Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/16f35436f65e900eb39d0f75b1241b724f80f52c.roa
File: 16f35436f65e900eb39d0f75b1241b724f80f52c.roa (raw, json)
Hash identifier: bKiybMFNnN0bvoMBc5Ik2PYLG6wGLPuonRpiSg9DEa4=
Subject key identifier: C7:B6:62:81:0E:E9:03:E3:E2:9C:DD:0C:75:73:56:E0:C5:E3:E3:77
Certificate issuer: /CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Certificate serial: 06A714
Authority key identifier: 84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/16f35436f65e900eb39d0f75b1241b724f80f52c.roa
Signing time: Fri 17 Jun 2022 01:13:22 +0000
ROA not before: Fri 17 Jun 2022 03:00:00 +0000
ROA not after: Sat 17 Jun 2023 03:00:00 +0000
asID: 3970
IP address blocks: 201.219.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 435988 (0x6a714)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Validity
Not Before: Jun 17 03:00:00 2022 GMT
Not After : Jun 17 03:00:00 2023 GMT
Subject: CN=16f35436f65e900eb39d0f75b1241b724f80f52c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:16:3c:00:e4:ec:40:35:fa:25:d4:58:04:0b:
08:82:17:30:22:ac:cf:69:72:37:bd:93:49:8f:33:
f0:0f:31:25:2e:c7:89:07:55:28:94:ad:b6:d1:4d:
18:2a:00:8c:ba:94:cc:47:74:6c:e9:eb:d7:66:d3:
b5:65:a0:e5:61:bd:a1:4f:2d:54:54:03:7a:e8:85:
54:b2:18:63:67:d2:37:d9:65:44:e5:0a:f7:4c:1a:
01:5c:d5:e5:7d:7a:40:40:c4:2b:5e:27:f3:20:cf:
5b:cb:90:8f:c6:79:94:77:2c:71:53:72:4d:67:4d:
f3:66:af:4d:24:c6:54:42:e0:01:d1:df:cf:91:42:
99:cf:14:b9:31:e0:25:85:23:76:d3:71:5a:95:dd:
b3:d6:59:78:bc:1d:c5:a0:f3:2c:3e:8f:0e:16:10:
6f:21:92:e8:32:8b:d1:d4:21:90:18:93:9b:d7:25:
62:b5:dc:83:17:53:11:af:cb:2c:f0:58:12:24:ad:
c0:6e:4c:a2:71:14:b4:cc:97:7c:9a:0e:2c:b8:a9:
90:24:c8:64:ee:5f:37:ae:16:3e:4b:50:36:b7:29:
20:c4:d8:00:a0:32:43:3a:eb:bd:c7:99:6b:05:2a:
eb:7e:bd:37:95:d2:bd:b6:18:6f:a2:a5:3a:3b:7e:
f0:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:B6:62:81:0E:E9:03:E3:E2:9C:DD:0C:75:73:56:E0:C5:E3:E3:77
X509v3 Authority Key Identifier:
keyid:84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/16f35436f65e900eb39d0f75b1241b724f80f52c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.219.253.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:b1:45:61:a2:88:35:8c:65:af:6a:1f:cf:54:fb:a3:b6:8a:
91:02:6c:96:7d:3e:93:14:cb:27:8d:16:a4:96:59:68:c9:1e:
1f:d9:4b:be:35:26:4e:0a:79:e1:3e:08:6a:dc:e3:d1:bf:9e:
17:b0:c5:c5:e8:2a:dd:1f:13:ea:ef:1a:d8:64:fc:de:e0:2e:
6e:58:e5:a9:67:79:6e:43:80:0a:c5:43:55:66:6f:8c:d5:73:
25:11:b2:c8:cc:bb:e1:25:4c:70:bc:54:6d:2d:f0:f8:71:5b:
cd:8c:b1:48:83:f7:76:1a:29:7a:1c:33:8e:75:38:f0:77:9a:
b3:20:17:e9:85:31:25:17:86:a3:bb:03:03:8f:20:62:25:18:
47:21:54:78:9c:b5:c9:5e:23:fd:a9:00:62:54:26:2d:c3:85:
00:ae:74:82:28:f5:f6:96:de:e3:87:9c:c0:2e:ae:e3:5a:c6:
c5:a8:65:20:8b:a1:2c:4d:d8:19:88:a4:d4:50:f4:bf:90:fe:
20:b3:45:fc:a3:cc:f4:ca:8d:15:1b:60:3d:3d:bb:54:12:03:
c1:cf:27:c4:9c:32:6e:20:d0:dc:9c:b3:32:12:a5:a7:76:05:
d7:72:da:e9:a4:14:ad:1f:03:72:b5:c2:bb:c5:9a:40:8a:cd:
f1:cf:a7:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:32 2023 by rpki-client on console-fra.rpki-client.org