Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/f38f143d6fe5776895da2181f9181884cb664319.roa
File: f38f143d6fe5776895da2181f9181884cb664319.roa (raw, json)
Hash identifier: Zh5tN2iRu6hCvBrq6GchcLBlHWiulPukaYITtdnyvSM=
Subject key identifier: 3D:52:5C:43:0A:2F:F7:B3:16:A1:D7:BC:22:D3:41:4B:4A:DB:F3:C1
Certificate issuer: /CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Certificate serial: 0AA2E3
Authority key identifier: 84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/f38f143d6fe5776895da2181f9181884cb664319.roa
Signing time: Mon 12 Sep 2022 01:12:37 +0000
ROA not before: Mon 12 Sep 2022 03:00:00 +0000
ROA not after: Tue 12 Sep 2023 03:00:00 +0000
asID: 3970
IP address blocks: 201.219.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 697059 (0xaa2e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Validity
Not Before: Sep 12 03:00:00 2022 GMT
Not After : Sep 12 03:00:00 2023 GMT
Subject: CN=f38f143d6fe5776895da2181f9181884cb664319
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:e2:20:1d:22:15:b4:b4:71:a0:fd:20:33:18:
18:12:3f:45:2c:97:a1:fb:33:e3:44:64:46:2e:c3:
8f:fa:ad:bf:d3:5e:f5:43:76:66:08:b6:57:59:ab:
02:80:6e:ba:6a:53:0c:59:b2:0e:4e:94:17:c6:d0:
41:09:87:85:1f:11:08:5a:d6:dc:94:21:48:27:00:
c6:a1:97:61:98:15:3b:58:28:10:db:39:00:54:80:
82:ec:40:69:05:77:0e:a9:c7:d4:8b:7d:1e:3f:54:
a6:1b:30:28:0f:2b:6a:12:eb:a8:94:a0:21:6d:e1:
78:e2:4b:13:36:0a:96:d1:fc:58:17:f3:b1:23:cf:
2e:48:98:e9:c2:bd:b8:e2:30:4d:03:9e:8b:43:b6:
89:c5:da:9b:d0:4c:ee:32:86:39:ed:af:04:20:83:
21:3a:8e:d9:02:d2:57:c6:0b:15:ca:21:24:4e:64:
d0:9e:38:2b:7e:56:e5:5a:66:5c:fe:f4:be:11:50:
f9:c0:55:f8:ae:1b:21:9e:6d:37:6b:66:f0:65:ef:
a9:0e:03:60:79:83:1a:d6:46:5b:89:05:33:07:2f:
24:cf:53:75:c3:54:f3:a2:01:57:29:02:f5:03:e9:
4d:cd:dc:26:7d:eb:75:93:cf:7a:3b:4b:9d:c6:a7:
26:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:52:5C:43:0A:2F:F7:B3:16:A1:D7:BC:22:D3:41:4B:4A:DB:F3:C1
X509v3 Authority Key Identifier:
keyid:84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/f38f143d6fe5776895da2181f9181884cb664319.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.219.253.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:ce:79:8c:a2:31:4b:d5:3d:38:03:da:7d:ed:0c:a6:68:70:
33:6d:af:66:57:05:76:d8:b1:24:b5:9f:23:59:47:90:cf:9e:
7e:86:94:f1:2d:25:97:b1:31:eb:e5:eb:39:0e:86:95:c8:79:
2a:d7:14:f3:64:db:23:c3:5b:1e:04:36:c9:9c:bc:50:c4:c1:
50:ed:19:b1:3e:a2:24:21:fa:50:fd:94:c8:c0:99:49:98:d5:
2b:83:91:2d:e1:b9:11:a0:5c:2e:0c:1e:2d:84:c8:76:a4:a6:
cd:34:b7:86:b2:52:79:f8:28:03:d9:bf:e6:fe:9e:99:70:6a:
9c:d2:ec:fe:a9:f3:08:8b:19:b9:f1:a0:5b:59:0b:93:b8:f3:
62:fc:d7:66:7e:cd:25:f8:45:ce:b6:51:a4:c0:21:71:9f:ae:
f6:f4:ea:64:e5:94:88:ee:da:79:0f:c8:5c:94:14:db:71:84:
bd:88:39:5e:15:e3:36:03:9c:dc:30:c2:a8:45:69:28:62:ef:
cf:82:b5:37:ff:ac:11:7c:df:ec:62:75:6c:8d:7b:fa:57:af:
97:64:c6:e1:94:21:ca:75:10:f1:6b:a7:3f:cf:b5:9d:1b:a1:
11:1f:14:98:74:a4:7d:c0:cd:c9:24:ec:60:e9:d4:0d:c9:33:
80:28:e7:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:48 2023 by rpki-client on console-ams.rpki-client.org