Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/f156a0bf93ff0509bccf1349b92a828ef291ab7b.roa
File: f156a0bf93ff0509bccf1349b92a828ef291ab7b.roa (raw, json)
Hash identifier: EAlMshs+3pFlevQr4qs7ihy75wL7mLBbiXkmCoXr0CM=
Subject key identifier: 64:01:98:CB:6C:68:56:D8:FF:EE:79:DF:FA:0A:15:E6:ED:10:6E:1B
Certificate issuer: /CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Certificate serial: 02BB58
Authority key identifier: 84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/f156a0bf93ff0509bccf1349b92a828ef291ab7b.roa
Signing time: Tue 22 Mar 2022 01:48:24 +0000
ROA not before: Tue 22 Mar 2022 03:00:00 +0000
ROA not after: Wed 22 Mar 2023 03:00:00 +0000
asID: 3970
IP address blocks: 201.219.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 179032 (0x2bb58)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Validity
Not Before: Mar 22 03:00:00 2022 GMT
Not After : Mar 22 03:00:00 2023 GMT
Subject: CN=f156a0bf93ff0509bccf1349b92a828ef291ab7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:dc:8c:9d:89:6c:6a:0f:50:bf:fe:89:33:0b:
0d:04:74:39:b0:17:d2:ea:8b:c7:d7:78:db:24:39:
7d:05:0f:56:e9:06:12:65:d7:0f:4a:d7:ea:eb:f6:
69:90:a1:09:1e:c8:64:aa:23:a9:54:20:75:a1:b2:
c0:ec:e8:70:28:0d:55:31:01:b2:4b:9c:2e:39:e0:
58:07:e7:38:b3:da:84:9a:49:8b:d2:3b:a4:14:77:
30:cb:46:41:8d:99:e0:00:05:ed:be:9f:b0:be:96:
5e:b0:6e:11:c5:63:cc:0c:42:60:80:13:4c:e4:aa:
44:d3:c5:10:0a:04:ee:d3:83:75:23:32:f0:3d:02:
dd:67:09:a5:66:3f:5c:c8:03:20:d0:d7:a6:39:2c:
64:b7:87:78:a4:d0:ba:45:69:ba:a2:7d:9c:66:0d:
e3:fb:ac:22:78:dd:9e:bc:6a:fb:67:e4:bc:c3:d4:
d5:59:03:d8:80:c6:1a:41:4c:0c:3f:ae:31:62:d2:
d3:0b:3f:c8:da:6b:4e:90:b2:b6:ae:cb:4c:7a:10:
c9:3d:ae:22:0b:e1:5d:e1:56:76:df:84:eb:ad:f6:
c3:f5:ae:ff:89:5e:60:1d:41:95:d0:e1:c2:83:04:
34:a3:bc:3e:9b:27:29:df:66:e9:13:44:e6:a1:ef:
93:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:01:98:CB:6C:68:56:D8:FF:EE:79:DF:FA:0A:15:E6:ED:10:6E:1B
X509v3 Authority Key Identifier:
keyid:84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/f156a0bf93ff0509bccf1349b92a828ef291ab7b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.219.253.0/24
Signature Algorithm: sha256WithRSAEncryption
25:11:7d:8e:dc:c8:d9:98:95:d4:a2:c2:a0:de:96:82:f5:c0:
a5:c6:a3:4a:e0:87:a7:31:21:df:89:18:67:3c:cc:3b:9b:06:
9f:23:5e:8a:f6:8d:64:fd:fd:e2:a3:95:69:de:54:9f:3d:92:
2a:15:a1:ac:d2:70:66:b3:0b:66:0c:ac:75:ef:2f:ba:9d:b1:
b1:63:9c:c9:0b:6f:ce:d8:d1:12:11:fc:a9:40:04:e7:61:89:
f1:f1:d9:fd:5e:19:b0:02:ad:44:ee:35:ab:83:58:d9:23:43:
53:d2:e1:e4:a6:39:12:82:0f:c8:ae:02:0c:d1:93:ed:11:36:
3a:65:77:99:ad:86:97:bb:b1:4b:39:08:c1:08:b1:18:5d:d7:
9f:c7:04:6a:d9:dc:90:ee:d2:39:eb:aa:6f:f6:f6:63:e1:4e:
32:9e:91:37:31:17:2e:3e:a2:a0:0b:9c:84:8f:8d:20:01:38:
16:80:1c:2a:42:4d:2e:bd:62:64:64:25:6f:de:19:81:d4:1b:
de:1c:0f:99:05:eb:cd:b9:bd:d4:0c:c6:ef:51:b7:52:66:0a:
8b:9d:08:6b:13:df:31:7f:cc:01:7e:26:33:1d:25:ce:3f:64:
87:b6:59:35:31:8f:a1:e2:9b:05:5f:d3:37:7c:ad:45:c5:9e:
20:2d:3b:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:33 2023 by rpki-client on console-fra.rpki-client.org