Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/f0311f42743fb0e2668d52468d59b0aaf5aac11f.roa
File: f0311f42743fb0e2668d52468d59b0aaf5aac11f.roa (raw, json)
Hash identifier: Phsr9Pf1B6RiYXy/4JzWyvSydrxXuyz0q0Z6RHUv1Hk=
Subject key identifier: 2F:1B:65:56:52:61:CB:61:D0:AE:9B:94:93:3B:35:8C:44:DE:17:B7
Certificate issuer: /CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Certificate serial: 041A72
Authority key identifier: 84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/f0311f42743fb0e2668d52468d59b0aaf5aac11f.roa
Signing time: Fri 22 Apr 2022 09:25:24 +0000
ROA not before: Fri 22 Apr 2022 03:00:00 +0000
ROA not after: Sat 22 Apr 2023 03:00:00 +0000
asID: 3970
IP address blocks: 201.219.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 268914 (0x41a72)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Validity
Not Before: Apr 22 03:00:00 2022 GMT
Not After : Apr 22 03:00:00 2023 GMT
Subject: CN=f0311f42743fb0e2668d52468d59b0aaf5aac11f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:70:b2:59:04:d3:95:d5:51:89:7d:68:81:68:
b2:fb:4d:5f:52:39:a7:6e:d5:48:da:2e:70:e2:53:
38:61:a4:b1:be:ff:46:64:d1:38:aa:28:53:4c:9b:
3c:84:66:a7:d4:9a:cf:d3:62:82:30:28:ac:e6:71:
e3:bf:92:9b:8e:94:21:bd:d1:3c:97:a0:86:98:51:
6d:5d:c0:fd:9e:73:9d:b4:35:25:c3:fc:9a:2a:b9:
77:4c:00:bc:24:34:65:15:31:18:4c:1b:08:0d:8c:
93:ed:94:8e:98:1d:e0:63:89:d6:c1:6f:57:25:5e:
12:05:82:70:e3:6a:28:28:c0:2e:3c:f1:b6:4a:a3:
50:ef:40:58:ec:21:ba:f6:5d:f0:c4:81:f8:13:4d:
06:55:c8:ad:d8:9f:b8:19:1f:f0:9d:d6:26:d2:13:
be:cb:b0:91:a8:a6:cb:1d:df:50:c5:e7:8a:df:5d:
ad:15:de:21:c0:32:65:08:47:c9:0e:07:92:42:71:
0d:75:10:33:51:f6:34:7e:b5:e4:2c:26:1d:88:5d:
5c:97:b4:d2:ad:69:96:ab:23:77:b5:0f:d4:65:d3:
7a:44:85:20:fd:0b:35:94:bc:6c:d8:af:af:3c:57:
4b:71:c5:62:de:a2:2c:60:dd:09:61:91:72:98:de:
3d:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:1B:65:56:52:61:CB:61:D0:AE:9B:94:93:3B:35:8C:44:DE:17:B7
X509v3 Authority Key Identifier:
keyid:84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/f0311f42743fb0e2668d52468d59b0aaf5aac11f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.219.253.0/24
Signature Algorithm: sha256WithRSAEncryption
33:5e:83:c9:b8:a0:64:40:eb:34:2b:0e:d8:67:3c:11:34:f6:
9e:91:82:a1:58:24:1d:5c:74:38:a9:90:70:12:2b:bf:43:28:
45:f0:4e:7b:b4:64:2d:da:aa:76:9b:10:55:90:9f:c6:02:a8:
45:ce:fa:81:ac:62:69:85:93:0f:cc:fb:45:41:7e:86:d2:33:
69:d1:96:67:0f:ec:34:cc:20:32:c5:9d:61:aa:22:ec:67:81:
6f:07:ae:78:37:a8:60:05:5b:4d:03:7c:d8:71:5e:10:ea:b8:
db:a1:3c:19:85:c6:8f:a6:9c:54:23:53:17:f5:04:a3:a7:cb:
1d:cb:73:9d:65:ce:87:55:ad:cf:9d:e6:56:98:a8:a9:0b:3a:
2f:04:cc:b7:a6:c7:a0:46:af:ba:cc:40:1c:a3:9a:4f:ee:2a:
9b:cb:3b:d1:14:75:e4:12:aa:71:30:89:e4:ca:73:6f:ff:98:
7d:8d:6c:87:c2:cb:9c:87:74:a0:12:db:77:16:42:78:b9:cb:
dd:81:68:83:6c:e2:2f:de:4c:ed:00:66:c2:3d:8f:c9:9c:b0:
86:36:29:56:48:ac:93:be:97:97:d0:9c:a1:e8:b4:d5:bd:ec:
04:40:db:47:32:db:94:e8:cf:2f:ef:03:d4:b4:81:4a:91:75:
f0:68:b9:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:33 2023 by rpki-client on console-fra.rpki-client.org