Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/6a7b9105da123452f21d912764e99f0828d85885.roa
File: 6a7b9105da123452f21d912764e99f0828d85885.roa (raw, json)
Hash identifier: KnZqyt2a8FAjcwVTbgejRw9dxfJn4opWkRBDIUp1EBU=
Subject key identifier: A9:BB:A6:87:E4:70:64:ED:0A:34:AA:9E:88:3B:C0:BA:2B:2E:B5:8A
Certificate issuer: /CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Certificate serial: 07CF64
Authority key identifier: 84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/6a7b9105da123452f21d912764e99f0828d85885.roa
Signing time: Tue 12 Jul 2022 00:53:24 +0000
ROA not before: Tue 12 Jul 2022 03:00:00 +0000
ROA not after: Wed 12 Jul 2023 03:00:00 +0000
asID: 3970
IP address blocks: 201.219.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 511844 (0x7cf64)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Validity
Not Before: Jul 12 03:00:00 2022 GMT
Not After : Jul 12 03:00:00 2023 GMT
Subject: CN=6a7b9105da123452f21d912764e99f0828d85885
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:7b:95:b4:88:c2:14:e8:57:c3:39:ec:32:3a:
a4:24:98:6c:07:0d:8d:31:d0:c4:41:22:70:ad:45:
50:3b:ba:2d:8e:2f:c6:ef:f3:8d:19:03:83:d7:5d:
83:8e:cd:c7:de:8d:1c:73:83:d1:a3:8f:12:f4:cd:
54:87:45:a6:81:c1:4a:cf:e2:0c:14:06:ab:3d:46:
0c:bc:91:30:4a:81:77:d5:aa:72:be:7d:19:c6:96:
10:09:08:bd:b4:19:e0:b4:d5:ab:a2:3f:eb:c2:9e:
17:c4:f3:36:86:51:02:1a:a0:57:33:39:7e:9d:e7:
4b:31:32:ff:9f:67:8a:8a:f1:c8:e1:51:a9:88:d0:
fc:63:fc:bb:f8:23:ce:41:d7:43:9d:b4:41:51:48:
0f:e4:55:a1:41:89:f1:75:cf:bb:14:12:d1:fd:24:
61:ca:62:7d:bb:2e:e6:a1:bc:8a:0f:c9:d8:4d:3f:
72:a3:6a:65:9c:d0:c8:af:2a:06:01:8d:c1:92:a4:
f4:64:bd:7c:c0:99:04:bb:31:98:ca:2a:fb:e7:12:
84:22:5b:3a:16:3a:ef:35:ad:b9:88:a1:69:55:64:
ce:23:c2:1e:32:85:4a:9b:6a:09:cc:d6:ec:90:2b:
52:45:2a:f2:34:d1:ab:f4:05:57:48:5d:5e:bd:3d:
bd:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:BB:A6:87:E4:70:64:ED:0A:34:AA:9E:88:3B:C0:BA:2B:2E:B5:8A
X509v3 Authority Key Identifier:
keyid:84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/6a7b9105da123452f21d912764e99f0828d85885.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.219.253.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:a3:ad:c8:a0:be:88:f0:62:41:77:2c:3e:b1:5b:9d:2e:ba:
b9:e2:ff:a9:b9:bb:41:73:aa:a0:d3:2d:e5:ef:99:03:ad:46:
3e:2b:d6:02:af:92:ad:4f:43:b3:91:0f:b0:b4:97:93:8f:a5:
84:91:a6:42:d4:57:d3:00:08:b7:5b:ea:d8:05:d3:af:c5:46:
2f:c9:04:80:04:67:f7:4d:8a:4c:8c:70:34:22:4a:d5:9b:27:
03:f0:ec:f0:2b:c5:41:3e:c5:cf:22:2d:d8:fd:26:c8:9d:c4:
28:73:18:d8:6d:8e:e9:49:e7:05:ce:35:af:6c:47:d4:f0:3a:
3c:90:1d:c4:ab:f3:ea:c2:10:a9:30:4e:3c:7a:40:a5:e8:db:
84:93:0e:89:7f:05:53:b0:82:de:33:bc:cc:86:7f:3b:79:96:
df:53:5c:f4:f8:90:a0:ca:c8:4d:bd:be:b4:d6:84:04:c1:55:
a9:9f:a1:f3:73:de:5b:ab:ba:22:6c:16:ae:ab:a5:7e:59:af:
8d:7d:b6:5c:7d:a2:6d:7f:17:fb:80:7a:c6:7a:68:e7:ad:58:
85:da:2a:84:4d:ca:72:60:d7:5e:63:85:0b:b3:46:88:0a:07:
aa:25:df:6e:f7:c8:50:52:20:9e:ab:67:fc:fe:3c:11:1d:67:
ad:50:c5:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:33 2023 by rpki-client on console-fra.rpki-client.org