Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/2e944ea407abcd8f30fb312765ed0a32e5b10bbf.roa
File: 2e944ea407abcd8f30fb312765ed0a32e5b10bbf.roa (raw, json)
Hash identifier: ljeFDpq6rHp3GbUqrPNkvEhBZ17NgYa22rETWyMmP0M=
Subject key identifier: 02:FA:15:2E:30:57:5A:66:22:58:6B:51:59:FE:AF:6B:8F:A8:24:19
Certificate issuer: /CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Certificate serial: 06CFD7
Authority key identifier: 84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/2e944ea407abcd8f30fb312765ed0a32e5b10bbf.roa
Signing time: Mon 20 Jun 2022 01:07:47 +0000
ROA not before: Mon 20 Jun 2022 03:00:00 +0000
ROA not after: Tue 20 Jun 2023 03:00:00 +0000
asID: 3970
IP address blocks: 201.219.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 446423 (0x6cfd7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Validity
Not Before: Jun 20 03:00:00 2022 GMT
Not After : Jun 20 03:00:00 2023 GMT
Subject: CN=2e944ea407abcd8f30fb312765ed0a32e5b10bbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:28:57:d0:2e:e6:50:be:bb:71:e7:83:7a:d4:
54:bb:5b:bb:b3:b8:0f:3d:c2:c8:72:7d:8e:ad:ea:
f9:55:12:38:1b:99:86:9e:f6:1f:4b:20:a6:fc:be:
bb:b6:10:56:f5:f1:d9:76:8f:ab:52:1b:74:17:d3:
3f:1f:d4:11:b0:20:23:62:da:69:10:5e:c8:dd:8b:
fd:ab:66:be:55:fe:e6:f8:f6:7b:a8:eb:69:06:9a:
8e:66:8d:63:ba:79:51:6e:07:2d:3e:37:ec:f6:a0:
82:01:46:ba:64:4a:4e:d8:f5:11:25:20:bf:20:8c:
5e:70:f0:ee:d3:d5:41:6c:e2:82:c0:97:58:f5:74:
59:37:9d:3c:8b:0a:73:7b:08:d3:dd:59:3d:f5:e0:
af:0a:2a:7a:da:f6:1d:c1:e0:67:b9:7d:31:27:16:
dd:47:63:f9:da:5f:0d:11:fc:9f:a0:e9:30:0a:ef:
79:1b:d9:cd:d2:c9:ce:93:f3:4a:a0:c7:a5:ad:67:
78:a4:8f:c6:6e:11:e7:a7:a3:c4:7a:cc:64:56:06:
0d:a6:78:10:75:1c:28:62:2c:2d:45:13:0f:6c:5e:
90:c8:21:59:eb:47:5d:34:6c:52:74:83:2e:74:af:
18:b0:8c:aa:a8:b1:47:bc:97:c8:81:cc:1e:12:80:
4f:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:FA:15:2E:30:57:5A:66:22:58:6B:51:59:FE:AF:6B:8F:A8:24:19
X509v3 Authority Key Identifier:
keyid:84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/2e944ea407abcd8f30fb312765ed0a32e5b10bbf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.219.253.0/24
Signature Algorithm: sha256WithRSAEncryption
15:cc:b9:9a:d5:57:cd:68:0a:5f:36:b8:01:09:85:5f:c8:be:
6a:41:3b:47:8a:2c:de:06:fd:be:eb:9a:39:c8:d0:72:d4:9e:
be:7a:87:07:2e:97:8e:46:6f:bf:ef:1b:46:66:0a:b3:c3:ae:
9d:46:49:e5:31:c3:85:1b:42:60:6e:dd:be:76:26:bb:22:e7:
ad:4d:7e:5f:1d:2e:38:ec:d8:19:27:6f:d3:52:ff:91:b2:c8:
52:98:b4:cf:71:e4:0b:ea:bc:17:19:70:b8:1b:b0:18:37:3e:
64:a1:4b:2a:47:29:bb:7f:70:9b:52:14:0a:54:f0:46:cb:7f:
e0:be:6f:b3:98:83:24:36:e4:bf:48:f4:1c:e7:27:46:bf:12:
54:ae:e0:bc:e9:49:07:67:de:52:46:51:32:ad:2b:c3:93:8f:
c8:6c:1b:ff:84:5c:d7:72:0d:7f:ab:95:bd:07:3a:f1:ed:03:
b8:3d:ab:b0:7f:40:22:98:f2:ee:6a:e5:ce:3b:ef:da:ff:e4:
a2:8d:fc:c9:37:b2:1f:a2:56:81:ee:9e:f5:93:2b:8b:a4:c7:
f4:a1:fc:7b:a5:26:dc:40:84:95:0a:d8:53:5f:cd:4c:ee:07:
97:0f:27:37:b8:2e:07:42:84:d2:a0:12:ae:e2:09:3b:b7:bc:
9e:e1:24:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:33 2023 by rpki-client on console-fra.rpki-client.org