Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/870be46527a00d4de6a72c242741d11605be2078.roa
File: 870be46527a00d4de6a72c242741d11605be2078.roa (raw, json)
Hash identifier: KBgUBxv4oUvT9rUvWBgRy4YSfqSNZtkh6R6u9wv/fzM=
Subject key identifier: BE:29:CF:44:63:D7:2B:FB:6D:10:8C:9C:E6:38:EF:5D:40:F8:A3:1D
Certificate issuer: /CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Certificate serial: 0AB08D
Authority key identifier: 84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/870be46527a00d4de6a72c242741d11605be2078.roa
Signing time: Tue 13 Sep 2022 00:42:27 +0000
ROA not before: Tue 13 Sep 2022 03:00:00 +0000
ROA not after: Wed 13 Sep 2023 03:00:00 +0000
asID: 3970
IP address blocks: 201.219.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 700557 (0xab08d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Validity
Not Before: Sep 13 03:00:00 2022 GMT
Not After : Sep 13 03:00:00 2023 GMT
Subject: CN=870be46527a00d4de6a72c242741d11605be2078
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b9:fb:8a:70:7a:f2:22:4f:52:0d:ce:7c:ed:
aa:7c:18:9c:66:20:c5:fc:84:ec:0b:de:e2:6e:f4:
fb:99:05:a9:18:10:f8:59:79:c7:bd:5f:bb:84:3b:
d1:e6:79:63:69:3c:46:fe:60:c1:45:f7:84:8a:6a:
26:7b:20:e2:50:59:d6:3c:ee:41:f9:ef:07:b8:32:
45:06:55:21:27:6a:db:7d:1d:ff:8b:da:f3:30:24:
df:d7:dc:2a:cd:21:90:e7:39:99:76:91:19:f4:80:
a0:35:cf:cb:5d:2d:7a:d3:f0:7c:3c:ad:a5:05:d4:
0c:52:77:73:67:21:d9:26:eb:61:28:ef:c4:a5:31:
28:ef:78:cc:f1:f0:94:2c:6a:48:03:54:a2:5a:4c:
56:1e:22:39:dd:a4:d9:eb:4d:f3:73:3b:dd:70:5c:
bb:35:dd:54:62:8f:74:60:9e:36:3a:e4:ed:6b:5c:
46:1e:19:ec:8f:2d:3b:25:7d:74:56:68:76:16:a2:
cb:c6:cb:fe:df:26:09:9e:1c:ed:34:58:fd:7e:e9:
2a:a4:af:a6:64:66:15:03:55:06:e9:be:aa:d3:c5:
cb:22:c8:09:8c:7a:f4:6f:84:95:02:d4:e2:2e:80:
7c:2c:37:dd:33:d6:53:ad:c1:87:f6:04:4c:c0:47:
bb:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:29:CF:44:63:D7:2B:FB:6D:10:8C:9C:E6:38:EF:5D:40:F8:A3:1D
X509v3 Authority Key Identifier:
keyid:84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/870be46527a00d4de6a72c242741d11605be2078.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.219.253.0/24
Signature Algorithm: sha256WithRSAEncryption
49:dd:97:b7:e6:24:1d:56:a1:f4:8c:62:e6:2a:0d:fc:72:d5:
62:88:f3:e4:4c:77:eb:07:4c:c6:1d:22:e9:57:19:43:13:8a:
82:c0:ed:2e:78:b4:46:b3:41:b0:a5:df:a6:53:e5:80:be:2a:
d0:ec:85:e6:f1:84:5c:9e:f3:fc:af:22:16:2f:9d:bb:2d:03:
02:2d:4f:12:e3:00:56:37:6a:2e:9c:cf:e3:d6:45:18:f5:1e:
d9:3c:de:79:dd:2b:ff:83:a9:36:ae:ab:d0:c5:68:08:95:27:
4d:52:32:17:02:d7:a5:87:bb:89:0b:b3:b1:4e:54:48:54:30:
0d:e2:56:0e:30:05:ca:59:0d:c6:ed:c6:96:13:f4:3f:7c:ed:
94:f0:fb:27:31:c3:09:3a:19:73:db:57:cd:43:0a:7b:5e:31:
f2:f6:31:11:57:3a:a6:1f:1b:56:91:ee:e0:97:3f:c4:2a:87:
7a:ee:1b:da:93:10:63:10:92:8f:e6:6e:59:f3:f7:f3:0a:bc:
66:5a:e7:f8:b6:71:d0:5a:7c:ab:c6:fe:c4:f3:09:60:71:e4:
cc:74:78:75:d2:95:15:6f:e3:53:1f:9d:c1:01:c9:85:8f:a6:
e3:1e:40:e4:56:2a:21:88:1b:61:e4:be:c0:ee:61:90:fc:24:
a8:8a:1e:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:17 2024 by rpki-client on console-ams.rpki-client.org