Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/9653f45ccc03b4f8856895d8134328952d5d7b25.roa
File: 9653f45ccc03b4f8856895d8134328952d5d7b25.roa (raw, json)
Hash identifier: rcGpH/3w769PUpRqjOVYwF605VUuCve9Omw42mtYP1I=
Subject key identifier: 38:94:04:D8:4E:DD:AF:0A:92:EC:06:70:3D:B4:46:C9:A2:14:F8:D8
Certificate issuer: /CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Certificate serial: 0509C8
Authority key identifier: 84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/9653f45ccc03b4f8856895d8134328952d5d7b25.roa
Signing time: Sun 15 May 2022 00:40:08 +0000
ROA not before: Sun 15 May 2022 03:00:00 +0000
ROA not after: Mon 15 May 2023 03:00:00 +0000
asID: 3970
IP address blocks: 201.219.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 330184 (0x509c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Validity
Not Before: May 15 03:00:00 2022 GMT
Not After : May 15 03:00:00 2023 GMT
Subject: CN=9653f45ccc03b4f8856895d8134328952d5d7b25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f8:af:ad:b3:20:53:ff:7a:96:cc:8f:0b:70:
e9:99:52:bf:f0:20:a2:57:a8:9b:97:40:bf:67:c8:
6a:8c:f2:8e:82:f8:a6:f5:ca:89:c6:3e:05:0e:60:
a1:4a:11:3b:4f:a3:16:24:3b:d8:e9:eb:fc:94:ee:
55:bc:9c:af:82:dc:6e:96:52:d9:b8:56:44:7a:40:
e5:51:56:cf:bd:9e:27:05:9d:18:61:ca:93:c3:9d:
01:65:6e:0e:f9:1d:d0:2c:f4:a2:b9:f1:1e:d3:88:
cc:d6:06:ed:ae:82:c3:1a:9e:46:90:bd:5c:6e:c7:
c2:b7:93:43:5e:12:3a:fc:2b:f6:e5:08:64:8e:c4:
e7:2b:00:d8:0c:f8:1f:67:d7:53:ed:41:bf:06:25:
89:f0:6f:31:0a:c4:09:af:4b:4e:5e:7d:27:5f:59:
f2:70:8b:2a:9f:8d:88:72:3e:a0:da:75:ff:b8:ed:
96:5a:6d:4e:ff:fc:df:17:17:74:90:58:81:c4:03:
0f:e5:c2:50:d3:6a:97:36:b5:84:10:20:fe:6e:3e:
8c:96:86:2f:6d:cf:35:c2:27:5b:13:63:32:14:fe:
b1:9b:bf:ec:3d:dc:ac:80:83:a6:33:51:cc:90:b6:
92:3c:b7:e6:03:12:05:d5:b4:9f:52:06:4e:fc:e0:
41:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:94:04:D8:4E:DD:AF:0A:92:EC:06:70:3D:B4:46:C9:A2:14:F8:D8
X509v3 Authority Key Identifier:
keyid:84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/9653f45ccc03b4f8856895d8134328952d5d7b25.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.219.253.0/24
Signature Algorithm: sha256WithRSAEncryption
68:53:f1:cf:4b:3a:e8:7e:92:59:90:1e:2a:ab:30:49:e5:2d:
9e:d1:b0:30:c2:8e:71:ea:9e:5b:54:f0:f7:25:d9:14:bc:d3:
d8:be:17:a4:26:90:10:4d:34:0d:38:0f:26:45:ba:01:24:49:
28:88:8f:c6:85:d9:07:f7:c3:62:36:2e:b8:06:0b:31:22:89:
30:56:ff:f5:d6:95:8a:38:d7:49:e2:ac:b9:93:ee:7c:1e:37:
3f:34:bc:38:84:b4:d8:f1:03:8a:43:ea:78:62:ed:39:17:a4:
52:ed:8a:45:27:e8:27:f5:22:59:0f:f5:78:e3:54:9d:e5:34:
cf:fc:3b:49:60:53:4b:14:a5:2a:3a:83:1f:56:25:bc:d2:85:
48:60:73:c7:13:40:02:4c:5c:8f:1f:45:f7:40:7d:a3:72:6a:
d5:c1:05:6a:19:f5:0f:ea:da:2e:02:06:e5:2a:ab:b7:ab:0b:
67:41:b5:20:fe:f0:8b:33:09:17:25:64:3e:1a:dc:a2:b1:9f:
d6:8a:d3:6f:b2:58:c1:51:9e:5d:48:2d:2d:b9:ff:74:25:35:
bd:7c:da:72:63:05:86:4c:77:03:30:fc:59:ea:19:bb:fa:51:
35:5f:cf:0c:90:17:b7:74:e7:1a:d3:06:5b:69:cd:77:65:5b:
22:58:f2:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:33 2023 by rpki-client on console-fra.rpki-client.org