Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/d5af044a6921bab031155e90fb8b41e4049b4c39.roa
File: d5af044a6921bab031155e90fb8b41e4049b4c39.roa (raw, json)
Hash identifier: rHy7tidFhzA8nS1p3YlWJXHhBhwyeIDCRSA+2/irTkg=
Subject key identifier: FB:63:F0:21:07:1B:3D:BA:5B:39:97:75:52:23:86:F3:1F:07:FF:A5
Certificate issuer: /CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Certificate serial: 03B37D
Authority key identifier: 84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/d5af044a6921bab031155e90fb8b41e4049b4c39.roa
Signing time: Mon 11 Apr 2022 11:52:14 +0000
ROA not before: Mon 11 Apr 2022 03:00:00 +0000
ROA not after: Tue 11 Apr 2023 03:00:00 +0000
asID: 3970
IP address blocks: 201.219.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 242557 (0x3b37d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Validity
Not Before: Apr 11 03:00:00 2022 GMT
Not After : Apr 11 03:00:00 2023 GMT
Subject: CN=d5af044a6921bab031155e90fb8b41e4049b4c39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:9c:75:36:ac:97:c2:68:28:34:76:07:28:8c:
97:c0:33:87:e5:f2:66:71:3d:85:0d:fe:ce:ce:4d:
19:41:39:59:fb:e3:66:80:ca:8a:1b:62:7d:82:72:
58:39:5e:12:0b:50:15:9d:19:ff:cf:b7:37:a1:de:
5f:54:d1:14:90:6b:7a:6e:c9:ea:12:78:51:e1:75:
34:62:97:c4:c2:ea:5e:76:9e:51:19:fd:e3:2e:3b:
74:19:97:9d:d7:1d:0c:5d:4c:85:bd:af:1f:f3:6e:
cf:b5:21:b7:cb:74:3e:b2:14:ab:ff:2f:95:71:21:
90:57:d0:df:e2:73:92:0f:ed:39:6a:b4:53:5d:da:
a2:b5:ce:28:9e:ad:ff:c8:16:e6:ba:2b:65:7f:31:
9c:e5:3f:25:62:eb:0f:3a:59:6d:5b:0a:f8:3b:18:
5c:fb:d1:69:31:14:6f:0b:be:bc:0d:42:05:2d:f5:
f9:4c:fe:f7:da:da:f4:26:fd:0d:9d:f3:ce:54:dd:
86:0f:45:b3:bb:b4:d3:47:34:f2:46:9b:dc:dd:34:
c3:71:5b:b2:13:9d:3b:e3:8a:32:35:53:33:be:37:
34:76:e1:0d:67:07:81:f4:e3:83:81:85:db:be:5b:
b9:85:00:16:0a:63:79:f8:d0:56:98:f1:f1:36:18:
30:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:63:F0:21:07:1B:3D:BA:5B:39:97:75:52:23:86:F3:1F:07:FF:A5
X509v3 Authority Key Identifier:
keyid:84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/d5af044a6921bab031155e90fb8b41e4049b4c39.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.219.253.0/24
Signature Algorithm: sha256WithRSAEncryption
67:26:ab:d8:2d:6b:3d:0e:5f:46:21:c6:7c:ab:fa:9b:6f:c6:
31:6a:4d:48:49:a9:25:62:b0:fd:8c:bb:49:9b:ec:ef:ae:34:
91:df:91:54:47:94:24:d3:20:b4:6c:1b:3a:39:31:5d:61:42:
db:dc:50:97:df:34:9e:3b:66:3d:e4:c0:b1:6d:04:e0:dc:c9:
cc:8b:11:96:f0:24:8b:b8:ed:98:4a:d6:1b:ad:06:a8:31:e6:
de:62:ac:77:24:85:99:a1:c4:cb:6e:fc:d1:c0:92:1c:2d:17:
a1:f6:43:92:b1:9b:61:67:da:64:10:09:7c:6b:6a:e1:44:e1:
30:7a:77:86:01:e6:f4:75:27:6e:22:c4:b0:de:98:b0:63:39:
7f:a5:fb:53:c5:20:f5:77:0e:96:5a:18:dc:aa:57:d2:86:8d:
b4:01:b3:8c:12:65:1f:96:46:81:ca:d6:8a:c5:4b:03:cc:f0:
4e:14:78:4e:a3:ab:93:94:17:e6:2d:1c:7a:10:f2:6e:c9:0d:
1b:1b:3a:17:15:06:e1:ef:e7:e1:73:92:d2:eb:3f:fa:15:31:
e7:09:e3:0b:45:9a:f0:29:60:a9:da:89:73:31:42:15:29:d7:
60:c8:23:57:44:ff:31:8d:9b:eb:93:c3:d1:f4:0b:99:35:ae:
f5:83:5a:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:48 2023 by rpki-client on console-ams.rpki-client.org