Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/fb7cdb6ca930965397e62a90bc30334284031611.roa
File: fb7cdb6ca930965397e62a90bc30334284031611.roa (raw, json)
Hash identifier: TZQtTmq/252YfkwW+SoPavfPuMLcRCXq/Rwpd9T5HJ0=
Subject key identifier: CE:D9:CB:2D:27:A7:2D:A0:05:68:B3:CA:89:50:DE:36:5E:3F:BB:8D
Certificate issuer: /CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Certificate serial: 0B0D87
Authority key identifier: 84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/fb7cdb6ca930965397e62a90bc30334284031611.roa
Signing time: Wed 21 Sep 2022 00:25:28 +0000
ROA not before: Wed 21 Sep 2022 03:00:00 +0000
ROA not after: Thu 21 Sep 2023 03:00:00 +0000
asID: 3970
IP address blocks: 201.219.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 724359 (0xb0d87)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Validity
Not Before: Sep 21 03:00:00 2022 GMT
Not After : Sep 21 03:00:00 2023 GMT
Subject: CN=fb7cdb6ca930965397e62a90bc30334284031611
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:e8:61:ed:cf:f9:76:4b:a9:51:52:91:c8:c3:
c1:e6:4f:3e:0a:06:63:bc:7a:4b:9f:62:b8:d3:2e:
ca:c0:20:88:f6:bb:c3:2d:08:ed:d2:ad:8f:64:ed:
e8:0f:d0:10:2c:6b:a9:e4:8b:ba:de:e6:6d:db:7a:
21:57:f5:2e:7b:a0:bd:6b:53:f3:36:e7:d9:05:04:
73:97:ed:5f:41:24:a2:59:47:29:1d:5f:35:49:df:
f6:96:c1:76:a9:d1:17:a5:d3:5b:21:8b:bf:83:be:
49:db:61:29:c1:f6:f5:e8:a7:06:65:0d:d0:92:36:
4e:b7:cd:9d:9c:c6:34:79:63:e7:08:f6:68:66:b3:
eb:47:50:a3:af:b3:65:6a:30:15:7e:6d:d8:0e:73:
25:3c:8e:69:cf:27:ab:c7:07:1b:cc:6d:15:3a:43:
65:fd:71:a4:7e:fa:aa:3f:48:22:58:41:71:09:00:
1b:8d:33:31:98:e1:4d:92:7a:e1:9d:15:8a:eb:ea:
e7:ed:87:b0:e5:ea:11:7a:15:40:80:43:49:9e:71:
ff:98:d8:b1:74:2a:87:4c:d6:cb:ca:c5:0a:8a:bb:
5e:84:41:a6:e1:f9:41:62:56:9d:bf:20:e0:83:1e:
a8:b3:21:9b:25:3e:88:07:1d:aa:cb:c4:14:31:69:
2f:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:D9:CB:2D:27:A7:2D:A0:05:68:B3:CA:89:50:DE:36:5E:3F:BB:8D
X509v3 Authority Key Identifier:
keyid:84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/fb7cdb6ca930965397e62a90bc30334284031611.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.219.253.0/24
Signature Algorithm: sha256WithRSAEncryption
86:8f:d8:14:16:21:43:45:53:5e:b1:98:b3:fa:2f:d1:01:e0:
84:65:bb:8f:fe:0d:a5:0b:fa:c2:74:d3:31:19:91:b3:3d:97:
52:cd:94:1b:f5:53:ad:c8:5b:0c:6c:db:97:6d:94:0a:dc:69:
2f:56:c3:73:5c:5c:d4:fb:dd:d1:c5:b1:8e:27:2a:67:c3:52:
34:14:1e:aa:99:63:b3:15:d7:4d:57:20:fb:d6:bb:65:d2:29:
4b:e2:36:d1:b2:b9:21:5e:28:16:da:98:a0:c2:4a:a2:db:13:
3a:71:1d:71:87:ad:56:da:f7:42:73:a8:78:e6:48:9b:61:db:
a4:89:3f:ab:d6:9e:f5:1f:be:ec:1a:01:10:45:49:cb:6e:96:
58:d6:ca:84:55:0f:49:63:ca:dc:65:16:ce:c0:f4:dd:ef:fc:
87:b1:8f:a1:e3:a0:81:d5:64:58:66:9f:93:96:4a:db:9d:1c:
12:27:8b:07:e7:0a:dd:ac:10:07:64:bc:ba:5d:00:5f:5e:28:
00:c4:ff:58:55:6e:54:c0:81:9c:4d:bb:64:05:9c:ef:12:b8:
1a:03:d3:19:9e:71:f1:4c:77:1a:b5:27:fb:81:87:9a:56:0e:
8c:2d:8e:9c:e3:be:e0:3d:43:b9:e6:fc:38:05:1d:2f:df:10:
4d:45:d2:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:48 2023 by rpki-client on console-ams.rpki-client.org