Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/a3403520c858fa087f4abc61530271834f4cc1c2.roa
File: a3403520c858fa087f4abc61530271834f4cc1c2.roa (raw, json)
Hash identifier: PWtq6TdPnLLHBOkLL6IVWUnuxTXD9N/zqGljI244t6g=
Subject key identifier: 06:05:5D:98:6F:32:28:37:4A:42:07:AA:09:B7:63:9C:E8:01:63:5D
Certificate issuer: /CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Certificate serial: 0A61B8
Authority key identifier: 84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/a3403520c858fa087f4abc61530271834f4cc1c2.roa
Signing time: Wed 07 Sep 2022 01:42:54 +0000
ROA not before: Wed 07 Sep 2022 03:00:00 +0000
ROA not after: Thu 07 Sep 2023 03:00:00 +0000
asID: 3970
IP address blocks: 201.219.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 680376 (0xa61b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Validity
Not Before: Sep 7 03:00:00 2022 GMT
Not After : Sep 7 03:00:00 2023 GMT
Subject: CN=a3403520c858fa087f4abc61530271834f4cc1c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:94:7c:25:28:2e:06:a9:fc:6f:98:30:0f:b0:
db:f8:7b:2b:d8:6b:a2:5c:92:ff:40:ca:b1:39:ec:
32:7b:6f:8f:d2:7b:11:00:68:af:57:a8:a2:eb:16:
36:30:0f:91:c7:de:cd:1f:67:11:50:8a:d5:32:af:
79:2c:a5:a4:c4:4e:d3:ac:22:00:0b:6f:1d:7b:d9:
e7:f7:41:58:85:73:e7:68:9a:2e:ec:1f:29:98:b7:
b1:1e:fe:c0:fd:70:fc:1e:52:9f:f1:5d:7a:ed:4b:
7c:a1:9f:6e:49:2d:6a:59:be:e0:c0:16:a5:3d:51:
87:d8:60:ba:0f:ed:4c:16:66:a1:ae:65:ea:90:30:
47:4b:e6:0f:4d:49:42:b8:a7:61:b8:61:bc:ba:4a:
25:65:79:f0:0c:f8:08:12:bc:cb:27:18:15:9f:c2:
d4:13:31:c7:56:bd:c4:20:91:33:1c:88:b4:56:59:
3d:7e:c9:c0:01:55:89:b9:ae:22:df:67:22:f4:f5:
52:7d:83:3d:2b:5e:db:2d:a1:c4:48:80:cc:41:60:
bc:1d:89:b0:99:11:e4:9b:37:c6:60:78:fc:01:8e:
9c:c7:63:7e:54:51:58:ee:d0:f5:77:33:ba:7b:5a:
84:be:2e:c4:32:b0:9b:72:5e:1b:2b:24:03:a7:1a:
2f:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:05:5D:98:6F:32:28:37:4A:42:07:AA:09:B7:63:9C:E8:01:63:5D
X509v3 Authority Key Identifier:
keyid:84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/a3403520c858fa087f4abc61530271834f4cc1c2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.219.253.0/24
Signature Algorithm: sha256WithRSAEncryption
13:f1:14:85:f7:94:3d:ec:87:01:02:3c:1e:f3:f7:1a:65:63:
b2:5a:e4:bc:d3:8f:df:35:8c:78:74:eb:08:da:97:b9:84:8f:
11:9b:a2:47:fe:d3:9f:8f:6f:eb:06:d4:af:51:bb:cc:22:8e:
9f:e4:92:3f:80:0b:a4:ed:76:7e:5f:6b:50:6d:d7:72:e8:cd:
ab:0e:ae:7f:40:b1:67:e9:77:52:28:90:ee:e6:d2:da:7d:5c:
32:ee:28:a9:10:55:15:38:19:48:70:10:8b:85:34:7a:af:cd:
8c:eb:df:ba:76:2a:f2:e0:14:62:87:2f:4f:bf:df:4e:09:f6:
b9:e2:c7:89:71:cb:80:92:f5:05:a8:1e:63:1c:c1:0f:65:5f:
84:f6:47:45:c5:9a:b2:b1:f6:8f:9a:03:d5:5d:5e:03:09:95:
d8:08:36:ec:79:1c:7d:1d:d5:67:1c:8e:d2:e1:5c:1c:e6:16:
13:a6:3b:7a:40:29:36:1c:33:92:f1:e5:15:d1:0e:66:0c:2c:
f7:5d:aa:53:06:45:65:6f:f2:2e:6d:3a:2a:71:2a:59:55:7e:
33:71:fa:fa:e3:7a:ac:4d:11:14:c6:95:38:ed:62:38:24:80:
de:a7:80:28:39:bc:37:c2:98:8e:00:35:66:07:d8:a1:f3:80:
4a:af:16:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:48 2023 by rpki-client on console-ams.rpki-client.org