Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/9a8b03c78a7771c68e0a72a4c3d45904148e6d00.roa
File: 9a8b03c78a7771c68e0a72a4c3d45904148e6d00.roa (raw, json)
Hash identifier: Nc3DkQeKEkIwt1Z39GBXmOmjU+p+HLBVikrKKRQVb/s=
Subject key identifier: 68:A6:4B:2A:D5:2B:36:78:D0:2B:A3:CE:05:29:C8:24:7A:65:CE:56
Certificate issuer: /CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Certificate serial: 01FCF1
Authority key identifier: 84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/9a8b03c78a7771c68e0a72a4c3d45904148e6d00.roa
Signing time: Sat 05 Mar 2022 03:27:20 +0000
ROA not before: Sat 05 Mar 2022 03:00:00 +0000
ROA not after: Sun 05 Mar 2023 03:00:00 +0000
asID: 3970
IP address blocks: 201.219.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 130289 (0x1fcf1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Validity
Not Before: Mar 5 03:00:00 2022 GMT
Not After : Mar 5 03:00:00 2023 GMT
Subject: CN=9a8b03c78a7771c68e0a72a4c3d45904148e6d00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:39:37:cf:6d:cb:fd:07:3c:22:d7:82:f9:15:
c4:41:75:63:34:96:5f:f9:4c:65:ea:4a:28:ee:b5:
cc:42:21:62:85:1b:b5:08:51:58:8e:f8:b4:52:b8:
0c:5f:a6:30:f7:eb:74:cc:68:35:46:a8:c7:ad:6a:
7b:f9:10:5b:fe:95:d6:50:57:7c:a3:c9:2f:5a:7a:
b6:ff:71:27:5e:4c:d9:4d:7b:d7:38:d8:a7:e1:cb:
51:04:14:c3:18:21:fa:a3:fb:76:0c:1d:e3:3f:be:
de:60:7b:06:f2:38:72:72:e4:77:ab:cb:92:88:ee:
21:a0:a4:17:88:14:d8:a6:a3:ee:7f:c5:00:5f:94:
46:2b:36:76:cb:61:db:4e:0a:84:66:78:a6:70:14:
a5:34:66:73:f6:3a:3b:30:b2:60:4a:a7:8a:8a:ab:
e6:f4:5f:ce:70:00:01:49:69:72:f6:b0:36:47:9c:
ed:36:e6:57:ed:f8:11:d0:51:9c:e7:b7:3b:9b:95:
07:c1:63:5e:3f:e4:3e:77:a7:a6:9b:f9:5f:a8:2b:
d4:11:de:91:c2:cc:6d:0d:a5:d8:96:fc:b9:db:c2:
5c:49:9e:0f:6f:de:71:1f:a3:a7:91:75:83:cc:0e:
93:15:76:f2:95:43:17:8c:ab:18:a7:f1:b5:23:3f:
97:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:A6:4B:2A:D5:2B:36:78:D0:2B:A3:CE:05:29:C8:24:7A:65:CE:56
X509v3 Authority Key Identifier:
keyid:84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/9a8b03c78a7771c68e0a72a4c3d45904148e6d00.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.219.253.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:32:ce:dd:ac:13:a7:32:c2:cf:65:3e:05:94:30:60:05:c6:
30:c3:ee:2d:e2:0f:3b:36:0d:e5:92:df:42:f2:0b:bf:b9:ac:
a9:8d:2c:d7:70:d6:be:28:ba:bb:5f:47:64:52:8e:0f:ab:27:
ce:ab:db:26:da:22:3b:ec:4d:b6:f8:b4:13:f0:f7:ac:b4:70:
de:87:43:6f:16:79:72:d4:61:72:5c:33:e7:82:68:ed:05:4b:
bc:63:2b:e1:45:c9:3e:3a:e3:f4:16:29:b9:c2:cc:2a:9c:3a:
a8:34:25:80:5e:c2:61:14:e1:18:49:6d:fc:ee:b4:23:52:e8:
90:ee:c9:e3:97:d9:a5:72:51:3e:e2:dd:f4:db:bb:f4:a4:f0:
9b:eb:8d:64:d1:04:cf:77:1d:89:0b:53:25:8f:e9:47:7b:06:
18:5c:e4:a4:82:2c:5e:17:49:19:d6:33:a6:ea:a6:99:25:a7:
0d:a1:30:ca:fe:d5:91:8f:c1:d8:fe:ea:61:eb:f0:6e:0a:1e:
e3:ec:91:59:f2:2b:9c:67:8d:86:3f:a5:62:8d:85:e1:81:e1:
6b:65:24:d5:e9:8a:d4:77:5d:ac:36:41:51:cd:7d:ba:05:66:
ae:be:92:5a:c2:d0:0f:be:01:a1:89:0d:c0:93:cf:a5:57:7f:
a9:98:ca:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:17 2024 by rpki-client on console-ams.rpki-client.org