Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/b7cda30995f577a7f71366e8f862f77c0851221c.roa
File: b7cda30995f577a7f71366e8f862f77c0851221c.roa (raw, json)
Hash identifier: XCwLY3boguYYGobmUWU9AmJt89Bd8RYEPGpRtCfMbRg=
Subject key identifier: BE:2B:8D:9E:A9:50:3E:CC:5B:F3:32:73:D8:CF:A1:F6:E3:42:FA:EF
Certificate issuer: /CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Certificate serial: 0689A3
Authority key identifier: 84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/b7cda30995f577a7f71366e8f862f77c0851221c.roa
Signing time: Wed 15 Jun 2022 01:25:20 +0000
ROA not before: Wed 15 Jun 2022 03:00:00 +0000
ROA not after: Thu 15 Jun 2023 03:00:00 +0000
asID: 3970
IP address blocks: 201.219.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 428451 (0x689a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Validity
Not Before: Jun 15 03:00:00 2022 GMT
Not After : Jun 15 03:00:00 2023 GMT
Subject: CN=b7cda30995f577a7f71366e8f862f77c0851221c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e0:70:20:b8:98:15:44:f8:a2:64:97:ad:41:
0f:f3:d4:d4:72:ec:cd:47:0b:bf:b5:a1:29:76:79:
4c:27:91:be:98:4c:99:95:4a:74:cc:4c:23:a1:9e:
b1:c2:77:03:73:42:6b:38:f0:9b:e2:52:17:00:e9:
1b:ba:f6:ae:9c:a1:bc:6d:d8:59:e7:91:88:0c:4b:
a6:7d:b6:59:ea:66:2d:00:54:16:fd:4d:cc:32:9a:
a6:88:fd:64:9d:2c:83:f0:7f:ab:10:b9:32:87:26:
c8:89:22:08:9c:c0:e7:95:db:89:75:64:21:38:31:
f2:74:b6:fe:d4:0b:0b:2d:75:d5:64:8e:50:34:2c:
e9:d5:fe:1e:79:3b:4e:bb:f0:74:93:6b:be:d3:f6:
3c:6d:c5:d6:2d:30:62:50:da:15:67:10:35:8d:6f:
5a:fe:21:b7:52:1f:28:1f:c4:08:13:06:c0:5a:4a:
1e:a8:de:d6:70:6b:8b:40:02:b2:34:72:51:49:9f:
04:d2:37:45:57:65:2d:28:11:59:59:73:c0:5c:d4:
b4:4c:75:9d:1f:3a:9b:e9:7e:05:0c:46:9d:bf:d9:
3a:6c:72:fa:8d:f4:16:f5:5d:15:a2:a4:04:fd:93:
73:f0:ab:22:8e:3e:0e:50:96:ce:4e:59:e2:45:ac:
ef:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:2B:8D:9E:A9:50:3E:CC:5B:F3:32:73:D8:CF:A1:F6:E3:42:FA:EF
X509v3 Authority Key Identifier:
keyid:84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/b7cda30995f577a7f71366e8f862f77c0851221c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.219.253.0/24
Signature Algorithm: sha256WithRSAEncryption
08:c3:35:49:16:ae:f0:1a:74:8a:0e:63:78:69:c8:68:a5:e9:
39:91:e4:64:9f:45:4d:9d:a7:e8:1d:b7:cf:8b:7a:b6:66:65:
63:2b:e4:39:6d:61:6d:ad:c3:9d:1f:bd:11:b9:5d:a7:13:6a:
65:60:1d:f5:d7:30:b0:38:1e:97:5e:a0:33:fc:1f:c3:fb:89:
50:05:6c:10:06:fc:19:07:3d:1a:19:86:65:34:25:cc:60:f6:
44:e3:56:bb:73:67:d3:8e:c7:91:c2:1c:3a:ed:00:cc:51:c8:
3e:98:86:a2:86:7b:57:9a:25:26:58:be:28:f2:9d:a1:43:0d:
71:1b:72:06:fd:ba:52:9c:a6:eb:45:ba:2b:41:7e:74:d7:e0:
ff:9c:df:54:1c:0f:37:d4:0d:35:fa:d8:03:2d:f9:8a:db:9e:
9c:68:6c:8b:8c:8a:9a:27:09:7e:e2:ef:6c:3b:96:52:1f:79:
73:75:78:38:67:45:9b:06:21:04:5a:00:ba:51:67:34:f0:d9:
98:2d:9e:4d:a5:e5:1d:1d:da:5f:19:3b:36:75:dc:d1:bc:b2:
aa:1f:e5:02:8f:14:a9:ae:7f:c6:d4:5a:d0:13:35:c5:a6:13:
de:56:63:2a:a7:a8:3a:dc:5e:29:f3:34:41:bb:43:37:c2:ed:
e3:0d:36:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:33 2023 by rpki-client on console-fra.rpki-client.org