Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/bdedb4eeb1d955c096166b77649d59fad7e268eb.roa
File: bdedb4eeb1d955c096166b77649d59fad7e268eb.roa (raw, json)
Hash identifier: mL6HDsLfb6I3+IE+ZxdFMNPYflX85vsHZrlZB33r1qc=
Subject key identifier: 4E:8D:96:75:AC:E6:AD:5D:B6:39:76:C5:B7:30:EB:CE:FE:4A:E0:43
Certificate issuer: /CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Certificate serial: 01B522
Authority key identifier: 84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/bdedb4eeb1d955c096166b77649d59fad7e268eb.roa
Signing time: Sat 26 Feb 2022 05:12:07 +0000
ROA not before: Sat 26 Feb 2022 03:00:00 +0000
ROA not after: Sun 26 Feb 2023 03:00:00 +0000
asID: 3970
IP address blocks: 201.219.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111906 (0x1b522)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Validity
Not Before: Feb 26 03:00:00 2022 GMT
Not After : Feb 26 03:00:00 2023 GMT
Subject: CN=bdedb4eeb1d955c096166b77649d59fad7e268eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:aa:89:72:4a:81:7f:2b:81:d1:3b:3f:d2:57:
81:bb:70:c9:88:f0:1f:c1:b3:80:ee:28:a8:36:a3:
f9:df:cf:8e:d6:5e:5e:59:2e:f5:00:58:ea:e2:00:
bd:25:37:95:73:9c:40:69:69:08:3a:3b:42:ee:45:
53:67:45:61:52:ef:bd:76:f1:93:08:33:2d:b1:87:
50:1b:b3:ee:8c:97:1e:81:fc:0e:81:84:e2:60:66:
7a:fe:32:f3:b3:84:ef:8b:b9:21:d7:ed:cf:49:ab:
ff:d8:0d:f7:81:02:9b:2d:4c:40:33:64:ee:68:c2:
62:2b:80:74:e2:a2:f2:3e:6c:1f:d6:ea:5a:fa:2d:
62:f8:e7:1a:c3:83:ea:05:6a:54:09:4d:9f:5c:5b:
14:ba:65:a3:24:be:0c:c9:2d:6b:0e:4b:6f:30:b1:
8b:b0:60:9a:2f:61:1f:d0:84:c8:10:bc:eb:a9:21:
bc:b8:84:9a:f1:7f:62:ae:64:20:8b:98:40:ea:55:
2e:5a:e9:74:26:db:cf:d7:af:b7:0a:16:80:75:4a:
ca:1b:54:94:5b:d8:a3:6e:17:01:a9:c3:f5:70:9e:
eb:a6:83:f5:62:17:a2:a0:d6:a0:1c:af:95:93:bc:
91:8d:6f:f3:c1:39:11:2b:6b:8b:59:20:e1:76:13:
29:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:8D:96:75:AC:E6:AD:5D:B6:39:76:C5:B7:30:EB:CE:FE:4A:E0:43
X509v3 Authority Key Identifier:
keyid:84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/bdedb4eeb1d955c096166b77649d59fad7e268eb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.219.253.0/24
Signature Algorithm: sha256WithRSAEncryption
25:64:f9:9b:12:c9:16:03:83:22:d7:4b:d5:ca:ff:2e:d3:be:
62:5a:e0:a2:ff:c1:66:52:5e:df:5a:38:95:ca:6a:9f:0e:77:
db:6c:4d:97:f2:12:db:1c:1f:b9:ac:ae:2f:14:73:b0:3c:df:
b9:a3:72:54:0d:e5:9d:ac:d2:cd:8a:f3:83:3a:fe:de:ab:8a:
bf:20:70:94:67:26:f7:e9:6b:24:49:eb:c4:f0:d4:a8:6e:37:
a3:89:9f:69:81:26:69:ba:3f:97:0d:c0:aa:ac:23:58:3a:92:
1f:0f:c1:cc:a5:61:c4:6e:fc:e1:a1:23:42:43:f9:f9:a4:2b:
20:85:cc:7d:c2:98:ab:b3:a6:84:ff:79:c9:1a:31:c7:2b:68:
a7:6f:f9:28:45:fc:29:b5:a2:8e:f3:f5:1f:17:82:86:99:9f:
bd:86:94:98:88:3e:18:f2:b7:da:3e:4d:97:9e:ac:dd:97:49:
51:ea:04:eb:4d:b0:5d:02:b4:e2:93:db:71:c5:d3:92:28:7f:
0a:6d:2d:84:3b:d7:ae:c3:bc:6f:11:9f:cd:12:e3:29:11:f2:
4d:fa:4e:f3:21:17:3e:f3:87:c0:f4:98:87:9e:8b:65:a2:9e:
99:cc:9f:15:dd:f2:33:5c:91:a8:3d:cd:24:2a:81:70:a8:cc:
0e:49:bf:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:58 2024 by rpki-client on console-fra.rpki-client.org