Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/2b64559f8e80c8fa34697b5c13e5a454fccf333e.roa
File: 2b64559f8e80c8fa34697b5c13e5a454fccf333e.roa (raw, json)
Hash identifier: t7LNhqncutAGzqfmxEo/XnUKxKy0WuKxfTU6FLo2gzI=
Subject key identifier: 7E:58:7F:3C:49:D5:8C:2B:36:2C:22:51:D7:58:1A:89:8B:66:4E:7E
Certificate issuer: /CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Certificate serial: 34F8
Authority key identifier: 84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/2b64559f8e80c8fa34697b5c13e5a454fccf333e.roa
Signing time: Thu 20 Jan 2022 03:05:33 +0000
ROA not before: Thu 20 Jan 2022 03:00:00 +0000
ROA not after: Fri 20 Jan 2023 03:00:00 +0000
asID: 3130
IP address blocks: 201.219.252.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13560 (0x34f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Validity
Not Before: Jan 20 03:00:00 2022 GMT
Not After : Jan 20 03:00:00 2023 GMT
Subject: CN=2b64559f8e80c8fa34697b5c13e5a454fccf333e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f9:6c:0e:40:8e:35:b9:48:f7:b5:33:bb:a7:
8e:db:14:ad:b0:ba:a0:94:6e:28:53:d0:f3:92:7f:
48:ca:f4:05:59:29:78:97:45:a7:f3:33:7a:e2:65:
9c:5b:b4:f2:34:dc:dd:39:92:5f:5c:b2:3e:bd:f0:
54:8a:9c:16:ec:12:b3:b2:bb:e6:b1:0a:8d:c3:77:
e4:2e:80:d0:b4:17:9c:53:a5:b9:d3:f1:0e:f7:c2:
84:52:9a:78:7e:9d:ad:d4:f0:20:eb:2d:7d:a9:a9:
89:aa:71:42:5f:49:57:c9:20:59:c9:ab:ab:d3:e4:
d5:98:00:73:07:18:73:37:4a:0e:e0:3f:22:d4:7e:
e5:33:8f:da:de:2c:1f:e4:87:e8:81:70:1d:49:e4:
ec:39:48:a9:c9:93:35:06:1b:a6:ea:5f:d6:8b:87:
6f:a3:01:b3:cc:b9:c7:da:4b:74:0e:89:7e:c4:04:
a6:d6:b9:3c:b2:17:e4:48:cd:ae:e9:9d:93:3c:38:
ba:61:c1:66:47:94:e2:ea:48:cf:5a:50:d1:86:3a:
d9:62:d1:70:de:af:51:25:ba:78:eb:c7:53:3f:04:
04:51:64:c2:c8:ed:2a:42:a0:80:b2:b7:51:60:12:
b6:6c:bf:1d:d3:c4:21:fa:c5:0e:81:ab:e7:1c:87:
c1:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:58:7F:3C:49:D5:8C:2B:36:2C:22:51:D7:58:1A:89:8B:66:4E:7E
X509v3 Authority Key Identifier:
keyid:84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/2b64559f8e80c8fa34697b5c13e5a454fccf333e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.219.252.0/23
Signature Algorithm: sha256WithRSAEncryption
02:e2:74:84:00:6a:20:6d:09:71:8a:4b:1a:65:87:50:46:9f:
39:46:9f:a3:76:6d:25:ce:63:c6:35:f5:f7:ca:0e:a0:47:56:
d5:3a:23:77:84:dd:aa:e8:13:2e:b4:e2:80:6d:af:f8:13:91:
05:56:4b:fe:1c:87:0f:fb:a6:34:45:d9:9f:c0:ad:a3:04:cc:
a9:29:97:df:2a:a3:0f:f5:30:c4:a4:49:12:b1:5f:db:11:54:
71:51:25:b4:ef:a8:e3:7f:c0:c1:15:89:29:1c:98:bd:c7:7b:
14:87:21:e4:e9:06:35:b2:2f:e7:9f:a0:22:d3:a2:bc:30:5a:
bd:a1:b0:9c:8d:57:b5:80:89:ec:f7:5f:91:7f:d1:c3:e2:51:
ec:0d:3e:a3:b1:c4:eb:23:c4:b6:46:49:d7:05:4a:06:95:d5:
72:c4:cf:89:5d:80:1b:fd:9b:a1:75:d4:14:fb:ab:32:a5:9e:
36:9f:ae:3d:50:c7:20:a1:30:9c:3b:5a:9b:c2:11:24:54:dc:
bc:43:c2:84:a5:7a:20:70:0e:8a:23:4c:58:63:bb:03:3c:30:
60:7a:44:6d:d1:2d:e3:d0:29:99:cf:b1:d8:94:fa:9a:00:5e:
f3:91:87:35:a1:7e:18:e0:94:5f:56:a9:39:f8:3a:48:97:6e:
9b:2a:43:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:58 2024 by rpki-client on console-fra.rpki-client.org