Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/b20f2f247f3f2954fe87cf72ff2f54667be3dd46.roa
File: b20f2f247f3f2954fe87cf72ff2f54667be3dd46.roa (raw, json)
Hash identifier: 4ROg2I4U5QwSqJhUTlSqKa2N07roKE/pAgtPb7WaFvw=
Subject key identifier: E7:32:43:27:4F:60:CC:60:82:EE:5E:BF:B0:3C:BD:41:5A:61:FB:8D
Certificate issuer: /CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Certificate serial: 05FBF8
Authority key identifier: 84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/b20f2f247f3f2954fe87cf72ff2f54667be3dd46.roa
Signing time: Fri 03 Jun 2022 04:47:26 +0000
ROA not before: Fri 03 Jun 2022 03:00:00 +0000
ROA not after: Sat 03 Jun 2023 03:00:00 +0000
asID: 3970
IP address blocks: 201.219.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 392184 (0x5fbf8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Validity
Not Before: Jun 3 03:00:00 2022 GMT
Not After : Jun 3 03:00:00 2023 GMT
Subject: CN=b20f2f247f3f2954fe87cf72ff2f54667be3dd46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:90:5b:01:22:ce:c3:25:39:17:86:82:2a:df:
5b:6f:f6:6b:f8:c9:a1:fc:a3:f1:a9:5d:e1:5b:b7:
03:57:04:d1:b5:16:73:e9:0d:a6:b2:d3:c5:a3:3c:
a6:a4:ad:f8:e3:79:b5:d7:84:81:60:01:20:f7:0b:
46:c4:5c:8d:7e:62:ca:a1:ab:71:6c:99:38:86:1a:
3d:40:42:9d:44:a6:e1:4d:18:d7:f7:6f:92:7d:20:
b9:00:bf:44:e2:b7:9d:7e:e6:50:b9:8f:e5:54:fe:
00:ab:1b:bf:f7:cb:b7:7e:d5:39:99:77:92:32:0b:
15:86:60:0e:4c:8b:75:82:c0:c6:a3:51:de:46:52:
0b:e2:7e:bf:97:d9:81:d2:ec:7c:c4:53:1b:1f:03:
93:45:e1:c7:a7:97:bd:21:b9:43:7c:a4:d5:0f:de:
c4:11:ab:e1:94:80:1a:3e:29:c6:7e:0a:68:20:7f:
46:85:2e:87:0b:a3:5d:53:05:41:45:9e:d6:ee:8f:
97:e6:6a:58:30:b0:17:99:60:51:f3:f7:31:d3:5b:
a2:03:41:4f:c3:98:58:44:64:29:56:72:02:65:11:
4f:22:10:79:8a:fd:35:4b:f2:87:e2:93:4d:c1:c8:
6f:bd:93:1a:82:ef:8d:ff:44:85:41:e7:da:ef:1f:
92:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:32:43:27:4F:60:CC:60:82:EE:5E:BF:B0:3C:BD:41:5A:61:FB:8D
X509v3 Authority Key Identifier:
keyid:84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/b20f2f247f3f2954fe87cf72ff2f54667be3dd46.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.219.253.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:00:27:0a:77:fb:eb:60:15:bf:07:4f:9a:f9:b2:65:ef:b4:
81:c1:1a:b8:eb:08:e8:12:e7:80:04:49:d2:b9:ed:1f:22:53:
9a:e5:52:49:ad:18:70:52:2d:dc:20:66:87:a2:49:af:30:ea:
9b:6c:b2:30:6e:b6:bb:58:a9:31:67:5b:86:f2:f2:4e:f3:40:
05:84:6a:5d:57:a1:5f:41:9d:96:b0:a8:29:6a:ec:3f:b9:5b:
b2:e1:92:cb:bc:89:8b:36:f8:67:94:ea:bd:37:43:ef:7b:56:
67:c3:af:93:bf:88:a1:03:8d:2e:f1:12:d5:4e:0c:1c:50:56:
3c:60:41:6c:db:c1:9f:5e:99:ec:cd:9e:97:00:46:63:20:cd:
c0:62:39:6d:6f:22:42:33:33:69:cd:58:ee:13:b4:d9:46:12:
59:1e:a3:f9:1b:6e:4e:be:44:d7:11:81:44:fe:cf:82:34:ab:
d7:f4:d2:7b:c0:33:6c:83:1c:a1:51:4c:aa:35:57:4d:b2:28:
d5:95:7f:2e:f2:6b:61:19:ec:b1:f4:b4:63:4a:30:df:c0:00:
ef:42:c7:fe:2a:c8:c5:1d:de:cb:a2:99:b9:83:e8:41:65:c5:
5e:01:29:91:68:20:6c:a1:61:aa:28:81:63:b6:60:c8:3a:e5:
4e:57:21:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:33 2023 by rpki-client on console-fra.rpki-client.org