Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/04c8a3619e1304a7e31a3200828d0fa1d861614b.roa
File: 04c8a3619e1304a7e31a3200828d0fa1d861614b.roa (raw, json)
Hash identifier: 53C8eHTN4To6Xg2LnC1ptJMPQbe1hvGxhTMkdUMxp5g=
Subject key identifier: FA:1F:EC:84:B4:CD:87:BC:B1:CC:F7:9B:29:F2:3D:F4:1E:4C:1F:51
Certificate issuer: /CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Certificate serial: 070168
Authority key identifier: 84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/04c8a3619e1304a7e31a3200828d0fa1d861614b.roa
Signing time: Sat 25 Jun 2022 02:03:08 +0000
ROA not before: Sat 25 Jun 2022 03:00:00 +0000
ROA not after: Sun 25 Jun 2023 03:00:00 +0000
asID: 3970
IP address blocks: 201.219.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 459112 (0x70168)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Validity
Not Before: Jun 25 03:00:00 2022 GMT
Not After : Jun 25 03:00:00 2023 GMT
Subject: CN=04c8a3619e1304a7e31a3200828d0fa1d861614b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:17:bc:8f:fd:a1:d6:c5:9c:e7:45:1e:14:33:
7a:8c:df:46:77:a8:ec:86:d9:f7:eb:5f:f9:53:01:
e5:3b:15:27:ad:c4:26:25:19:c6:f5:51:3a:79:1b:
97:9e:a5:bc:b3:c8:d4:db:ec:fb:d8:46:1a:01:cc:
79:b1:01:b8:1d:65:30:1c:5d:a8:c2:b4:bf:ca:3d:
4d:a0:97:a8:47:4f:68:41:a7:e3:c0:a2:49:34:70:
8b:4c:41:04:9f:69:96:ca:16:fe:05:31:e2:a1:20:
7a:00:47:b1:ce:b1:71:48:a8:5e:74:64:8b:5b:e0:
25:44:16:a3:89:14:78:8a:96:c0:99:f3:37:70:0f:
3b:81:89:e4:72:bf:2c:5d:eb:3f:ed:7e:2e:b8:3c:
32:87:70:6f:2a:ee:59:90:8c:0e:91:b4:7e:2f:14:
6e:1c:1d:8a:6c:46:26:0d:e6:13:57:13:7e:2e:bf:
84:6e:f4:9f:36:e1:6d:e5:b7:50:73:0b:c9:82:46:
e4:f8:95:5d:8e:95:d3:7d:ed:96:be:91:a8:d5:56:
84:ee:63:14:22:a2:7d:14:c0:1a:9d:d9:f3:8b:3d:
61:82:4a:95:1f:80:67:b2:e9:a1:0b:21:67:cc:59:
d2:27:13:82:ee:4d:7b:1e:66:e4:25:bf:16:b8:8d:
cd:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:1F:EC:84:B4:CD:87:BC:B1:CC:F7:9B:29:F2:3D:F4:1E:4C:1F:51
X509v3 Authority Key Identifier:
keyid:84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/04c8a3619e1304a7e31a3200828d0fa1d861614b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.219.253.0/24
Signature Algorithm: sha256WithRSAEncryption
86:b4:7b:e0:8b:4c:5a:5d:52:1e:0c:e5:35:98:f1:6c:e3:a1:
a7:b3:a9:cf:da:31:fa:6c:55:94:90:a0:2b:1a:8b:6c:86:8f:
a0:82:a3:d0:69:75:2b:ef:22:e1:de:a5:03:53:ab:f2:25:99:
e8:7f:8c:a3:ca:d2:03:aa:88:0d:40:9e:9e:8e:d5:dd:42:5c:
83:ca:f9:7a:a6:53:6c:7f:e3:ca:ab:92:a5:12:7b:03:bd:75:
fd:69:31:7a:f3:55:15:a6:93:dc:35:dd:21:2d:40:aa:ad:68:
fb:15:9f:ab:b9:c1:d2:d6:c7:b6:5c:3d:2b:15:63:63:5e:5a:
7a:cd:38:82:bc:3e:28:92:ba:b2:65:c7:e3:be:02:f4:c0:a4:
58:c0:43:e1:af:ea:81:e1:45:4e:16:d9:f2:c9:8d:5f:7c:32:
80:6b:ae:65:b7:d1:4c:29:e2:e0:46:3d:4f:26:b4:8d:63:a6:
89:c6:79:21:d6:89:cc:0c:16:5d:2d:f3:3c:78:1a:d0:59:5c:
b2:e7:d7:f8:c6:48:1c:51:52:c1:22:5f:94:95:ca:3c:26:34:
ac:68:c7:9b:df:15:80:e7:72:14:f9:4f:31:8a:c4:a3:36:fb:
f6:9d:ad:59:cd:51:86:cf:b2:76:3b:d2:2f:fa:ce:cf:91:45:
09:60:4e:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:17 2024 by rpki-client on console-ams.rpki-client.org