0c:bd:6e:ab:db:54:5c:d1:07:3a:
48:68:66:0e:54:7e:96:fe:83:ce:17:54:59:e5:95:
d4:eb:ab:ed:d2:3f:08:4d:19:d9:ee:b9:d5:14:b0:
62:91:99:2a:44:17:07:99:ab:14:ec:5e:b7:c6:97:
b8:03:81:27:d6:95:81:e8:10:2f:67:81:ac:a0:b5:
c0:3a:23:d4:91:d8:bf:8e:4a:5b:9f:64:b9:fa:cf:
e9:55:02:c7:7b:d0:b0:63:a1:dc:c7:36:3b:c0:27:
1e:1e:52:7e:5d:29:90:50:19:ea:5c:e8:05:4c:3a:
65:e3:5b:df:5f:d0:fd:7d:3f:15:ba:b9:3f:8d:c3:
c6:21:2f:70:93:ed:43:c1:70:47:8d:aa:a7:53:83:
36:af:7d:f5:ca:c5:8f:9d:6e:61:5b:f3:c7:d0:9d:
45:44:51:d7:a1:cf:bc:da:ec:46:07:24:72:17:cb:
af:4e:9b:a5:aa:4e:57:43:6d:e4:39:2c:18:a4:a0:
27:b3:35:87:14:03:93:aa:00:93:8d:20:fe:f4:ab:
00:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:66:7B:29:3D:7D:52:64:EF:76:C9:E8:7C:D3:94:CF:3B:B8:A5:42
X509v3 Authority Key Identifier:
keyid:7E:3D:3D:84:5A:21:26:7B:9C:7E:F6:54:A8:53:05:ED:86:7E:E9:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5d32623b33e04fadc1af80fccf6d12aabbcfbfa5.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/977d3d35-bbec-4cad-a0c5-0607a29e1f0f/f668e450328c73c27878c07e8637bc654d436254.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/977d3d35-bbec-4cad-a0c5-0607a29e1f0f/5d32623b33e04fadc1af80fccf6d12aabbcfbfa5.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.218.139.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:a1:b1:97:57:4b:3d:11:4a:0a:62:f0:b1:91:d7:8d:53:ac:
22:b6:68:66:1c:6b:e4:f8:71:bf:99:aa:bf:d6:64:5d:fd:62:
3a:ab:83:73:bf:79:fb:88:15:a0:77:e3:7f:91:df:0a:a2:30:
8b:05:92:52:7c:58:c9:84:ac:01:17:ba:cb:4a:e9:e0:cd:9e:
f2:8e:60:78:f5:c8:e9:86:3b:58:0f:94:92:e9:3e:23:89:90:
40:93:2e:37:60:b6:00:32:99:68:7f:71:40:1a:b2:4c:fc:17:
0c:7a:58:2d:3f:1b:92:46:83:09:89:41:dc:a8:11:09:99:41:
9e:0c:ed:37:43:2b:c2:05:3e:41:28:3c:03:00:a7:f2:2c:27:
f8:ed:e3:d0:6d:07:ff:e6:43:6b:47:75:3a:75:68:2e:fd:e1:
f8:9a:41:17:c9:54:c9:a3:da:00:ba:9a:30:48:b0:45:11:da:
01:c0:f1:32:f4:74:43:65:1b:d1:b6:a6:a9:3c:f6:0f:3f:3d:
f2:16:61:b8:07:5d:57:f0:ca:d7:bc:1b:d9:78:dd:b5:5a:c8:
ad:75:87:a9:4d:b9:ca:4c:fb:d2:42:57:5d:18:bc:43:fe:56:
d5:4b:03:33:4f:93:94:a8:77:0f:c1:f1:83:5c:4a:3d:bc:67:
33:6c:85:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:41 2024 by rpki-client on console-ams.rpki-client.org