Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/5aaa656982d5ddd2fb450af97ef88d4216f610fa.roa
File: 5aaa656982d5ddd2fb450af97ef88d4216f610fa.roa (raw, json)
Hash identifier: Uakjoc5TST937Lov5h22sN+z6OlY+kj2kbeJP7W2U/E=
Subject key identifier: 97:88:F8:34:21:1F:75:15:D3:D6:2A:CB:06:28:AD:F2:39:B1:E8:2F
Certificate issuer: /CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Certificate serial: 035B9E
Authority key identifier: 84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/5aaa656982d5ddd2fb450af97ef88d4216f610fa.roa
Signing time: Mon 04 Apr 2022 02:31:52 +0000
ROA not before: Mon 04 Apr 2022 03:00:00 +0000
ROA not after: Tue 04 Apr 2023 03:00:00 +0000
asID: 3970
IP address blocks: 201.219.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 220062 (0x35b9e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Validity
Not Before: Apr 4 03:00:00 2022 GMT
Not After : Apr 4 03:00:00 2023 GMT
Subject: CN=5aaa656982d5ddd2fb450af97ef88d4216f610fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:a3:c2:b2:e4:94:aa:1c:33:d0:6f:e0:7c:99:
3d:0a:65:0d:c9:52:6d:0a:ca:10:c3:8e:12:9a:09:
1f:92:e6:32:22:e5:95:67:f7:ea:ec:50:fb:93:a1:
49:a5:36:af:e8:07:4b:0b:f7:7a:bb:73:e1:61:a7:
4e:87:44:17:74:fb:08:4a:12:43:7a:20:4b:0f:c2:
ea:16:4f:2e:d0:64:ef:86:95:c3:96:09:7c:49:da:
64:6c:bb:d4:b6:ab:d4:d7:06:4a:4f:5d:85:41:62:
9f:d9:b0:fa:a1:ad:47:fc:be:87:29:76:40:7e:9a:
d3:de:89:3c:02:07:e4:67:53:39:23:b5:98:2b:cc:
ef:52:44:0c:55:ca:aa:8e:9e:e7:fb:49:af:ab:c9:
db:9c:8a:52:0f:7a:9f:50:f4:e3:fc:fc:16:ed:68:
81:da:1a:69:86:09:a0:63:1a:11:8a:3a:4d:b7:52:
36:d7:61:26:db:b1:12:7f:4d:58:61:c7:2b:91:2d:
5d:98:68:21:f6:41:a4:be:e0:cc:6f:85:86:70:a3:
d2:64:ca:35:83:de:46:5e:fb:7e:29:36:2a:61:ba:
47:a7:47:b9:af:67:ac:41:4b:2a:8a:f5:36:d2:03:
69:37:b8:6a:0d:30:c6:d4:8e:18:f2:df:0c:21:a7:
0c:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:88:F8:34:21:1F:75:15:D3:D6:2A:CB:06:28:AD:F2:39:B1:E8:2F
X509v3 Authority Key Identifier:
keyid:84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/5aaa656982d5ddd2fb450af97ef88d4216f610fa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.219.253.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:22:16:65:8e:bf:e5:30:af:11:b7:f2:a9:01:91:aa:61:d8:
d7:ff:74:0f:dc:bd:9f:eb:a1:3e:7d:f2:f7:7d:9f:5f:1a:02:
51:0a:65:e2:4b:4f:42:8b:8b:99:b3:0b:64:8e:ce:be:cf:5f:
71:91:ca:3b:65:96:11:fc:11:3f:de:19:0b:9e:b6:2d:b3:f2:
c1:73:ed:f9:45:8a:01:57:6b:da:ad:3c:36:ff:05:2a:76:2a:
0b:67:34:1a:54:b4:3b:e1:b4:ea:ce:cc:58:f4:8b:e2:51:f0:
97:a1:a4:4e:39:88:a6:fe:05:1a:fb:1e:b1:f1:f2:d8:36:cd:
c3:c0:69:be:6b:4b:3b:1c:c9:3d:2f:a6:0e:90:07:be:4e:0b:
77:06:76:1c:4c:8e:7c:4d:6a:d9:66:6b:d6:36:2f:2b:07:53:
ae:e1:27:73:e7:f0:f3:e8:e6:a0:45:2a:65:0f:17:1b:cd:d9:
56:02:d4:61:89:5e:df:25:30:5b:4c:9d:b8:67:de:75:6a:cc:
f5:4e:73:66:37:8a:f7:39:f5:5e:27:ac:00:ff:a6:57:b5:53:
79:5d:84:da:c2:0f:f4:79:a0:a0:d9:71:3e:97:c1:99:46:59:
d2:7f:e6:af:76:35:22:2a:a1:bc:64:b4:bb:a1:f6:ed:5f:1d:
db:38:24:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:47 2023 by rpki-client on console-ams.rpki-client.org