Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/fed39bf16f8372847727378979c1c02557cf59ba.roa
File: fed39bf16f8372847727378979c1c02557cf59ba.roa (raw, json)
Hash identifier: mDvbRCYntj5VOi37dnXRytPjmyOKbXH6pBq4iEV2PMU=
Subject key identifier: 1C:EB:7C:8A:4E:C7:67:19:FA:72:CC:61:AE:7F:AD:D0:8E:90:DC:11
Certificate issuer: /CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Certificate serial: 90BA
Authority key identifier: 84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/fed39bf16f8372847727378979c1c02557cf59ba.roa
Signing time: Wed 02 Feb 2022 00:28:58 +0000
ROA not before: Wed 02 Feb 2022 03:00:00 +0000
ROA not after: Thu 02 Feb 2023 03:00:00 +0000
asID: 3970
IP address blocks: 201.219.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 37050 (0x90ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Validity
Not Before: Feb 2 03:00:00 2022 GMT
Not After : Feb 2 03:00:00 2023 GMT
Subject: CN=fed39bf16f8372847727378979c1c02557cf59ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:0c:9b:ac:22:ca:bd:bf:19:10:ef:c9:97:c7:
29:40:5b:33:3b:35:29:fd:27:8e:b3:34:58:36:a0:
1b:83:f7:de:22:0d:9f:19:61:6a:ab:3f:a1:88:a8:
ca:a1:a9:c5:5d:dd:b1:26:72:b6:32:15:21:24:3f:
73:82:25:7d:8f:9b:e7:9d:5e:e1:64:d3:5e:69:c8:
49:e4:22:c8:37:23:88:dc:05:b0:86:bb:47:9f:12:
ab:c3:c6:e0:f9:0c:07:76:66:23:62:cd:b5:da:a6:
b1:1a:74:55:56:11:01:73:bd:3f:cf:e8:38:0f:94:
4a:13:7c:ed:bb:ab:21:a2:ab:5f:85:47:ba:2b:f3:
05:37:81:98:08:a3:a9:5a:d3:b3:01:15:25:d2:41:
a2:4d:7e:f3:b7:c9:05:ad:4e:40:e1:b8:eb:bd:1b:
04:02:85:f3:be:61:d6:f4:37:2f:14:22:a3:21:f9:
a6:b5:1c:18:c6:27:34:4c:73:f1:b4:3b:f5:06:40:
80:e5:82:19:5a:20:60:f9:da:49:a5:fe:6a:7d:9c:
a7:fa:a8:d4:b4:06:44:27:c3:fa:f5:71:cd:71:8b:
9f:a2:ba:6e:f5:3a:41:eb:88:8b:04:4e:b0:c8:83:
55:63:41:55:00:ae:a2:ed:26:3c:6b:0f:5d:d9:6e:
90:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:EB:7C:8A:4E:C7:67:19:FA:72:CC:61:AE:7F:AD:D0:8E:90:DC:11
X509v3 Authority Key Identifier:
keyid:84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/fed39bf16f8372847727378979c1c02557cf59ba.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.219.253.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:de:d4:d7:04:bd:21:9b:3e:22:e9:ab:fb:cb:73:0f:c1:1f:
bd:80:56:4b:89:52:d4:1e:f0:1f:fe:16:dc:3a:64:e9:29:09:
7e:da:68:6c:d5:ac:d3:d1:6a:6b:88:94:b9:2c:e5:6b:2d:96:
c7:5a:3d:80:21:76:20:9f:cd:c6:24:2b:f2:69:50:aa:e7:f6:
8d:10:d3:95:34:16:d9:66:01:0f:ba:28:ca:b4:3c:98:57:5b:
7e:97:51:42:a1:a7:7c:a9:a0:74:ba:bd:1c:fe:5e:c0:14:b5:
32:5f:a6:fe:7e:8e:87:b5:49:c5:d3:c8:be:31:97:0e:2a:05:
9b:38:66:88:de:e1:38:16:79:25:b6:81:8b:45:d8:39:58:93:
d5:83:f4:86:4e:a7:65:91:c5:98:67:c3:1f:cd:a2:c6:59:e3:
43:72:ec:9b:74:ca:b0:21:53:95:a2:94:20:5f:1e:b6:d9:65:
19:84:aa:a7:45:d5:2c:7b:73:71:4a:da:08:30:46:a6:b0:5e:
36:8f:b3:9c:54:16:3b:bb:2e:d0:08:3b:1c:61:d7:a8:b9:f4:
49:fb:f0:b0:bc:e6:87:0b:d1:6e:3a:b2:4d:1c:2b:b3:29:55:
09:68:21:58:42:5e:78:a0:b7:48:52:74:07:17:e1:fa:96:bb:
86:45:c8:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:48 2023 by rpki-client on console-ams.rpki-client.org