Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/dfc884d7331c051bb3f36a18ad96393dad1afe71.roa
File: dfc884d7331c051bb3f36a18ad96393dad1afe71.roa (raw, json)
Hash identifier: 85HStzPpEKxdby2nEDkWko92w5+wo1t5E2mamDK9Cek=
Subject key identifier: 4F:0A:85:B7:A0:8E:40:CC:17:DC:C6:F0:7B:64:17:EB:C6:20:1C:61
Certificate issuer: /CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Certificate serial: 02F705
Authority key identifier: 84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/dfc884d7331c051bb3f36a18ad96393dad1afe71.roa
Signing time: Sun 27 Mar 2022 04:06:57 +0000
ROA not before: Sun 27 Mar 2022 03:00:00 +0000
ROA not after: Mon 27 Mar 2023 03:00:00 +0000
asID: 3970
IP address blocks: 201.219.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 194309 (0x2f705)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Validity
Not Before: Mar 27 03:00:00 2022 GMT
Not After : Mar 27 03:00:00 2023 GMT
Subject: CN=dfc884d7331c051bb3f36a18ad96393dad1afe71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:bf:f0:c3:ab:c8:c3:4e:2a:23:60:f0:fb:a6:
4a:e6:c5:e0:da:f3:bf:c9:ea:6e:37:6c:18:0b:b4:
2b:83:c8:83:54:a0:70:78:34:7f:91:ea:dd:cd:73:
bc:7f:cb:d8:24:7c:08:20:5e:9e:8c:c3:f1:75:a3:
78:70:e8:15:5e:85:58:9e:a5:97:18:39:48:e6:89:
ff:5f:16:57:31:ec:e7:84:59:d6:3e:03:f5:12:3a:
2f:72:d8:93:a4:6e:23:b0:32:12:b9:09:6d:bf:57:
a7:d9:d8:9f:74:e6:a1:ad:a2:29:44:59:f1:df:74:
94:ae:40:80:9f:66:93:4a:88:6d:fd:22:b9:c8:e6:
15:42:6d:f9:5e:26:e4:d0:bd:c5:3b:ef:d9:98:04:
15:9f:1e:db:d0:eb:5d:60:f6:8a:85:25:96:6e:1c:
70:18:80:4f:04:eb:b8:86:52:7e:85:ac:0d:4c:e5:
c7:9c:9a:7b:b6:29:0b:4e:4e:12:b9:0d:aa:86:12:
b2:69:35:43:c5:c6:2e:08:25:e3:e6:48:51:74:d8:
7a:af:83:c2:c0:de:0f:8e:5d:ed:37:d3:f1:9f:2b:
9b:f7:88:65:16:fc:b4:63:01:f7:0d:a3:aa:2c:4a:
ef:4b:25:9b:f7:ef:a0:43:c7:f5:7d:25:d9:0e:9d:
8f:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:0A:85:B7:A0:8E:40:CC:17:DC:C6:F0:7B:64:17:EB:C6:20:1C:61
X509v3 Authority Key Identifier:
keyid:84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/dfc884d7331c051bb3f36a18ad96393dad1afe71.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.219.253.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:0e:a0:20:af:0f:98:62:fd:95:50:e3:46:eb:37:1b:9e:56:
3f:a5:0b:05:fa:4a:48:67:fb:46:fe:25:76:fe:8b:43:fd:07:
fd:70:ea:ec:cf:29:c8:be:89:34:99:8f:ff:0d:b9:58:ff:18:
0a:75:53:10:a3:82:6f:80:15:d9:66:39:2c:aa:b1:eb:de:08:
4c:ed:58:04:50:f5:8c:9d:65:cf:fb:91:07:53:f4:21:ea:23:
62:f4:6f:c5:50:6f:84:26:d2:2e:31:78:8e:64:b6:09:8c:0d:
72:d0:0c:28:de:60:17:7b:b3:96:38:76:75:bd:0f:59:cb:e5:
2b:02:32:81:55:f2:97:bf:bf:22:9e:4e:be:43:d3:97:72:1a:
37:e8:6e:e4:44:46:cd:9f:02:75:85:16:86:19:6f:1f:a5:79:
1d:f7:95:6e:3f:53:ee:cd:0f:1f:be:c4:55:ef:1f:44:05:f8:
c9:a8:17:a1:76:6e:88:44:ff:2e:31:d4:7b:98:da:2d:44:d1:
23:6c:f1:57:a5:92:2c:09:a6:28:f1:ef:e4:35:db:ed:68:f4:
7f:aa:33:96:e8:7e:53:a4:a4:b0:f3:5f:e0:38:df:8f:f0:50:
5f:95:1c:b4:84:c3:d8:c2:63:29:21:04:f7:9c:00:59:df:fb:
b0:af:84:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:17 2024 by rpki-client on console-ams.rpki-client.org