Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/a78f71ce27ae235b4a32135058f3035247020af2.roa
File: a78f71ce27ae235b4a32135058f3035247020af2.roa (raw, json)
Hash identifier: 5/MfT0McpC3FWbO6vm8aupuqrtBgBK4dqKF5xvdOq4Y=
Subject key identifier: B4:8F:B9:C0:A0:CD:92:7C:32:66:EB:14:38:01:05:79:E1:44:8E:EF
Certificate issuer: /CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Certificate serial: 0BE9E9
Authority key identifier: 84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/a78f71ce27ae235b4a32135058f3035247020af2.roa
Signing time: Sun 09 Oct 2022 00:57:45 +0000
ROA not before: Sun 09 Oct 2022 03:00:00 +0000
ROA not after: Mon 09 Oct 2023 03:00:00 +0000
asID: 3970
IP address blocks: 201.219.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 780777 (0xbe9e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Validity
Not Before: Oct 9 03:00:00 2022 GMT
Not After : Oct 9 03:00:00 2023 GMT
Subject: CN=a78f71ce27ae235b4a32135058f3035247020af2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:8b:33:e5:c0:77:75:ed:2b:d8:51:ab:16:ed:
0f:9b:eb:ac:0c:0b:31:f7:30:73:17:22:46:6a:8c:
0f:c8:a5:46:76:28:4a:13:8d:9d:66:a6:d7:f5:5e:
6b:f4:44:a4:93:ea:98:62:94:7e:3b:73:fe:78:f0:
d6:4c:20:31:6c:e5:c7:3d:db:69:78:63:6a:b5:d5:
eb:a2:50:f7:61:f1:07:fc:35:65:db:74:d6:1b:4e:
50:24:c8:62:0c:fd:3b:df:a9:78:5f:42:85:23:af:
6a:cf:85:d2:04:b5:49:10:e6:3f:5c:87:f8:7b:01:
a7:0d:6a:8d:5e:1c:22:d0:0f:1f:13:4e:a3:cc:53:
8c:43:74:d2:d4:38:70:ef:e9:f5:46:ea:59:ec:9d:
b0:fd:3f:49:bc:ac:76:6e:c7:ac:72:11:06:43:9f:
86:ca:21:d7:88:fa:55:ac:b2:e4:26:7e:f1:99:6f:
c8:5a:89:a2:d2:dc:68:72:f6:65:15:d0:f2:7e:eb:
9c:09:e4:57:0b:c9:9a:90:b6:b9:46:16:a8:17:69:
e0:cc:56:be:5d:57:bb:3b:86:47:07:86:3d:03:3a:
d9:d6:74:70:55:31:92:c6:73:fb:b0:40:09:8c:0a:
4a:9e:e8:53:18:2e:0d:55:c3:7a:da:e0:89:70:c4:
09:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:8F:B9:C0:A0:CD:92:7C:32:66:EB:14:38:01:05:79:E1:44:8E:EF
X509v3 Authority Key Identifier:
keyid:84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/a78f71ce27ae235b4a32135058f3035247020af2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.219.253.0/24
Signature Algorithm: sha256WithRSAEncryption
51:89:76:3d:02:8d:a6:37:9b:10:e4:6d:f5:a8:5c:cd:c4:e6:
63:18:dd:67:12:a9:bf:52:1b:68:85:fe:b5:72:bc:3e:f5:32:
03:9d:bd:cf:a6:16:e8:6e:9a:14:dd:b9:96:29:46:fd:f8:b3:
36:f3:ef:c8:6b:f4:a3:8f:bc:94:71:84:e0:16:e0:a3:12:58:
4c:1d:8f:d4:09:f9:72:79:7b:4b:a7:a4:ad:e1:ab:1c:59:81:
8e:60:03:bc:b4:9c:4e:43:86:50:a6:9d:3e:4b:96:e5:ce:95:
81:69:c6:fe:04:70:41:02:68:7a:5a:62:dd:df:6e:1a:1b:1d:
06:bb:0d:25:47:2c:82:0d:10:5c:6a:49:aa:87:8c:57:3f:3b:
da:51:5d:18:bc:61:c3:e8:1c:38:ec:41:b4:4c:33:60:c0:45:
45:c0:fc:a4:21:cf:84:ef:85:4d:d6:da:74:5e:dd:f2:ee:bc:
b2:c8:65:ff:cc:77:74:16:59:80:4c:55:6a:e1:3a:ec:7d:d2:
2a:cf:9b:08:53:80:bd:d3:5d:c5:76:11:62:2c:63:92:05:93:
08:e6:36:b0:9a:34:32:67:87:5f:50:f5:ae:89:0e:ac:b7:60:
52:a1:b5:3a:3b:96:b3:cb:e2:fe:ec:32:19:ff:7f:f9:ed:e9:
1c:7e:a4:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:33 2023 by rpki-client on console-fra.rpki-client.org