Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/581a4afc2b7ee7af8836d2925416013cf26e2306.roa
File: 581a4afc2b7ee7af8836d2925416013cf26e2306.roa (raw, json)
Hash identifier: dWsZTMbPCtMcK4vomOERUOTbzvmVZqNOBJblEO5Dvn0=
Subject key identifier: 34:FB:BA:86:FE:30:68:1C:4B:4D:63:93:A6:D6:62:6C:CF:E5:59:76
Certificate issuer: /CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Certificate serial: 080018
Authority key identifier: 84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/581a4afc2b7ee7af8836d2925416013cf26e2306.roa
Signing time: Sat 16 Jul 2022 04:00:10 +0000
ROA not before: Sat 16 Jul 2022 03:00:00 +0000
ROA not after: Sun 16 Jul 2023 03:00:00 +0000
asID: 3970
IP address blocks: 201.219.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 524312 (0x80018)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Validity
Not Before: Jul 16 03:00:00 2022 GMT
Not After : Jul 16 03:00:00 2023 GMT
Subject: CN=581a4afc2b7ee7af8836d2925416013cf26e2306
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:d1:74:ba:ad:64:19:8e:58:1a:89:64:17:08:
17:c5:59:6a:81:83:66:b5:1e:06:11:3b:a3:7e:8a:
12:7a:5b:fe:f7:72:bb:99:51:39:71:3c:1b:74:e5:
48:c8:db:39:d7:cc:a9:78:eb:d5:15:1a:15:87:9e:
ff:0e:4c:db:5a:32:f2:b7:a3:79:c4:3b:0d:03:b4:
d3:6e:bf:23:f2:b7:94:6e:d7:9f:5b:bc:bf:e4:66:
fa:f0:06:a7:62:a5:45:33:ef:da:38:01:1f:2a:f6:
98:2c:c7:8b:e3:e3:34:21:c9:09:e8:ab:ed:1a:4f:
f1:9e:04:1a:7f:77:5d:d2:91:a3:fd:0f:ed:19:00:
a6:3a:82:bd:0c:59:7d:52:29:02:18:5e:83:09:45:
9d:39:70:05:73:b9:cf:1f:7f:1c:b9:47:56:5a:aa:
ff:37:b2:eb:0e:f7:9e:19:cb:bc:84:cb:96:41:8d:
ba:89:8b:81:b3:79:71:0d:8c:0f:3a:96:41:44:0c:
f3:1b:1e:79:61:9a:02:23:61:69:62:22:31:0c:ce:
e6:65:56:a7:e2:e6:d5:cb:7c:23:0f:6b:93:12:77:
3e:bb:48:93:af:1a:b3:3d:ce:a7:c3:d9:6c:27:83:
ff:9e:ab:1a:da:59:8b:e6:b5:cf:90:e2:19:e8:68:
95:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:FB:BA:86:FE:30:68:1C:4B:4D:63:93:A6:D6:62:6C:CF:E5:59:76
X509v3 Authority Key Identifier:
keyid:84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/581a4afc2b7ee7af8836d2925416013cf26e2306.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.219.253.0/24
Signature Algorithm: sha256WithRSAEncryption
01:1d:07:ad:dc:36:b2:25:58:ee:b1:53:d3:39:37:5c:5c:7b:
05:2d:a0:e6:4f:8a:f7:cf:6e:37:f7:55:3c:46:04:f1:d6:a2:
31:03:31:03:71:67:99:af:30:86:09:29:d2:95:e5:02:91:9e:
03:e0:29:1b:a9:5b:ef:0d:cb:1c:39:ef:e4:73:95:0e:58:10:
83:a1:4f:f9:a6:6a:f3:e1:f2:f7:a9:75:85:01:ab:fa:b5:1d:
43:92:39:d6:91:b8:15:c1:b9:94:83:f7:25:db:ce:9c:7a:93:
df:1c:b0:6f:0d:da:6a:e3:86:64:8b:e9:76:fa:92:eb:b0:18:
df:7e:8b:cf:bb:5b:e6:86:6b:39:57:3a:cf:f4:0a:a0:6f:07:
1b:ee:c2:3e:17:78:a5:d5:1f:5d:79:fb:34:28:35:f7:fb:86:
78:9c:9c:f4:f0:b1:5e:c4:3a:4a:ad:48:db:3f:4d:7d:bd:fc:
de:ce:6c:c7:bd:3b:2a:6a:10:47:6c:17:66:d9:94:79:64:d1:
47:09:a7:89:79:1d:44:09:0e:98:d9:ee:93:24:ed:0c:bb:b5:
03:85:77:65:e5:15:3e:9d:7e:71:b0:76:5f:0a:bf:04:45:5a:
f0:0a:8d:a7:c9:2e:e2:69:df:54:20:a7:d9:10:29:48:d3:84:
d7:fd:0a:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:17 2024 by rpki-client on console-ams.rpki-client.org