Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/d4062a9852dd20c0b4499e5512eaeab6e4a1d46f.roa
File: d4062a9852dd20c0b4499e5512eaeab6e4a1d46f.roa (raw, json)
Hash identifier: X82Q9ikx9RydVrSQOmHN1JQgTcwKkbaWUVMvx4SZh18=
Subject key identifier: E0:4C:EC:F1:63:7B:1A:E8:EF:FB:56:F7:A8:91:76:76:A3:20:CD:AA
Certificate issuer: /CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Certificate serial: 092D91
Authority key identifier: 84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/d4062a9852dd20c0b4499e5512eaeab6e4a1d46f.roa
Signing time: Sun 14 Aug 2022 00:01:03 +0000
ROA not before: Sun 14 Aug 2022 03:00:00 +0000
ROA not after: Mon 14 Aug 2023 03:00:00 +0000
asID: 3970
IP address blocks: 201.219.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 601489 (0x92d91)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Validity
Not Before: Aug 14 03:00:00 2022 GMT
Not After : Aug 14 03:00:00 2023 GMT
Subject: CN=d4062a9852dd20c0b4499e5512eaeab6e4a1d46f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:70:71:25:66:94:fd:d2:cc:57:a9:10:20:26:
ea:67:0d:bc:50:99:1f:9e:ed:e6:9b:5e:29:40:83:
59:10:43:74:dd:06:12:7e:7b:a7:42:f5:e6:f3:d8:
f1:9c:b7:f6:80:cb:5f:f5:13:07:96:d6:f9:94:7b:
c1:c5:8d:d3:65:84:8d:bf:53:d0:87:04:06:60:25:
b5:a6:62:3f:ec:76:14:3f:cf:07:11:bb:c5:97:8f:
d6:8d:66:db:28:8c:f5:df:86:6a:ed:e5:b9:ba:a7:
a8:47:f6:f2:3f:05:8e:93:a9:dc:fd:9c:fb:64:ea:
31:12:e5:20:41:49:a4:87:f7:af:bf:08:6b:a8:f1:
4d:bb:67:59:bc:82:8d:a0:92:3c:6f:08:03:aa:38:
77:e4:ad:13:2e:fc:8c:97:99:0a:a6:21:49:56:0a:
4d:9d:ed:4b:e6:22:5a:8b:d3:2f:7d:2f:86:87:37:
61:13:68:a1:c6:3e:f1:24:1f:c7:89:9a:17:fa:b8:
9a:44:80:a8:7d:3e:b0:46:93:9a:b5:09:8d:dd:df:
53:b7:f9:35:ec:d5:d2:28:71:ec:79:f9:01:a4:54:
35:2f:ee:32:1d:94:c8:84:7b:d9:ac:a6:ea:36:aa:
4a:68:b9:ba:01:77:91:20:c8:28:37:09:dd:1d:76:
6a:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:4C:EC:F1:63:7B:1A:E8:EF:FB:56:F7:A8:91:76:76:A3:20:CD:AA
X509v3 Authority Key Identifier:
keyid:84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/d4062a9852dd20c0b4499e5512eaeab6e4a1d46f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.219.253.0/24
Signature Algorithm: sha256WithRSAEncryption
95:15:61:14:94:51:cb:74:2b:d8:57:6c:7b:ba:81:e1:c0:bd:
fb:f3:d1:b1:76:1d:89:0e:b7:45:a9:03:6c:35:2b:4d:02:a3:
69:3e:34:d4:85:4e:36:34:9d:1d:7e:3f:cd:16:cb:a6:34:ff:
6a:3c:ee:5a:94:3e:77:55:a6:0a:03:ce:87:ea:6e:f5:05:07:
fb:4e:e1:8b:4a:67:0c:f9:d8:d2:45:9b:5b:b7:19:6c:2e:7a:
c4:4b:a3:24:5b:4f:c4:4e:e2:39:0e:86:be:71:4a:cf:ab:3f:
b0:a8:73:80:fd:99:7e:2a:0c:ab:2c:0c:89:27:30:ce:e4:03:
a2:1b:2c:a6:85:27:29:c0:81:63:35:6e:9a:58:4a:8b:25:be:
86:a6:cf:f1:ee:7d:7c:fb:4f:f2:90:f8:a3:96:e9:6a:3c:22:
85:43:5f:82:5d:5f:e5:88:2d:4e:a1:b0:cf:a3:f1:7d:f7:39:
1f:69:26:0a:e7:be:80:ee:59:83:a9:25:ba:91:36:6e:af:7b:
48:a3:be:a8:22:1a:3e:04:a4:c1:e8:95:47:f1:f9:05:f1:f8:
e6:9b:03:1a:30:27:bf:f9:6a:f2:a5:0e:4c:06:63:f4:d8:72:
b5:73:67:3e:2f:ad:88:28:43:e8:6f:05:0c:aa:f5:91:14:3e:
cf:fa:51:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:48 2023 by rpki-client on console-ams.rpki-client.org