Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/dc1d2956d009b579541edc196553becbe621d34f.roa
File: dc1d2956d009b579541edc196553becbe621d34f.roa (raw, json)
Hash identifier: ytvgarNGyk8bt1ymQFyOCUGWO3kImDnCduJjqWL289I=
Subject key identifier: B5:98:E6:97:0A:CA:69:5C:31:FB:72:B1:0A:FC:8F:E6:CE:AD:C3:9B
Certificate issuer: /CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Certificate serial: 086C22
Authority key identifier: 84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/dc1d2956d009b579541edc196553becbe621d34f.roa
Signing time: Wed 27 Jul 2022 00:18:25 +0000
ROA not before: Wed 27 Jul 2022 03:00:00 +0000
ROA not after: Thu 27 Jul 2023 03:00:00 +0000
asID: 3970
IP address blocks: 201.219.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 551970 (0x86c22)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Validity
Not Before: Jul 27 03:00:00 2022 GMT
Not After : Jul 27 03:00:00 2023 GMT
Subject: CN=dc1d2956d009b579541edc196553becbe621d34f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:43:ef:33:54:8d:2b:fa:75:0d:bf:0f:05:14:
e7:72:8d:1a:39:eb:2d:88:e3:52:a2:1c:8f:31:53:
de:6e:36:bd:8e:31:3f:29:a8:a4:e0:7b:ff:c2:f8:
8a:7f:64:84:a0:45:8d:7c:c0:ec:bb:00:8f:93:ae:
f4:c2:af:92:2e:3b:b3:38:93:5b:e7:d1:36:40:48:
5f:0e:08:8c:3d:54:e7:4f:cf:b7:51:53:07:d2:ba:
0d:6d:ac:4f:81:59:09:e1:2c:ab:39:26:d3:4f:c2:
10:dc:b9:30:fe:48:18:a5:11:f0:5f:4e:71:09:85:
a4:ce:a1:6f:34:70:29:ae:54:92:ce:7c:f5:0b:4e:
10:04:e2:e9:b8:38:8d:f6:31:f2:31:6d:52:88:43:
24:a6:d6:37:2b:15:ba:d7:a7:f2:47:98:2f:6c:19:
58:ee:e5:b3:3f:ee:1d:a4:07:36:14:59:55:83:eb:
12:9e:af:10:ce:1a:ef:ee:19:5a:12:c6:bd:6f:b3:
0f:79:a2:b8:02:77:25:0b:88:b9:e5:5e:3c:ef:ed:
f0:fc:57:86:72:57:32:18:cf:44:4c:95:e3:8a:b7:
83:80:95:c6:a9:06:f6:2c:cc:53:5a:e4:c0:58:4a:
fc:2b:f1:f4:4c:f4:94:7a:49:fd:db:1e:3e:57:f3:
3e:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:98:E6:97:0A:CA:69:5C:31:FB:72:B1:0A:FC:8F:E6:CE:AD:C3:9B
X509v3 Authority Key Identifier:
keyid:84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/dc1d2956d009b579541edc196553becbe621d34f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.219.253.0/24
Signature Algorithm: sha256WithRSAEncryption
38:43:88:19:0f:f6:7b:9e:40:3d:ad:00:56:a5:d6:5e:cd:28:
b2:3c:12:dc:9d:c5:8c:64:1a:a3:cd:a8:51:a9:65:07:92:b0:
46:25:51:e1:2d:12:e9:2c:f4:31:7f:fa:25:61:07:28:fd:23:
4a:95:5b:c0:de:79:d1:21:97:2c:6d:ed:84:a2:b6:b8:30:d2:
fb:5f:c8:b6:36:3d:0d:31:b3:3d:f8:70:f4:bd:a0:55:94:48:
4c:16:95:c5:c1:09:66:02:d1:d8:9d:6e:9c:61:d9:17:b1:38:
03:b1:f8:52:05:9a:cc:55:6a:5e:60:2a:33:e1:bb:16:23:d3:
34:49:d6:f8:da:55:d9:c6:a8:fe:ab:d1:14:f8:e6:03:1a:37:
e3:11:77:92:e6:1f:67:1f:7d:56:5b:dc:36:0d:00:78:90:ff:
5f:10:0f:40:59:72:5b:70:1d:10:24:2e:3a:8d:7b:76:f5:09:
3d:40:82:0c:44:82:57:d4:a2:16:ff:ab:04:4b:e9:89:6a:ca:
ee:e0:7b:03:1d:b5:ad:41:9b:08:e8:5c:a7:7c:1b:4b:c8:e3:
79:6a:3f:08:77:d0:1d:51:bf:eb:e6:ab:55:75:79:e2:aa:1b:
38:a2:01:9c:46:41:4b:6f:12:df:d5:b5:ea:e0:99:10:10:0a:
80:51:1b:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:33 2023 by rpki-client on console-fra.rpki-client.org