Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/43580740ab2d7bcff944f664ef2ecbe826baa029.roa
File: 43580740ab2d7bcff944f664ef2ecbe826baa029.roa (raw, json)
Hash identifier: 45F3k0kwV+Xpusjw92cBUMzS3W9Gdv3lSuBC32wCieY=
Subject key identifier: 5D:14:C2:54:61:F3:06:29:FD:53:CF:6F:9A:90:09:5B:60:F3:B5:6C
Certificate issuer: /CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Certificate serial: 0B4BD3
Authority key identifier: 84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/43580740ab2d7bcff944f664ef2ecbe826baa029.roa
Signing time: Mon 26 Sep 2022 05:17:08 +0000
ROA not before: Mon 26 Sep 2022 03:00:00 +0000
ROA not after: Tue 26 Sep 2023 03:00:00 +0000
asID: 3970
IP address blocks: 201.219.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 740307 (0xb4bd3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Validity
Not Before: Sep 26 03:00:00 2022 GMT
Not After : Sep 26 03:00:00 2023 GMT
Subject: CN=43580740ab2d7bcff944f664ef2ecbe826baa029
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:15:9b:86:ff:e7:10:7f:5e:48:09:35:64:71:
99:69:af:2e:01:6d:ab:a6:9c:20:42:61:dc:67:5d:
33:e4:a7:94:2c:46:56:45:dd:1e:df:89:10:53:8a:
d1:45:27:e2:32:9d:ce:14:69:7b:40:0d:c7:74:69:
2d:d3:fe:83:72:2f:26:07:db:7c:a0:65:20:2f:cc:
f9:68:d2:64:74:17:21:bf:72:3f:4a:c6:af:c1:79:
42:3a:fd:47:97:ff:38:28:e5:57:53:96:71:ad:c4:
fa:d2:95:cf:4a:8f:81:f8:e3:05:6f:7c:ca:17:03:
04:a1:7c:84:0b:00:e8:f7:8d:fc:98:ca:d5:27:bb:
1f:dd:5e:7e:3d:00:ed:e2:c3:66:84:e4:1e:c8:dc:
5e:b2:2d:cc:5c:ce:fe:1b:61:46:89:8d:91:75:ee:
12:1a:88:c4:ac:39:5f:7a:a2:de:89:4f:8d:7a:27:
98:69:31:b2:4b:44:02:66:31:6b:5d:d6:87:3a:6e:
2c:67:f6:e9:8e:b8:71:b5:29:e0:d0:2f:4a:c7:22:
30:f5:fe:6a:62:a7:ea:d4:ae:d1:14:94:49:a3:86:
ec:d1:fd:fe:6b:65:07:78:88:ec:69:c2:e2:3b:b1:
f0:cd:57:f4:d0:1f:b3:b9:a9:10:f8:21:80:52:6e:
67:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:14:C2:54:61:F3:06:29:FD:53:CF:6F:9A:90:09:5B:60:F3:B5:6C
X509v3 Authority Key Identifier:
keyid:84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/43580740ab2d7bcff944f664ef2ecbe826baa029.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.219.253.0/24
Signature Algorithm: sha256WithRSAEncryption
14:a0:1e:3d:98:84:49:d8:a3:13:a7:25:c5:19:87:09:1f:9c:
24:87:ec:6b:92:b3:a4:0c:6c:cd:ba:20:3d:cc:bf:74:99:40:
cb:17:41:7c:20:f0:33:85:61:70:26:72:91:8f:ba:b7:8a:e8:
f9:e8:bb:45:40:a4:d8:6f:eb:5f:9c:72:aa:0b:d4:c2:4f:4a:
b9:53:69:5a:ed:f1:37:ea:f0:8a:0a:2b:41:69:5c:58:de:c6:
f9:f9:70:2f:c6:1f:de:d9:3c:c8:b3:83:18:e3:0e:d0:6f:fa:
56:d8:33:2b:59:e0:09:5b:ea:ff:1a:f5:1b:d6:e9:a9:19:15:
ff:31:bc:bd:9e:e8:1d:1d:fb:e1:36:32:a4:74:f4:6a:96:c7:
c1:4f:2b:37:18:cc:96:4e:86:40:01:64:fd:7b:94:d4:fd:7f:
9c:fd:6a:82:83:77:59:6b:bb:37:be:1a:56:cf:eb:1a:f2:2a:
8a:13:04:df:ed:01:4d:ed:b7:79:73:99:5c:f2:e9:7d:c1:96:
ec:f8:e6:8d:77:a6:e0:be:96:de:f9:38:69:9e:a9:64:38:7b:
db:ce:42:7b:82:8f:84:31:91:88:61:54:5b:d3:a1:13:45:de:
a7:2c:f8:24:41:93:b4:d6:d4:b1:91:ed:b2:e2:23:69:74:e1:
74:ac:01:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:47 2023 by rpki-client on console-ams.rpki-client.org