Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/0bbc661196376f4fac490e20f04bfcc9b575aafd.roa
File: 0bbc661196376f4fac490e20f04bfcc9b575aafd.roa (raw, json)
Hash identifier: BCInO7dxqRXKossbfBqAw1zVxS+BqkFYuuVOjjWwkQc=
Subject key identifier: 7C:AC:79:2B:68:26:54:AD:28:7A:65:CB:55:3C:3C:E5:2B:E4:E6:A4
Certificate issuer: /CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Certificate serial: 01A9D8
Authority key identifier: 84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/0bbc661196376f4fac490e20f04bfcc9b575aafd.roa
Signing time: Fri 25 Feb 2022 01:55:01 +0000
ROA not before: Fri 25 Feb 2022 03:00:00 +0000
ROA not after: Sat 25 Feb 2023 03:00:00 +0000
asID: 3970
IP address blocks: 201.219.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109016 (0x1a9d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Validity
Not Before: Feb 25 03:00:00 2022 GMT
Not After : Feb 25 03:00:00 2023 GMT
Subject: CN=0bbc661196376f4fac490e20f04bfcc9b575aafd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:03:a9:93:63:31:3c:a6:69:e1:cb:9c:63:3b:
37:ab:26:1a:9a:4d:c1:8a:9f:c4:e3:e3:b3:ce:2e:
10:62:fa:48:b2:15:7f:d5:07:35:d7:a1:4e:f1:b9:
f3:e7:7a:74:81:bf:f2:b9:d8:7d:5e:53:39:bd:ac:
a9:cd:d0:a2:3f:a8:3d:71:d2:06:95:4a:ed:12:5e:
d5:0a:57:60:e9:5a:17:b8:9f:ba:4c:40:42:7f:4f:
49:2d:b0:41:4d:0b:00:78:32:85:98:cd:3b:e1:15:
f7:5f:eb:67:c5:9c:88:78:10:05:c0:08:c5:63:7b:
0e:61:c2:67:a7:2f:e4:1e:c2:1f:07:d0:bf:7c:54:
eb:c0:25:51:a1:e9:68:b4:5e:5c:10:11:62:e4:d3:
27:64:e4:c3:0f:51:74:0c:73:21:0a:d0:a1:fd:38:
e1:9a:02:8c:c9:6e:cd:3e:13:b6:5c:93:6c:f6:0b:
f7:99:db:df:1d:12:0c:96:82:b6:8e:c7:0f:e8:e7:
49:52:c1:0b:6a:db:32:70:88:b8:ab:43:ed:b4:2e:
95:5e:ca:51:08:77:62:fc:a5:91:fb:98:9a:89:9a:
c8:0d:d5:3a:3f:17:cf:f8:b0:a0:08:9f:de:96:a5:
80:f7:1f:bc:f5:dc:b1:ff:94:d6:d5:5c:d6:c6:30:
b0:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:AC:79:2B:68:26:54:AD:28:7A:65:CB:55:3C:3C:E5:2B:E4:E6:A4
X509v3 Authority Key Identifier:
keyid:84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/0bbc661196376f4fac490e20f04bfcc9b575aafd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.219.253.0/24
Signature Algorithm: sha256WithRSAEncryption
53:db:bf:37:d4:a7:21:a8:94:ff:b8:93:b3:26:cf:06:d1:90:
6f:46:73:c8:b5:b7:21:b0:25:42:e6:53:83:f0:51:b7:14:93:
a9:bc:e1:7a:df:93:be:ff:32:a3:b1:9f:9c:b8:2d:d9:42:3b:
1a:d9:e6:26:16:b9:96:e8:88:50:ab:4e:fb:93:63:b9:af:0c:
df:99:16:6d:52:5f:15:5e:ae:6d:25:ab:b2:30:17:91:c8:6d:
bd:d4:29:37:07:12:5c:f1:a9:20:44:19:3e:ba:c0:76:9b:5f:
9c:d4:1e:af:7e:f9:bd:fa:d0:de:c2:11:a1:3a:5c:c1:a0:14:
1b:db:04:f1:06:61:73:b7:80:95:ad:0b:31:1c:d0:a3:c5:10:
5e:5b:ba:ed:be:08:83:78:2c:07:8b:14:75:1c:2b:75:0a:03:
4f:bd:83:cb:56:f9:b4:d2:20:ef:81:63:1f:a5:3c:92:bb:38:
ad:d0:cb:b9:f4:8a:c8:81:eb:2a:7f:b1:e2:d4:05:62:62:98:
50:9a:6b:0e:1d:7f:0f:f1:c9:ce:14:36:cb:22:55:d0:4e:e9:
29:e7:17:a8:30:7d:72:a0:c4:d8:ef:f3:67:82:65:58:59:00:
0c:0d:54:20:fe:39:07:70:77:fa:23:a4:8e:e7:1a:ed:e4:77:
3d:f5:f2:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:17 2024 by rpki-client on console-ams.rpki-client.org