Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/f0d06e2cc2820a83f89a2138b0230b8185afcd15.roa
File: f0d06e2cc2820a83f89a2138b0230b8185afcd15.roa (raw, json)
Hash identifier: ogRwjgS0tGUu5vX9jh4qopsaTC6IkJZaZd7SMsPaEh8=
Subject key identifier: E9:AF:DB:1F:A5:84:98:FA:A7:A9:73:CF:B4:5D:60:97:39:2C:5C:59
Certificate issuer: /CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Certificate serial: 03C34A
Authority key identifier: 84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/f0d06e2cc2820a83f89a2138b0230b8185afcd15.roa
Signing time: Wed 13 Apr 2022 08:03:21 +0000
ROA not before: Wed 13 Apr 2022 03:00:00 +0000
ROA not after: Thu 13 Apr 2023 03:00:00 +0000
asID: 3970
IP address blocks: 201.219.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 246602 (0x3c34a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Validity
Not Before: Apr 13 03:00:00 2022 GMT
Not After : Apr 13 03:00:00 2023 GMT
Subject: CN=f0d06e2cc2820a83f89a2138b0230b8185afcd15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:0c:e3:a2:4c:b1:34:68:15:25:f7:98:41:35:
0b:87:c0:aa:33:39:8b:cb:3d:93:87:22:47:7d:84:
b5:db:77:61:d5:1f:5d:c7:1e:58:d5:67:f5:53:59:
3d:a2:88:97:ca:e3:53:cf:b8:29:fe:ca:b0:88:b8:
51:cb:d7:b1:73:5e:6d:43:d0:c0:8e:23:bc:f6:50:
32:27:e5:04:19:08:1d:c3:e8:3a:41:71:63:2e:dc:
dc:e9:10:09:04:73:88:62:6d:ef:c3:0e:cf:7c:01:
f4:f2:f4:05:92:09:54:e7:ff:f4:c7:c9:ad:be:a5:
25:85:5c:d6:a9:0b:6c:20:88:1a:21:b0:5f:27:c8:
f3:39:82:0e:6c:cb:27:86:1b:08:ec:57:3d:55:32:
65:37:0d:8f:88:8d:6e:bf:60:b9:e3:c4:42:c8:2c:
74:52:79:0e:77:2c:ea:15:8d:d3:a5:b6:22:b1:a9:
04:6a:3f:a8:8a:d9:57:15:f3:41:b7:9c:8d:34:4a:
8d:bb:57:79:43:09:2d:0a:3a:a4:59:c3:f4:81:76:
5b:a1:09:e9:8c:ca:6a:6c:1d:b5:16:10:dd:22:15:
6b:6f:14:3b:0e:76:b9:89:5a:66:b7:ec:a0:c4:17:
0c:28:66:7d:aa:94:6b:23:85:f5:24:1f:00:16:3b:
27:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:AF:DB:1F:A5:84:98:FA:A7:A9:73:CF:B4:5D:60:97:39:2C:5C:59
X509v3 Authority Key Identifier:
keyid:84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/f0d06e2cc2820a83f89a2138b0230b8185afcd15.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.219.253.0/24
Signature Algorithm: sha256WithRSAEncryption
53:b3:82:fb:13:5a:25:6a:9e:d5:8a:b8:33:f0:bb:db:0d:2d:
47:54:96:f6:d8:54:81:07:12:4a:e5:dc:35:a2:c6:60:09:82:
97:57:aa:65:8d:5e:e4:8f:79:9f:fc:48:a9:0f:2a:ae:e2:78:
7e:81:d7:00:bd:a0:7f:2a:06:38:b4:5a:2c:ad:db:fe:1d:a9:
b9:3b:ba:9c:16:9a:c1:2e:b8:c5:75:f9:b2:39:8e:0d:d0:7d:
30:43:5c:c0:3b:56:b7:24:0f:4e:a7:77:7a:e7:03:62:64:93:
20:b7:7e:58:38:35:bc:fa:f8:8b:50:a7:d4:76:3c:23:24:b7:
7d:f3:49:8a:56:f0:67:60:2f:47:4b:53:fe:a2:c9:b7:f6:19:
1e:ba:d9:1d:88:a4:15:ad:30:c3:34:65:26:e2:89:0a:cd:90:
64:60:76:3a:7f:ae:16:81:05:33:b1:f8:9d:2c:e9:20:96:7a:
13:b0:e2:aa:cc:d5:59:2f:2e:93:e2:27:22:aa:86:f1:9e:7f:
7c:76:f3:26:37:dc:e1:d5:16:1c:6b:d4:6b:ac:fe:a1:00:0c:
6a:78:89:51:21:b8:2c:85:21:42:4a:52:81:e3:a6:2a:8f:3d:
1e:b7:d6:d6:cf:4f:b2:f4:02:e8:82:28:bc:30:d4:83:02:01:
0f:c1:86:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:48 2023 by rpki-client on console-ams.rpki-client.org