Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/ef573b26bca1288572b50c926c1ebc96996bc8b6.roa
File: ef573b26bca1288572b50c926c1ebc96996bc8b6.roa (raw, json)
Hash identifier: 5VlRXLpU5/gmhKUedQkM4ECoRhD2vEK3cEy0dR00yTY=
Subject key identifier: 37:CA:77:2F:DF:DE:27:49:CF:51:AA:86:B4:7B:8D:28:35:17:2B:A9
Certificate issuer: /CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Certificate serial: 024998
Authority key identifier: 84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/ef573b26bca1288572b50c926c1ebc96996bc8b6.roa
Signing time: Fri 11 Mar 2022 00:24:55 +0000
ROA not before: Fri 11 Mar 2022 03:00:00 +0000
ROA not after: Sat 11 Mar 2023 03:00:00 +0000
asID: 3970
IP address blocks: 201.219.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 149912 (0x24998)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Validity
Not Before: Mar 11 03:00:00 2022 GMT
Not After : Mar 11 03:00:00 2023 GMT
Subject: CN=ef573b26bca1288572b50c926c1ebc96996bc8b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:14:36:b6:b5:c9:6d:e8:cb:8f:05:ab:a0:fb:
cf:cd:03:ae:5a:a9:d8:d2:fc:2f:27:0d:1a:3c:83:
6f:9b:9f:04:c2:4f:c7:36:29:b2:06:34:1d:f8:48:
02:a7:88:ce:27:33:46:83:2c:13:5c:f5:a7:79:1f:
84:98:49:e4:6f:62:cb:9b:54:6b:b1:8b:de:58:d1:
15:cc:2c:33:d8:3f:22:3d:74:e7:ba:b2:2b:f2:33:
4c:00:36:8e:f8:bc:65:4f:7d:41:e4:f3:c5:a9:31:
37:d9:c4:a9:68:97:7f:00:a9:5d:a6:71:9d:de:d6:
f5:d5:54:82:53:55:a9:e6:f6:dc:18:74:9f:fc:88:
02:ee:95:1e:34:f7:f4:85:ab:a5:50:42:6f:06:28:
84:25:1e:47:e9:25:ab:32:b7:43:c4:13:d7:e2:a3:
52:a6:a6:a2:ab:ee:30:0c:10:ad:e1:e2:71:60:6d:
9c:3a:b6:fe:b3:0e:f8:22:16:fc:e6:38:6c:41:95:
e4:84:09:24:fc:f2:fc:71:d5:70:1b:7c:fc:3b:94:
09:bc:72:39:b1:04:d8:30:e8:f0:77:a7:13:c3:51:
d8:91:b3:c9:10:ab:a7:47:d9:2d:d3:be:80:db:81:
b9:40:44:d9:d6:c5:bc:6a:26:d9:bf:fd:6f:e6:59:
86:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:CA:77:2F:DF:DE:27:49:CF:51:AA:86:B4:7B:8D:28:35:17:2B:A9
X509v3 Authority Key Identifier:
keyid:84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/ef573b26bca1288572b50c926c1ebc96996bc8b6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.219.253.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:b6:6d:28:06:c1:b8:70:5b:7f:34:dd:b5:22:b2:ff:05:cf:
16:4a:15:ce:62:b0:22:04:1d:f1:a3:54:1a:8d:a0:f3:e9:3d:
98:ed:d8:37:04:79:9f:ae:7e:ee:7f:e8:72:8c:bc:f0:f6:99:
cc:b9:34:14:29:8f:c8:8e:dc:de:95:be:8d:e7:48:f3:da:60:
4c:75:46:bc:a5:50:3b:ec:56:84:9c:57:cc:2d:7c:db:aa:a2:
66:ae:8c:91:d8:e7:18:14:19:52:19:01:b7:68:a0:c0:19:ad:
2f:ce:4b:38:78:e3:58:74:54:c2:01:b8:d5:37:23:5a:71:3c:
61:57:18:b0:0a:d4:64:02:7d:25:3d:99:22:e9:3d:7c:3a:93:
d7:54:e3:07:55:b2:ad:ce:d8:29:c7:1f:3b:36:f3:2c:f8:0f:
00:34:1f:ec:db:96:49:e3:c7:3d:e2:0e:71:c4:f7:55:87:62:
8c:c0:fe:ea:18:92:93:82:73:5f:06:37:fc:c6:dd:f1:22:da:
ea:61:cb:0b:90:ad:09:bb:ef:d7:5d:60:1f:03:08:25:7b:08:
c4:4e:0b:69:9d:22:0a:37:54:db:72:d4:5c:8f:c6:de:41:c9:
3c:f4:e5:a3:32:33:82:8e:95:4b:63:63:ea:f0:44:67:bf:58:
25:02:72:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:48 2023 by rpki-client on console-ams.rpki-client.org