Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/df7daaa0d62a65769c894db547840085254b0d0a.roa
File: df7daaa0d62a65769c894db547840085254b0d0a.roa (raw, json)
Hash identifier: rMAfund3Jh0V0EPN5P71l3A/JOX55lU59In48dufI48=
Subject key identifier: 26:FF:A8:D1:29:40:E7:F1:B8:67:A5:A3:DD:B3:68:06:06:C9:B7:F3
Certificate issuer: /CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Certificate serial: 07BE38
Authority key identifier: 84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/df7daaa0d62a65769c894db547840085254b0d0a.roa
Signing time: Sun 10 Jul 2022 04:29:05 +0000
ROA not before: Sun 10 Jul 2022 03:00:00 +0000
ROA not after: Mon 10 Jul 2023 03:00:00 +0000
asID: 3970
IP address blocks: 201.219.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 507448 (0x7be38)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Validity
Not Before: Jul 10 03:00:00 2022 GMT
Not After : Jul 10 03:00:00 2023 GMT
Subject: CN=df7daaa0d62a65769c894db547840085254b0d0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:03:13:67:7d:29:a1:02:35:fc:88:4a:e0:7e:
d3:1f:42:3b:42:a5:f1:6e:3c:81:b5:0b:06:92:f8:
f4:7a:44:54:a7:a4:e3:0e:66:62:97:b3:99:6a:01:
45:05:92:28:ed:46:31:d9:79:75:67:0d:13:d6:e6:
bb:a9:2e:5c:76:04:23:17:b6:ae:c3:ba:54:83:95:
59:dc:ac:16:e1:a2:5a:d0:ba:15:5c:06:d9:d8:15:
a7:09:ed:70:f2:42:e0:46:df:03:44:6c:c2:53:aa:
b9:1b:d4:9b:3a:b7:2f:bb:ae:0d:e8:e9:b5:e5:7c:
93:fc:5a:92:df:7a:4f:c4:78:e1:1b:e3:36:60:a3:
5f:b2:56:9a:e1:09:d3:81:9f:7d:36:97:6d:a2:00:
2d:be:e2:ef:f1:81:28:66:be:48:9e:08:99:75:9c:
1b:48:5e:94:56:a4:be:8a:00:7a:62:03:ef:8d:da:
ba:77:7f:48:43:86:00:bc:07:f4:00:4f:03:11:20:
cd:6a:a6:be:8f:ac:cd:0a:ca:90:17:92:18:6a:ce:
25:c3:5b:ae:4f:d0:1f:88:dd:6f:9c:ec:94:23:1d:
a3:df:47:e0:df:62:de:f2:89:9d:ac:b7:5f:c8:90:
3a:c3:3f:65:c3:3f:77:fe:a9:ee:2d:cf:b4:c7:5f:
d1:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:FF:A8:D1:29:40:E7:F1:B8:67:A5:A3:DD:B3:68:06:06:C9:B7:F3
X509v3 Authority Key Identifier:
keyid:84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/df7daaa0d62a65769c894db547840085254b0d0a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.219.253.0/24
Signature Algorithm: sha256WithRSAEncryption
19:e2:dc:0f:41:68:3f:68:20:40:ee:69:1d:8b:27:7b:16:c7:
c1:b6:6f:6f:c7:f0:03:b2:57:8a:b6:7e:cc:b5:0c:4f:95:6b:
5b:fe:b1:a6:b7:29:14:e7:06:4b:ad:80:eb:14:87:84:f8:32:
b9:45:30:8e:0f:b2:76:2f:5c:c0:47:bb:41:7b:85:e7:d3:f0:
35:64:a9:bd:d4:9a:b7:bc:d0:45:ff:6f:88:bc:a3:9a:f6:9b:
6f:6b:74:8d:f4:28:92:2f:61:b8:5c:f1:d7:6c:c2:bb:78:ec:
a5:f5:20:d5:c0:e2:68:81:68:1a:26:e3:99:ac:5e:ce:08:9e:
7b:ba:98:f1:7d:e7:60:8a:55:e3:19:30:3b:49:91:fb:1a:01:
d9:9b:14:c1:36:a0:cf:db:db:06:ab:c2:95:49:6b:d6:72:75:
bb:99:f8:05:a5:d2:9f:65:9f:91:e6:94:04:3b:bc:8d:d7:1c:
f9:9a:fb:d0:a3:0c:59:7d:6c:22:03:dc:3a:d9:3c:d2:88:03:
f9:79:69:b0:b3:fa:e2:8a:df:7c:0b:de:90:dd:2d:25:39:6d:
0d:7e:4c:41:98:2c:d5:54:59:ed:8c:d7:40:92:d7:66:9a:3c:
42:c4:ea:24:62:f9:49:9d:d6:e7:d9:b6:70:79:a2:ff:8b:a6:
65:04:34:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:48 2023 by rpki-client on console-ams.rpki-client.org