Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/1f3ccce7802ea898ed01bfcc7346d3b31692a543.roa
File: 1f3ccce7802ea898ed01bfcc7346d3b31692a543.roa (raw, json)
Hash identifier: BJXuiaSN6U999e368raebEHZqLQwRIB8CbsR61N0N58=
Subject key identifier: 4A:6D:6D:16:47:12:77:71:8C:CD:34:7B:E1:06:2F:D9:F9:DE:42:90
Certificate issuer: /CN=cf2853cc85c1e55c65e763299ba08894f8ce8d51
Certificate serial: 0E0221
Authority key identifier: 8D:73:C4:77:A1:31:AD:6D:51:67:66:DE:F4:72:CC:2E:60:48:7F:AD
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cf2853cc85c1e55c65e763299ba08894f8ce8d51.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/1f3ccce7802ea898ed01bfcc7346d3b31692a543.roa
Signing time: Wed 24 Mar 2021 14:32:25 +0000
ROA not before: Wed 24 Mar 2021 14:32:25 +0000
ROA not after: Tue 24 Mar 2026 14:32:25 +0000
asID: 264764
IP address blocks: 181.199.210.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 918049 (0xe0221)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf2853cc85c1e55c65e763299ba08894f8ce8d51
Validity
Not Before: Mar 24 14:32:25 2021 GMT
Not After : Mar 24 14:32:25 2026 GMT
Subject: CN=1f3ccce7802ea898ed01bfcc7346d3b31692a543
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ef:4a:2b:3a:e9:09:d3:57:71:c4:9e:bf:48:
86:cf:6a:e9:53:4b:28:4c:c4:95:83:4e:fc:7c:92:
c6:36:ee:c9:8f:2c:21:1e:63:61:7a:f0:ed:e1:01:
8f:f4:84:a2:7f:9e:61:83:13:6b:3a:38:cc:cd:a4:
24:94:d4:ca:1b:e0:f1:b8:19:95:85:49:dd:79:81:
51:50:e7:07:f3:28:8e:9c:1d:b3:62:61:b2:ae:1a:
88:f8:ec:0c:4c:18:17:32:74:27:1a:41:a7:73:1a:
b3:e0:26:df:f9:78:83:76:bc:d2:9b:1f:89:ce:b5:
6c:05:6a:99:be:6b:e3:68:14:34:be:9c:d5:dd:f6:
cd:b5:80:81:23:e2:f7:e8:87:08:c0:92:82:c5:40:
47:b6:66:58:d3:10:66:f1:64:18:21:79:db:e6:ef:
db:1f:aa:d9:f5:8a:d5:63:67:69:7e:5c:ae:71:75:
9b:dd:ab:25:f3:c4:40:0a:e8:f3:ee:c9:f6:44:56:
cb:59:59:f5:0b:8f:55:67:da:b4:75:d0:b7:55:f6:
e3:bd:9b:bf:e9:d8:93:e5:91:7d:50:34:6c:8d:53:
09:d5:ae:d2:91:39:cb:30:05:ae:4c:90:fd:fc:f0:
8a:6b:6f:28:10:74:89:6d:8a:8e:e2:18:6f:21:1d:
de:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:6D:6D:16:47:12:77:71:8C:CD:34:7B:E1:06:2F:D9:F9:DE:42:90
X509v3 Authority Key Identifier:
keyid:8D:73:C4:77:A1:31:AD:6D:51:67:66:DE:F4:72:CC:2E:60:48:7F:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cf2853cc85c1e55c65e763299ba08894f8ce8d51.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/1f3ccce7802ea898ed01bfcc7346d3b31692a543.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/cf2853cc85c1e55c65e763299ba08894f8ce8d51.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.199.210.0/23
Signature Algorithm: sha256WithRSAEncryption
25:48:ba:dd:4c:e5:49:fd:12:c9:af:73:c2:91:15:dd:5d:8d:
c7:e9:d2:46:10:35:21:72:ea:f1:bb:07:61:2c:a0:fe:e1:af:
03:ca:3f:c4:7a:87:bb:04:1e:e8:ca:af:0e:bf:79:c7:ae:a2:
c4:74:47:ef:8e:d3:88:22:8f:e8:a1:79:f6:65:48:aa:af:dc:
d5:ed:2f:fa:d9:a6:32:eb:8c:20:8b:82:8d:65:68:13:f8:c2:
66:f4:cd:7d:67:a9:ce:2b:1a:e5:90:8f:aa:1f:b2:16:7f:f4:
2c:3d:d0:bb:89:bb:d4:eb:a2:83:ab:be:63:92:c1:7e:cf:5a:
d8:8b:f7:1a:b1:f7:66:9d:68:12:da:a2:33:11:c6:6b:c6:6c:
aa:0c:10:c6:ce:21:fe:06:71:2d:3c:e5:cb:6f:26:c6:27:ab:
c0:17:7f:dc:07:d1:f7:ea:f1:b9:d9:17:7e:b1:e1:80:50:21:
9a:f3:54:12:4f:5e:02:e2:b4:ed:a6:af:1f:63:c9:d0:f5:aa:
f4:5b:ad:ca:8d:95:1c:99:22:11:5e:f4:c7:bc:ef:49:42:2a:
e8:5b:51:e9:88:65:cc:36:fa:46:a7:d2:ab:38:88:b9:03:d4:
f7:87:73:8b:aa:26:49:56:06:15:c2:ea:c3:3e:65:d9:aa:53:
3c:f4:2d:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:36 2024 by rpki-client on console-ams.rpki-client.org