Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/ce2bf7fcdc7e1781ee56ffd5cda1a8072889ce7d.roa
File: ce2bf7fcdc7e1781ee56ffd5cda1a8072889ce7d.roa (raw, json)
Hash identifier: oCcEWNKgzOVz7Yi1T5vmrY9tsjdEm0XQKRdHRWXozVY=
Subject key identifier: AB:02:D8:D6:B4:77:CE:FD:27:7F:B7:24:74:D5:86:6A:D3:2D:4C:3C
Certificate issuer: /CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Certificate serial: 0C9828
Authority key identifier: 84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/ce2bf7fcdc7e1781ee56ffd5cda1a8072889ce7d.roa
Signing time: Mon 24 Oct 2022 05:41:48 +0000
ROA not before: Sun 23 Oct 2022 03:00:00 +0000
ROA not after: Tue 24 Oct 2023 03:00:00 +0000
asID: 3970
IP address blocks: 201.219.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 825384 (0xc9828)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Validity
Not Before: Oct 23 03:00:00 2022 GMT
Not After : Oct 24 03:00:00 2023 GMT
Subject: CN=ce2bf7fcdc7e1781ee56ffd5cda1a8072889ce7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:2b:1d:ed:8d:6f:b0:e5:41:c2:2c:58:7e:cd:
15:41:42:aa:f8:ed:9d:08:00:01:24:ec:63:e0:8a:
e9:ed:f3:0f:65:67:d7:72:e0:0e:29:91:d0:3b:dc:
23:61:19:25:b2:ee:d3:af:70:26:f9:17:f6:e0:11:
68:34:e1:34:c8:61:3c:4f:2b:42:57:29:a2:1d:1a:
18:b4:e9:8c:6e:68:b8:2b:27:a8:62:d7:85:6d:40:
f4:a7:90:a3:4c:08:75:8f:a2:0a:5b:8d:f2:af:13:
af:f2:86:97:c1:9d:1a:8a:3b:cf:29:05:f7:a8:e2:
cd:ef:7c:1e:28:b0:de:5c:6c:3a:94:e0:d0:70:e5:
9a:cc:49:2c:96:10:6a:a8:e1:98:1c:82:77:ee:d5:
d9:8a:27:cf:35:c2:d0:15:c1:2d:2f:a4:6d:f1:51:
ce:a0:42:07:cb:1c:3e:21:40:20:14:e9:1d:9e:7f:
7f:87:25:5a:f9:ad:c8:03:30:a1:f1:48:49:d9:6a:
38:02:c5:f3:e8:be:a0:08:be:7a:fb:65:da:36:3b:
2f:d5:31:f3:f3:db:2e:15:9c:a7:6d:cd:08:ec:3b:
c3:65:ec:49:1d:c9:bd:51:a6:b0:bf:e6:b8:71:4d:
08:df:86:00:79:4b:e9:d1:9e:f3:80:d3:f8:8e:67:
2d:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:02:D8:D6:B4:77:CE:FD:27:7F:B7:24:74:D5:86:6A:D3:2D:4C:3C
X509v3 Authority Key Identifier:
keyid:84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/ce2bf7fcdc7e1781ee56ffd5cda1a8072889ce7d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.219.253.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:39:1a:4c:e0:a0:a1:93:6f:8d:29:ee:3b:29:7b:13:24:11:
e7:4a:c7:57:33:60:b3:a2:41:f8:aa:af:18:d6:4b:16:44:75:
4d:f3:30:0e:11:59:c9:a3:1c:31:b3:9d:c8:3b:64:5b:cd:cd:
a4:11:9f:ec:8d:f2:35:a6:84:2b:f8:31:c4:8a:d0:db:77:11:
97:5d:46:f5:15:fb:8e:c5:57:45:56:b4:11:7d:ba:71:29:17:
a0:3c:dd:fe:54:14:22:e8:8a:96:30:3e:b5:81:bb:9d:52:4d:
6c:38:78:eb:c9:13:99:7e:ac:eb:00:e7:70:ee:0f:02:39:ef:
c4:7c:a1:a9:90:c1:6c:cd:4e:ac:bf:57:4c:12:fc:38:ca:45:
3b:f6:f5:27:d1:15:5c:7f:d9:87:c6:cd:4d:7e:ed:d4:12:c1:
5b:df:2d:d6:8e:d1:fe:aa:9f:12:65:40:ae:6a:ee:48:0a:ef:
cd:b5:41:87:ee:48:71:af:6b:bd:e0:d3:fa:95:60:d3:e9:0d:
ab:64:02:55:77:07:24:b8:78:7c:1c:34:dd:96:d3:dd:05:05:
97:41:e0:b4:b8:c8:73:76:e3:71:51:95:ad:33:8f:e0:2d:d1:
b5:c5:9d:89:f3:ec:01:09:9b:e2:31:fc:9d:eb:89:dd:9c:2a:
16:53:5b:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:58 2024 by rpki-client on console-fra.rpki-client.org