Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/f24d7fce8276ebceeaec0156e942e2d52b461788.roa
File: f24d7fce8276ebceeaec0156e942e2d52b461788.roa (raw, json)
Hash identifier: ArPTj+u8HVbj1K6f4l+oK1QxWNM/d4n3ZjfSyKuSQxU=
Subject key identifier: E4:8B:AB:55:91:1E:79:D7:76:17:70:46:9B:77:F2:F4:05:4F:01:FF
Certificate issuer: /CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Certificate serial: 02212B
Authority key identifier: 84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/f24d7fce8276ebceeaec0156e942e2d52b461788.roa
Signing time: Tue 08 Mar 2022 00:08:39 +0000
ROA not before: Tue 08 Mar 2022 03:00:00 +0000
ROA not after: Wed 08 Mar 2023 03:00:00 +0000
asID: 3970
IP address blocks: 201.219.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 139563 (0x2212b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Validity
Not Before: Mar 8 03:00:00 2022 GMT
Not After : Mar 8 03:00:00 2023 GMT
Subject: CN=f24d7fce8276ebceeaec0156e942e2d52b461788
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:24:21:a7:d5:05:0d:04:13:d0:22:2f:f6:23:
bb:2f:46:27:af:a4:79:ee:d6:1e:23:49:c9:80:62:
39:11:5f:6b:7e:f2:14:75:6d:31:85:76:34:54:15:
5e:70:ee:b5:56:3c:f8:a4:25:9a:92:29:bc:dd:1b:
66:e2:27:c0:c5:73:08:6d:92:3c:6b:29:d8:fc:f0:
33:7d:95:c0:37:90:1a:99:e5:9a:b5:bd:84:e8:dd:
15:b6:09:18:ea:37:3e:d0:6f:43:a0:09:23:7e:b0:
9f:93:6e:8b:d3:4d:f3:ba:ec:ef:40:5d:d8:84:01:
8c:cc:10:7f:4c:e0:32:47:fe:db:ea:7f:0e:39:92:
c9:08:64:85:ad:e3:a1:6d:8a:65:e5:f3:f0:cf:9e:
3b:41:cc:b1:b0:75:4b:00:d5:80:f9:8f:16:b4:06:
8a:b4:53:4e:91:e5:dc:b0:50:85:9a:f9:df:1a:55:
e9:82:08:15:5b:19:d8:d8:51:43:13:ed:c3:c1:05:
d1:99:3c:63:b3:c7:1d:7a:54:2b:75:43:42:b8:a6:
77:cd:e7:85:20:6d:80:69:31:be:94:8b:63:36:c0:
73:94:70:1d:ef:e8:b9:61:49:ca:12:e6:f6:da:79:
a9:80:c0:1d:14:38:ba:7b:15:8b:eb:bb:e6:d9:0d:
85:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:8B:AB:55:91:1E:79:D7:76:17:70:46:9B:77:F2:F4:05:4F:01:FF
X509v3 Authority Key Identifier:
keyid:84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/f24d7fce8276ebceeaec0156e942e2d52b461788.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.219.253.0/24
Signature Algorithm: sha256WithRSAEncryption
07:d0:32:52:27:a1:0b:fd:c4:bd:57:78:fe:1a:f0:16:b6:63:
28:12:33:bb:a8:3a:e7:27:93:d3:65:ba:d0:8b:13:3f:7b:88:
af:5c:76:4f:41:0c:d0:7f:28:14:c0:0e:cc:cd:37:fd:7d:00:
3c:8a:7f:6f:3a:f5:da:ef:60:6d:95:aa:52:d9:eb:f3:2b:4c:
8a:d4:cb:d3:1f:31:95:d4:fe:bb:b8:ea:73:31:02:17:d2:6a:
a8:a2:c4:2f:37:ab:67:0f:5e:7e:49:39:82:c8:63:48:30:45:
92:9c:5e:43:01:ba:81:21:1a:af:2c:1f:60:64:2d:09:c3:90:
1c:a0:ee:be:ee:6f:f5:b7:45:05:5f:c0:96:c5:9b:47:77:01:
ba:59:a2:22:95:10:c7:bb:74:47:da:5f:34:5b:a5:13:16:b6:
30:ae:12:f5:a8:c3:2d:2a:a4:54:60:cb:87:d9:8a:24:0a:c5:
97:65:95:e4:c3:9b:ea:6d:7d:90:48:12:4b:07:3f:a4:f8:06:
9b:62:95:11:ca:27:72:ff:57:ed:a0:a2:f6:a0:5a:cc:a7:f5:
f4:a7:22:73:55:e0:92:73:76:b8:8d:e1:f2:c1:a1:45:7d:66:
57:f2:88:20:de:db:f9:bc:a4:c9:9d:92:52:ad:bf:6f:3e:f7:
ed:8a:83:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:48 2023 by rpki-client on console-ams.rpki-client.org