Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/e1b32d1c56daab38899afadb1d0ae4040e2c0a12.roa
File: e1b32d1c56daab38899afadb1d0ae4040e2c0a12.roa (raw, json)
Hash identifier: zQiSO/MRNZ95/zGytQMIKBH1hGZjLGtaQWvsJDN/Fw8=
Subject key identifier: 3F:47:46:D7:C4:78:EF:A3:F3:56:02:72:DD:30:9F:45:88:05:6F:AC
Certificate issuer: /CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Certificate serial: 0AF6E0
Authority key identifier: 84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/e1b32d1c56daab38899afadb1d0ae4040e2c0a12.roa
Signing time: Mon 19 Sep 2022 00:19:06 +0000
ROA not before: Mon 19 Sep 2022 03:00:00 +0000
ROA not after: Tue 19 Sep 2023 03:00:00 +0000
asID: 3970
IP address blocks: 201.219.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 718560 (0xaf6e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Validity
Not Before: Sep 19 03:00:00 2022 GMT
Not After : Sep 19 03:00:00 2023 GMT
Subject: CN=e1b32d1c56daab38899afadb1d0ae4040e2c0a12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:0c:bf:04:7e:d5:31:ed:a6:7e:da:ea:53:c6:
5b:5a:e5:19:00:94:90:f7:fc:3b:f6:ee:5b:fa:79:
f3:6e:ad:41:8f:b6:c2:08:01:7e:b4:c3:de:3f:ae:
83:aa:7b:fb:75:3a:b4:ec:ba:d7:f5:e1:69:73:8d:
de:c9:2e:59:1f:16:b2:66:f9:a6:ac:ea:47:78:ab:
d9:09:54:f9:d9:9e:50:f1:9b:94:20:8b:c7:fc:ae:
d0:1e:e0:19:e2:65:f2:b5:99:58:e9:25:ed:62:dc:
0a:d6:cb:4d:b9:ec:84:8c:e4:b7:7b:e4:21:3b:22:
f1:05:a1:a6:11:f1:69:5b:2f:e2:c4:05:cd:fe:bc:
70:78:0b:60:f0:ba:c3:3b:7c:6b:d7:d5:46:22:88:
5a:c9:e2:7c:1e:32:97:ea:ce:5e:37:e6:1e:d3:d7:
38:e9:f3:ca:16:6e:43:12:57:5f:5d:53:1d:f4:c5:
e9:91:1f:85:fb:24:8e:5c:cf:2d:82:81:a6:23:0d:
a6:94:c4:ed:36:c1:5d:99:be:79:e9:ae:ca:47:dc:
de:35:a3:75:68:9d:df:ed:51:57:a8:b1:9f:78:92:
72:ec:85:88:46:7a:94:a3:a4:9a:53:e0:c6:7c:28:
49:83:56:3e:05:b7:ca:b1:a0:b7:55:a2:7f:f7:be:
a8:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:47:46:D7:C4:78:EF:A3:F3:56:02:72:DD:30:9F:45:88:05:6F:AC
X509v3 Authority Key Identifier:
keyid:84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/e1b32d1c56daab38899afadb1d0ae4040e2c0a12.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.219.253.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:32:9a:f5:a5:f4:9e:88:81:eb:71:ae:70:e3:c3:89:87:6b:
9c:1b:32:c5:9a:2f:18:87:fd:ac:48:d6:24:01:70:17:aa:9d:
8a:f8:c2:6c:c5:26:9c:cd:d7:a2:97:d3:d2:c8:b1:f0:3c:18:
61:90:59:92:b6:34:b2:01:70:a8:a8:57:21:56:56:f2:e6:21:
ea:8e:f8:eb:4c:61:6a:51:c3:45:b0:74:79:3b:89:94:d0:1d:
1e:55:28:1c:cd:bc:1b:72:18:69:a3:7e:ac:5e:f2:d5:79:1a:
71:37:b4:7d:a3:3e:dd:f2:75:c9:0e:9d:c6:5a:bf:37:59:ca:
17:d3:d4:49:80:f8:e8:50:65:b1:5b:61:cc:32:6d:8e:ea:1c:
c1:c7:72:b7:af:e2:67:78:5d:c9:2d:95:dd:c1:2a:40:1e:70:
96:79:59:b0:3f:14:70:6c:47:b0:52:cb:d0:8f:bd:73:c0:1d:
c1:95:7c:af:21:c9:39:1d:71:46:40:c5:71:35:2f:56:a7:45:
cc:49:de:f2:f0:09:87:ac:21:69:62:d2:e9:f9:1d:bd:be:9e:
b1:ac:b3:66:06:7a:ac:20:a5:7a:90:b1:0d:c2:6e:d0:c3:07:
e4:39:8f:c3:6b:4a:e4:da:db:43:48:c1:59:42:1f:d0:c8:62:
b4:8f:df:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:33 2023 by rpki-client on console-fra.rpki-client.org