Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/9fa2129a48d27ec629c14d12723aad464c4d0230.roa
File: 9fa2129a48d27ec629c14d12723aad464c4d0230.roa (raw, json)
Hash identifier: vu8bFKHm8tTEZ/2hY76oBW2cR+EoEnmaGkCeMH9noNo=
Subject key identifier: 82:85:43:D0:73:AB:95:96:CD:BD:42:3A:28:81:11:71:F1:DC:6D:93
Certificate issuer: /CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Certificate serial: 09B667
Authority key identifier: 84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/9fa2129a48d27ec629c14d12723aad464c4d0230.roa
Signing time: Fri 26 Aug 2022 05:01:36 +0000
ROA not before: Fri 26 Aug 2022 03:00:00 +0000
ROA not after: Sat 26 Aug 2023 03:00:00 +0000
asID: 3970
IP address blocks: 201.219.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 636519 (0x9b667)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Validity
Not Before: Aug 26 03:00:00 2022 GMT
Not After : Aug 26 03:00:00 2023 GMT
Subject: CN=9fa2129a48d27ec629c14d12723aad464c4d0230
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:63:71:19:0b:be:87:1a:89:37:2e:fa:76:ad:
ee:b9:e2:20:ca:16:be:0f:12:1a:14:2c:52:ae:97:
cb:4a:86:8b:1c:b6:41:a4:aa:9f:01:91:c3:c8:a0:
f9:9e:a3:cd:de:21:b8:5c:82:01:e2:ef:47:40:33:
26:1d:27:ce:b3:a7:8a:33:2f:41:72:3f:85:19:ba:
df:86:2d:6e:29:d4:2a:1c:5e:d2:cf:d3:a7:85:1b:
35:99:bf:07:75:05:d1:0d:93:34:2f:36:da:22:95:
ee:af:d2:55:ca:11:50:8f:17:5b:c0:25:25:00:75:
1c:49:7c:42:92:19:ed:e9:98:48:32:5f:cd:6a:a1:
a4:17:3c:b0:34:13:b8:e5:90:9a:a6:c1:71:a9:06:
a9:c0:bb:b9:30:f0:bc:3c:5f:fe:7b:dc:27:5a:60:
ab:ec:6e:57:a1:fa:e7:ab:17:1e:ea:6a:69:6f:d6:
c0:5c:ee:31:66:20:76:f8:52:8f:98:31:a1:b7:a8:
72:6d:01:d3:be:14:28:e8:52:7f:37:bd:24:a4:de:
90:f8:27:4a:ac:e0:76:29:06:c1:c5:f5:d3:c5:a1:
31:e3:3b:f3:ec:c7:7e:0c:94:e3:10:7a:7c:ff:13:
03:96:2c:74:89:69:6b:9b:f5:8b:11:23:76:22:58:
52:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:85:43:D0:73:AB:95:96:CD:BD:42:3A:28:81:11:71:F1:DC:6D:93
X509v3 Authority Key Identifier:
keyid:84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/9fa2129a48d27ec629c14d12723aad464c4d0230.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.219.253.0/24
Signature Algorithm: sha256WithRSAEncryption
78:6d:43:87:e1:1e:13:ea:3e:02:b3:1a:48:49:ac:64:a1:25:
05:3c:3f:d4:c8:77:99:14:81:8e:02:91:5f:64:18:93:7b:52:
71:8f:e9:ad:fb:47:e8:15:43:fc:44:bb:a5:42:64:36:ee:1d:
a3:b4:aa:e7:ed:09:93:da:12:e2:4c:41:fd:32:f2:3a:83:26:
8f:92:a2:36:42:09:bf:f7:ae:80:a7:20:f2:0a:41:6b:42:ab:
4b:08:35:ca:a9:8d:75:33:5d:07:09:0a:a7:0f:94:a8:0d:7c:
b8:07:2d:c3:d8:54:50:48:84:3a:f7:6c:0a:b3:7a:0f:ed:af:
e5:ad:0d:fb:ec:5a:e5:34:62:ad:37:5d:f9:5d:23:fa:a7:2c:
3c:58:42:64:1a:68:f5:85:80:af:82:d5:95:2c:ef:aa:45:08:
be:f8:db:1f:d2:f2:18:cc:c3:95:2a:7e:82:74:77:3d:de:44:
d0:4a:f7:8c:74:67:20:12:39:17:46:e4:57:56:16:3c:1a:bf:
5c:76:4c:5c:39:db:36:b5:e2:35:54:83:ce:10:7a:2d:82:e9:
6a:49:99:e4:0e:4f:08:84:ec:42:39:3f:66:2f:f3:8e:3d:db:
48:1d:31:41:22:b3:b0:55:ad:c1:bc:93:a9:96:2a:c6:f1:e4:
d0:4f:ee:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:33 2023 by rpki-client on console-fra.rpki-client.org