Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/23e8bcbaa656e0d9a095ca52b8863877e3ef1ec6.roa
File: 23e8bcbaa656e0d9a095ca52b8863877e3ef1ec6.roa (raw, json)
Hash identifier: 998OreI6uJ7ex/qnfquXHSwkY5a50MZ8xSZV7dL3tHY=
Subject key identifier: 25:A9:14:06:5D:77:09:D9:FB:33:78:09:01:67:37:66:2D:CD:86:B5
Certificate issuer: /CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Certificate serial: 3337
Authority key identifier: 84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/23e8bcbaa656e0d9a095ca52b8863877e3ef1ec6.roa
Signing time: Thu 20 Jan 2022 03:03:34 +0000
ROA not before: Thu 20 Jan 2022 03:00:00 +0000
ROA not after: Fri 20 Jan 2023 03:00:00 +0000
asID: 666
IP address blocks: 201.219.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13111 (0x3337)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Validity
Not Before: Jan 20 03:00:00 2022 GMT
Not After : Jan 20 03:00:00 2023 GMT
Subject: CN=23e8bcbaa656e0d9a095ca52b8863877e3ef1ec6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:48:78:c8:d2:4f:53:49:ab:54:b3:33:32:0c:
f4:47:5a:88:f6:fc:1d:4b:f1:f4:39:af:f2:75:de:
e2:b1:d9:68:84:22:4a:4b:50:97:ba:ab:43:54:66:
16:b5:48:15:3f:4d:7d:02:75:a9:f0:08:19:12:94:
e9:93:44:a1:69:de:f9:c7:c8:1f:b3:22:2a:1e:81:
aa:5d:e8:c7:d6:55:ce:7f:b9:ff:65:65:af:af:d0:
0c:ef:4d:c6:d9:e6:e9:f5:68:de:be:f0:cc:1f:2c:
46:d4:13:dc:ad:90:5c:5d:69:2d:66:20:d9:35:54:
fb:fb:bf:c2:06:49:33:1f:ce:1f:ba:f8:d8:e6:e9:
bf:2f:ea:14:3b:85:9c:54:cd:70:75:25:ff:d2:39:
dd:1b:33:2a:d2:c7:67:85:e1:83:81:08:be:b5:bf:
de:e5:f5:76:32:48:f2:19:01:a0:11:02:c5:7e:b9:
7d:e7:81:7e:ae:e3:39:f7:51:80:01:11:3d:b2:a1:
28:78:9c:e6:a5:20:44:09:92:89:7d:d6:5a:c2:a5:
69:d9:55:ac:1f:3b:1c:73:d8:81:64:99:ca:af:73:
2d:5f:05:69:64:ff:1a:b1:7d:de:29:04:ec:8d:be:
12:94:d2:80:3a:d0:83:42:67:5e:9d:c6:56:be:c2:
b3:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:A9:14:06:5D:77:09:D9:FB:33:78:09:01:67:37:66:2D:CD:86:B5
X509v3 Authority Key Identifier:
keyid:84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/23e8bcbaa656e0d9a095ca52b8863877e3ef1ec6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.219.253.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:08:af:81:fe:09:46:87:9e:36:19:f1:65:1f:a2:5b:8c:a4:
e3:d0:55:fd:bf:64:b8:74:7d:69:84:fc:72:53:82:fa:3b:0d:
5e:6e:de:bb:15:d7:e4:da:74:2c:5c:57:c6:36:6f:01:3d:b0:
a8:13:0d:c6:02:08:b4:c0:ab:0c:95:17:57:f2:e1:31:32:94:
49:03:b0:88:3f:13:8e:02:d4:54:b1:42:bb:29:fe:2e:a7:29:
58:bc:ca:f4:d7:6c:01:89:03:25:c2:82:2f:45:3d:74:16:85:
b2:88:eb:2e:51:09:99:ac:77:e0:d4:ce:fb:10:b6:5f:6b:10:
5f:47:80:8b:02:9d:b7:39:71:42:01:3c:a5:2f:a6:ae:ac:bf:
50:bd:c2:1a:40:ee:d0:28:fc:5b:40:bc:70:a1:00:19:ba:b4:
eb:fa:3d:11:31:c6:f5:f0:b3:87:53:fa:71:3b:a2:87:5a:e5:
50:ed:e4:f9:10:04:02:0e:67:6b:5e:d0:1a:d2:d3:33:09:72:
55:82:44:85:e0:de:65:71:e0:93:84:76:a6:48:c6:93:f0:21:
65:c9:be:8b:3d:40:c6:37:2a:2c:50:97:02:e1:a8:f2:bf:c7:
cc:a4:fc:62:7a:b0:45:16:66:72:e1:08:63:2e:46:b1:8c:f3:
48:50:cb:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:33 2023 by rpki-client on console-fra.rpki-client.org