Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/6878f105e31f53df7fd5968afe648a5eff57aaea.roa
File: 6878f105e31f53df7fd5968afe648a5eff57aaea.roa (raw, json)
Hash identifier: 3t5bhbenHkVEASVD82suKYMAa1ehFrXurvJzPfabTu8=
Subject key identifier: 06:0B:1A:27:89:CF:E4:C6:4C:3C:5E:8E:C8:1B:E3:89:E9:D4:AA:F4
Certificate issuer: /CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Certificate serial: 042654
Authority key identifier: 84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/6878f105e31f53df7fd5968afe648a5eff57aaea.roa
Signing time: Sat 23 Apr 2022 11:11:52 +0000
ROA not before: Sat 23 Apr 2022 03:00:00 +0000
ROA not after: Sun 23 Apr 2023 03:00:00 +0000
asID: 3970
IP address blocks: 201.219.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 271956 (0x42654)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Validity
Not Before: Apr 23 03:00:00 2022 GMT
Not After : Apr 23 03:00:00 2023 GMT
Subject: CN=6878f105e31f53df7fd5968afe648a5eff57aaea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:e2:ce:89:7c:76:5a:d6:b6:b5:85:cc:f4:54:
d9:12:02:9b:95:76:bd:bd:bb:aa:06:20:c1:b2:f7:
aa:67:e7:2c:42:0a:ca:e5:d9:16:b3:85:94:1d:db:
e4:0b:59:d5:b2:86:7e:42:74:78:a1:bc:e9:11:9c:
b8:f5:52:ee:fd:cf:21:d4:68:9e:f7:33:f0:4a:64:
4a:45:c0:3e:6f:48:ad:b1:7b:ca:4b:0f:e0:1e:0e:
8a:80:97:cc:f5:69:c9:62:dd:fb:87:29:c9:ec:7c:
75:f1:f9:c0:87:1a:c7:41:b0:ec:b4:d0:4d:3f:89:
97:13:b2:24:45:d6:54:06:c7:92:50:fb:55:be:a4:
2f:02:87:23:bc:0d:4e:af:e5:b9:67:94:8d:b5:04:
a8:54:69:0d:1e:ab:7d:bf:e4:23:86:a8:28:18:12:
79:7c:1e:39:09:22:e9:59:7d:e3:bb:5a:35:cd:af:
6d:d5:9b:31:ce:bf:a9:64:a7:e9:45:ba:8a:1a:3e:
3f:43:15:16:46:2d:da:2f:dc:9c:b0:37:a6:80:fd:
25:84:f6:7b:a0:8e:2f:05:fd:a0:d1:f7:58:87:41:
47:d4:7c:0c:3d:74:72:aa:3b:6c:81:bb:80:ca:5c:
d2:98:a0:27:06:1b:78:c3:01:24:66:64:2e:31:c7:
f5:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:0B:1A:27:89:CF:E4:C6:4C:3C:5E:8E:C8:1B:E3:89:E9:D4:AA:F4
X509v3 Authority Key Identifier:
keyid:84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/6878f105e31f53df7fd5968afe648a5eff57aaea.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.219.253.0/24
Signature Algorithm: sha256WithRSAEncryption
44:03:ea:6a:16:aa:7f:bd:6f:c9:1d:fd:f5:35:61:3f:0e:cb:
12:11:f8:49:8d:39:ec:a0:28:29:65:fc:bf:1c:6d:b3:20:75:
1d:bf:cd:eb:f3:b8:8f:83:4e:de:3d:e9:7f:be:5c:22:18:24:
3c:c1:63:7d:e1:75:61:6d:cf:de:7c:97:bb:da:9f:c1:f5:4c:
be:0d:d6:e9:c4:10:b6:18:91:25:89:61:2f:23:1e:9d:c5:40:
53:25:09:92:66:72:1b:06:d6:09:67:07:86:69:3b:07:65:64:
e7:59:3a:69:1d:9c:b4:99:f9:bc:6f:10:7a:50:c3:84:a2:90:
74:28:88:4d:b3:97:27:7e:5d:b3:06:b7:c0:18:c5:14:1f:05:
3b:af:30:2a:49:58:15:86:fb:97:6f:cb:bf:14:bb:a1:52:0f:
8a:36:50:f6:9c:80:8e:19:bc:ce:a9:f2:83:bb:ac:23:87:b3:
8d:f6:97:48:f0:bb:59:07:29:69:04:0c:d5:eb:9e:09:b0:0e:
87:0e:e5:31:06:57:86:c5:75:99:04:06:38:e3:c3:42:ad:08:
e9:b9:1f:78:c0:6c:a4:74:5a:54:37:92:f5:4b:53:bd:0f:f9:
39:78:e2:30:de:1e:03:17:f8:05:82:35:0a:d1:92:13:57:2a:
77:c2:ee:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:17 2024 by rpki-client on console-ams.rpki-client.org