Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/ad558a4367f70335be2d8eac76d5eb9564b225e2.roa
File: ad558a4367f70335be2d8eac76d5eb9564b225e2.roa (raw, json)
Hash identifier: kcWsvU2AXPWP/LSY9aPxEncXQSTowDXKXLOtycop2Ag=
Subject key identifier: FC:39:35:D3:7E:66:C0:C9:D5:05:D6:C4:66:01:CD:8E:B8:13:20:47
Certificate issuer: /CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Certificate serial: A2D5
Authority key identifier: 84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/ad558a4367f70335be2d8eac76d5eb9564b225e2.roa
Signing time: Fri 04 Feb 2022 01:44:51 +0000
ROA not before: Fri 04 Feb 2022 03:00:00 +0000
ROA not after: Sat 04 Feb 2023 03:00:00 +0000
asID: 3970
IP address blocks: 201.219.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41685 (0xa2d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Validity
Not Before: Feb 4 03:00:00 2022 GMT
Not After : Feb 4 03:00:00 2023 GMT
Subject: CN=ad558a4367f70335be2d8eac76d5eb9564b225e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:32:8b:0f:20:de:37:44:19:e8:7e:88:11:7d:
21:98:26:ad:45:95:f8:b4:80:e9:5b:7b:f9:ce:9b:
d5:a4:98:b6:9d:1f:f5:d1:88:9c:de:bf:5f:11:1d:
ce:1c:53:02:09:21:d2:f4:7f:b2:cd:54:75:d6:78:
00:0c:aa:ab:de:9d:08:db:08:75:46:12:18:71:8e:
88:ac:51:96:b5:53:46:25:fb:0f:47:ab:39:c8:d2:
3b:ea:2f:40:7b:e0:b4:e9:3d:73:52:ea:d1:2f:ad:
b3:65:0a:d5:a1:52:f4:0b:b4:45:7d:d6:fe:5d:cc:
c5:81:c1:1e:13:f4:a1:5b:5a:f3:a3:3d:98:dd:5f:
86:03:92:89:6b:e8:3b:c6:01:a7:b6:c2:3b:0a:51:
40:27:ad:2c:63:a8:e0:b9:95:ba:64:2c:6e:11:10:
84:a1:5f:6b:4d:c4:8a:7c:98:43:69:85:5d:ec:fd:
56:61:b0:2d:80:1c:1c:e7:6b:f6:35:62:8c:82:5a:
e7:85:37:b4:34:ca:7d:03:0e:3d:5a:02:ff:93:12:
c3:a5:23:c4:14:4f:02:ce:92:06:65:1f:30:e3:79:
c6:63:52:26:22:4e:db:43:c7:23:56:a6:cd:40:ff:
83:57:20:78:8d:9b:15:c7:12:f8:0f:8b:75:77:8e:
9f:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:39:35:D3:7E:66:C0:C9:D5:05:D6:C4:66:01:CD:8E:B8:13:20:47
X509v3 Authority Key Identifier:
keyid:84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/ad558a4367f70335be2d8eac76d5eb9564b225e2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.219.253.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:0b:ae:9d:6c:82:67:80:c3:94:fb:58:e5:7a:15:c7:5e:b7:
d3:bd:df:21:66:ba:c8:a3:66:5a:6b:51:7c:b2:ef:4a:f2:72:
cb:f3:b1:b1:5d:47:d7:88:40:3b:07:8d:73:4b:47:8d:a3:9b:
5e:9c:6d:5a:14:75:3f:46:7b:f2:5e:ea:61:4d:cc:44:74:e3:
86:73:6d:71:24:97:f7:f1:c1:91:82:fa:ed:2f:0a:af:3b:5c:
6d:9c:9e:a1:3e:c1:8b:e1:60:6c:c4:ac:13:a0:31:12:39:36:
00:91:40:95:28:1c:f1:b8:a9:9f:41:95:19:b7:07:c4:4e:cc:
95:33:98:5d:76:ce:a8:5e:ca:7c:6f:3c:02:25:cc:f0:d0:ca:
67:b7:15:88:ba:6a:fa:e5:65:18:8a:f4:8f:8d:00:a8:68:23:
1d:e1:3e:ab:2f:60:94:8a:a9:b2:c1:1c:8e:6e:7a:c3:75:f2:
1b:c2:8c:b5:98:f6:6e:3a:0d:bb:84:65:89:9b:9a:16:3f:7a:
ec:a1:d2:ab:04:3b:dc:68:77:1d:d2:54:21:d2:2d:ae:0a:74:
d7:f8:1e:03:66:fe:45:9e:54:1a:65:23:d4:1f:29:10:fd:7d:
82:60:86:a1:f7:11:f8:2e:b1:d7:4c:e3:90:82:18:60:8e:37:
1d:a7:08:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:48 2023 by rpki-client on console-ams.rpki-client.org