Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/885e8567c0dda5cd830c6a319ca17988a0ee91ab.roa
File: 885e8567c0dda5cd830c6a319ca17988a0ee91ab.roa (raw, json)
Hash identifier: QGq94DGDx3692DZU5+gsIWcsil0JnwvjGOvIRGUdzJ8=
Subject key identifier: 79:AB:2D:02:CF:06:F1:06:8C:FD:47:85:66:EA:54:82:F9:A7:58:2E
Certificate issuer: /CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Certificate serial: 057892
Authority key identifier: 84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/885e8567c0dda5cd830c6a319ca17988a0ee91ab.roa
Signing time: Mon 23 May 2022 01:57:39 +0000
ROA not before: Mon 23 May 2022 03:00:00 +0000
ROA not after: Tue 23 May 2023 03:00:00 +0000
asID: 3970
IP address blocks: 201.219.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 358546 (0x57892)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Validity
Not Before: May 23 03:00:00 2022 GMT
Not After : May 23 03:00:00 2023 GMT
Subject: CN=885e8567c0dda5cd830c6a319ca17988a0ee91ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:1f:50:9b:8f:dc:58:e7:82:d5:82:98:00:cb:
f7:53:f7:e8:02:b6:22:9c:5d:b8:92:66:fc:7e:60:
a7:fb:7c:cd:5e:e2:84:77:1c:96:c5:35:27:e4:ef:
48:50:8b:87:4b:10:7b:d8:f4:5e:6c:f1:58:8c:d9:
dc:1f:14:a2:58:cf:b8:aa:a6:e1:19:65:b3:a8:bb:
fa:e5:1a:8d:11:58:17:f1:0d:fe:97:86:66:06:f6:
5f:81:6f:9d:fa:94:f4:1f:3e:02:c1:d4:d0:94:5f:
51:09:fb:c4:25:f9:14:aa:08:9c:c8:84:e8:70:a6:
4f:70:66:53:dd:fb:6f:5e:31:57:81:47:78:42:83:
24:cb:fb:aa:f2:e5:ba:04:8b:3e:59:51:a7:c9:91:
f6:1c:0c:73:ba:5a:c7:0b:67:cc:15:d0:83:03:e6:
73:5a:e1:db:ad:51:21:ad:ff:a7:39:ba:eb:de:33:
b1:a8:6e:6e:1a:8e:f7:1f:79:7f:19:0a:43:2d:25:
81:56:a2:be:8e:75:43:db:8f:8f:95:54:de:94:85:
34:03:6b:2b:40:91:c2:42:be:0a:75:60:ab:e1:c2:
84:01:da:17:92:e6:b4:7d:a3:4a:e9:7d:2e:fb:08:
3f:3f:c0:e5:40:d4:d8:0c:08:d7:97:ac:8e:3c:7d:
70:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:AB:2D:02:CF:06:F1:06:8C:FD:47:85:66:EA:54:82:F9:A7:58:2E
X509v3 Authority Key Identifier:
keyid:84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/885e8567c0dda5cd830c6a319ca17988a0ee91ab.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.219.253.0/24
Signature Algorithm: sha256WithRSAEncryption
52:f8:60:62:97:27:26:63:26:8c:f4:b6:75:70:2d:0a:40:4e:
ad:e9:53:a3:81:a9:4b:6e:1f:70:a0:22:83:9e:53:1e:21:1d:
a4:d3:d8:0c:9c:98:3d:cd:0e:18:21:52:e3:81:71:a8:91:da:
fe:e3:96:39:98:6d:60:f6:f5:af:64:8a:77:f0:2f:8b:8d:9d:
d6:a5:f3:9c:7a:cc:34:db:a6:95:06:71:f7:c3:6b:5b:a8:c2:
66:db:7a:e9:08:87:d1:ab:30:a2:b7:e5:3c:46:37:df:09:11:
75:9a:2f:1e:9d:8c:83:67:76:8b:31:45:74:5e:c9:a3:7f:96:
36:1a:9b:b7:76:54:d0:e1:73:bf:b7:7d:b5:cf:fe:7d:59:25:
d7:9a:39:2c:31:2b:7a:06:4f:24:1a:7d:0f:06:a4:af:b4:24:
f6:c1:cd:f2:dc:f6:26:fa:af:02:8e:76:c9:ef:f5:b0:f3:c8:
a7:ef:05:78:45:3a:a0:93:4c:93:97:44:85:0a:3e:41:4e:d1:
cb:6d:fd:28:fb:1e:d2:e2:48:27:0c:13:4c:f4:14:c1:a8:8c:
39:fa:c5:f2:ac:b0:20:37:51:86:8e:11:75:df:a6:ec:31:6c:
79:a3:51:c1:9d:d7:4e:00:4a:d8:f9:ec:bb:70:b2:85:fb:d7:
ac:05:c1:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:58 2024 by rpki-client on console-fra.rpki-client.org