Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/ffbdfe6f06e07e329d615579a84aa94fd554f41e.roa
File: ffbdfe6f06e07e329d615579a84aa94fd554f41e.roa (raw, json)
Hash identifier: IkPHG+6iqCWITHb19vKrCHTKajitQ40TmsMyYHtW2Sw=
Subject key identifier: 50:E9:20:9E:2A:6C:2C:32:25:B0:A0:31:EF:2A:4E:D3:7F:F0:AF:5A
Certificate issuer: /CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Certificate serial: 08502B
Authority key identifier: 84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/ffbdfe6f06e07e329d615579a84aa94fd554f41e.roa
Signing time: Sun 24 Jul 2022 00:06:37 +0000
ROA not before: Sun 24 Jul 2022 03:00:00 +0000
ROA not after: Mon 24 Jul 2023 03:00:00 +0000
asID: 3970
IP address blocks: 201.219.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 544811 (0x8502b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Validity
Not Before: Jul 24 03:00:00 2022 GMT
Not After : Jul 24 03:00:00 2023 GMT
Subject: CN=ffbdfe6f06e07e329d615579a84aa94fd554f41e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:da:80:47:16:24:12:5e:b1:c5:6b:0c:89:9a:
91:3d:04:83:d7:4e:bf:02:d9:c6:41:23:b4:15:66:
7c:a7:f2:3e:8c:49:75:83:61:10:c4:aa:11:c0:03:
9e:91:6a:a1:c7:d2:34:13:06:f2:e3:e1:6c:da:89:
fd:c0:4d:37:b9:5b:88:a2:4c:99:38:a7:35:f2:30:
f1:41:a6:82:8f:b0:ba:26:98:11:bc:35:d8:fd:d7:
01:e2:06:04:eb:d5:33:6d:12:f6:c1:59:9d:4f:d0:
05:85:34:ed:f4:7c:e2:b0:76:6b:28:07:ea:e5:26:
17:1a:d1:82:3f:82:2e:d5:0d:e7:7c:60:3e:46:23:
c4:83:29:58:32:c7:0c:7d:3c:86:aa:c4:4e:a3:af:
14:8b:76:58:85:f5:d6:87:19:09:b0:c3:f4:19:65:
d9:53:f9:c3:62:09:ed:2f:ff:49:23:f2:23:b0:a5:
be:f2:68:6b:89:01:e7:7a:94:78:db:6b:61:78:37:
5a:42:88:e0:97:96:0e:0b:56:8c:7d:d1:45:2d:16:
ac:14:30:b2:a2:56:2d:b1:a9:76:8c:d5:7f:cd:92:
c4:8c:fd:7e:ee:2f:42:95:8b:fc:e3:b5:59:d6:20:
3b:17:20:7a:5c:8c:80:b9:0c:b1:3a:e0:6f:ac:81:
24:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:E9:20:9E:2A:6C:2C:32:25:B0:A0:31:EF:2A:4E:D3:7F:F0:AF:5A
X509v3 Authority Key Identifier:
keyid:84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/ffbdfe6f06e07e329d615579a84aa94fd554f41e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.219.253.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:9a:2e:7f:8d:a7:4c:cb:d5:65:f1:61:6a:2e:63:6e:bb:83:
a1:e9:b6:d3:ae:25:e4:34:eb:c4:22:4f:68:42:19:d0:a6:80:
1b:4d:62:64:d8:c4:49:4f:1d:e5:d1:f5:03:9e:df:3d:c0:61:
f5:9a:63:cc:d7:1e:26:d9:f1:6f:bd:bf:c2:29:df:b6:98:d5:
d5:7f:d3:49:fb:d8:6c:a7:62:9b:02:b1:e9:7e:aa:b0:16:c5:
78:93:c5:f7:79:27:2f:48:09:87:81:94:aa:b0:d0:d2:5d:62:
7f:54:0a:9c:1b:a2:a9:0c:d5:34:27:00:eb:15:3b:b8:fa:e7:
80:2a:f2:65:1c:98:e9:ea:04:fa:cd:21:99:aa:fa:19:40:25:
d6:54:1f:e0:f6:e5:dd:7c:41:ee:6c:ec:62:65:63:9a:a4:36:
1e:e4:24:5e:a2:cc:5e:10:4d:b4:5e:a7:e6:f8:50:a9:1c:f9:
33:88:c0:3b:88:cf:65:01:c8:4c:d3:a2:12:12:9b:ec:e4:55:
a2:a7:c6:1e:9a:47:15:d1:34:ba:c6:6a:5c:92:67:46:cf:ba:
aa:28:d3:3e:59:c2:41:2d:55:cf:bf:d5:2b:6b:7c:4f:ed:ad:
f7:4a:a2:3b:1d:61:a5:fe:76:29:01:6e:2a:00:ea:bd:05:be:
93:c0:f4:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:18 2024 by rpki-client on console-ams.rpki-client.org