Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/2bd5ac3c31d98adc667482cc19d55261573412d0.roa
File: 2bd5ac3c31d98adc667482cc19d55261573412d0.roa (raw, json)
Hash identifier: eARE58vreDx6tINrP70NmDuSxVOUs4u5dSXre0sZrr0=
Subject key identifier: 12:60:56:81:63:78:5B:D4:FE:65:DD:47:B4:92:D7:7B:56:9A:3C:CF
Certificate issuer: /CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Certificate serial: 0CB08A
Authority key identifier: 84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/2bd5ac3c31d98adc667482cc19d55261573412d0.roa
Signing time: Wed 26 Oct 2022 03:19:23 +0000
ROA not before: Tue 25 Oct 2022 03:00:00 +0000
ROA not after: Thu 26 Oct 2023 03:00:00 +0000
asID: 3970
IP address blocks: 201.219.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 831626 (0xcb08a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Validity
Not Before: Oct 25 03:00:00 2022 GMT
Not After : Oct 26 03:00:00 2023 GMT
Subject: CN=2bd5ac3c31d98adc667482cc19d55261573412d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:fc:d8:09:d2:d6:54:72:7e:64:8e:48:82:ed:
7b:6e:d4:2a:ba:ef:cf:08:5e:b8:24:9f:e3:14:74:
76:fd:3e:66:15:84:c4:99:b4:ec:32:f5:8e:25:6e:
b6:6d:0d:cb:9f:77:73:08:af:b2:d0:65:4d:31:d2:
30:f7:0b:4d:17:1c:ec:4f:9d:a4:7e:41:c2:04:37:
90:c5:d9:e5:9b:e7:8b:71:b1:4d:ad:67:0b:eb:fe:
81:9f:17:12:5f:89:0f:0f:e7:34:ec:5c:3e:2c:2c:
75:5b:61:e9:70:74:66:69:ea:cd:a8:fa:99:b0:51:
ae:d3:04:cb:83:98:81:90:fb:57:b0:40:e2:b2:2a:
94:26:ca:26:6f:76:89:00:e1:7c:8f:f2:ce:46:38:
95:6b:3c:a1:93:8c:72:c7:8e:6d:4b:80:94:96:ad:
ee:e0:33:bd:70:c9:7d:d6:72:8f:07:40:4a:90:10:
4e:61:10:04:bd:d3:56:10:e9:6b:76:02:79:61:86:
8d:89:68:cb:82:fd:e4:88:a9:68:33:b3:fb:7f:49:
90:db:ae:7e:8c:f1:6b:87:82:2a:a1:df:19:39:6c:
35:30:53:41:2c:10:05:ac:df:1c:0e:37:79:36:26:
d6:9d:7a:0f:d4:c0:b3:20:dd:18:86:fd:a6:96:1b:
21:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:60:56:81:63:78:5B:D4:FE:65:DD:47:B4:92:D7:7B:56:9A:3C:CF
X509v3 Authority Key Identifier:
keyid:84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/2bd5ac3c31d98adc667482cc19d55261573412d0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.219.253.0/24
Signature Algorithm: sha256WithRSAEncryption
20:1c:fe:21:73:6b:61:6d:18:34:49:3d:78:d7:89:dd:7c:93:
27:85:6e:1b:fd:d8:34:d4:ec:a1:d3:bf:3a:95:40:58:20:ad:
00:c3:82:24:d4:00:d9:da:2d:f3:1f:ef:0f:1e:4d:52:20:9d:
a7:5a:84:12:da:af:ed:ef:e0:39:17:53:54:b5:22:ae:0e:f6:
c9:3b:5b:6d:09:76:fa:b4:30:ea:9b:4d:9f:fb:6d:c3:79:c4:
3e:10:cc:d7:c0:d5:73:4e:a8:82:85:89:77:1a:0a:3c:31:c9:
52:aa:8d:10:3f:5e:cd:d1:81:ac:e3:9b:4d:85:93:02:7b:a3:
bd:67:ca:c8:57:65:81:ec:0e:04:7b:26:cb:bc:9a:7f:39:b3:
9a:02:fe:f1:34:d3:6e:91:96:04:ed:bc:2a:ea:65:e3:a0:90:
f3:51:a2:e3:92:ab:ed:13:72:7b:83:c7:c7:c9:e8:ba:d1:57:
75:84:6a:e8:fc:fa:52:8b:38:9f:30:0e:cc:10:f9:bb:5f:a0:
5a:dc:da:57:14:66:ef:91:f5:8e:0e:1f:bc:f0:4e:dc:cc:5c:
53:f8:52:59:6c:9b:1f:55:fc:47:92:7b:38:49:18:b9:de:96:
5a:a3:d4:24:b3:3f:df:5b:a5:8b:c7:7f:38:ff:27:10:fa:6b:
9e:d7:53:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:33 2023 by rpki-client on console-fra.rpki-client.org