Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1B07A4CF9C093D46B15E6B1B09954FE9C8276009074D03772E45261D769271AC/0/AS264668.roa
File: AS264668.roa (raw, json)
Hash identifier: pD2uKirA2CwMITdm/pkEx3Ek5K3aRZo0h0FFdwVjnkk=
Subject key identifier: A5:A5:1C:D8:0A:83:1D:50:4A:54:71:19:20:DF:67:68:5A:88:B0:CE
Certificate issuer: /CN=725E298CCA0B840DB726F60EED140C37FDB23BD6
Certificate serial: 21D99C50AFBA8B7FDDC8722511880287124A2E19
Authority key identifier: 72:5E:29:8C:CA:0B:84:0D:B7:26:F6:0E:ED:14:0C:37:FD:B2:3B:D6
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/725E298CCA0B840DB726F60EED140C37FDB23BD6.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1B07A4CF9C093D46B15E6B1B09954FE9C8276009074D03772E45261D769271AC/0/AS264668.roa
Signing time: Tue 04 Feb 2025 18:07:28 +0000
ROA not before: Tue 04 Feb 2025 18:02:28 +0000
ROA not after: Tue 03 Feb 2026 18:07:28 +0000
asID: 264668
IP address blocks: 181.188.202.0/24 maxlen: 24
181.188.203.0/24 maxlen: 24
181.188.215.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:d9:9c:50:af:ba:8b:7f:dd:c8:72:25:11:88:02:87:12:4a:2e:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=725E298CCA0B840DB726F60EED140C37FDB23BD6
Validity
Not Before: Feb 4 18:02:28 2025 GMT
Not After : Feb 3 18:07:28 2026 GMT
Subject: CN=A5A51CD80A831D504A54711920DF67685A88B0CE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:67:73:51:83:eb:1f:73:94:e6:ba:80:20:0b:
a4:2e:85:bf:a1:f5:ab:5e:ef:6e:25:b0:06:61:bd:
bb:b0:68:33:e1:93:c1:33:0c:e0:c4:f6:cb:83:2b:
2c:2d:e2:33:d2:68:7d:aa:0a:e0:f1:8e:e3:5a:df:
c4:81:33:86:be:7c:a3:5e:47:de:25:70:81:54:94:
01:fa:79:e9:83:a4:db:1d:ab:e5:9b:68:74:6b:a1:
d2:b9:27:0b:71:27:bd:0e:e9:c4:29:66:d5:08:45:
ab:29:e1:68:e0:85:45:99:2d:90:c7:ee:c5:45:45:
03:c3:31:cf:4b:4f:81:12:d4:ea:87:0d:ef:96:26:
15:80:b0:2b:95:ee:54:e0:ee:26:13:90:3c:30:ae:
9e:38:c5:4c:99:fc:ba:74:cd:5f:d2:73:0a:f6:89:
a4:67:35:fa:b6:96:68:74:6a:9a:fa:01:88:c2:cd:
b4:4c:86:f9:5e:e1:3a:69:03:55:7f:1b:de:ce:f2:
5c:c5:98:c2:a4:59:34:c8:e4:0a:c5:c8:ef:9f:06:
3d:f3:dd:d5:72:61:d3:bf:28:e1:50:7e:05:f1:2f:
de:79:0d:64:ae:7b:74:c7:66:9e:07:89:28:c4:c0:
d0:3a:41:1d:5c:bc:75:f6:78:fb:8e:ce:8a:20:87:
6f:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:A5:1C:D8:0A:83:1D:50:4A:54:71:19:20:DF:67:68:5A:88:B0:CE
X509v3 Authority Key Identifier:
keyid:72:5E:29:8C:CA:0B:84:0D:B7:26:F6:0E:ED:14:0C:37:FD:B2:3B:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1B07A4CF9C093D46B15E6B1B09954FE9C8276009074D03772E45261D769271AC/0/725E298CCA0B840DB726F60EED140C37FDB23BD6.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/725E298CCA0B840DB726F60EED140C37FDB23BD6.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1B07A4CF9C093D46B15E6B1B09954FE9C8276009074D03772E45261D769271AC/0/AS264668.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.188.202.0/23
181.188.215.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:65:3a:97:03:7c:e1:d1:26:57:f7:ba:bb:20:2e:fd:ee:32:
f6:bd:ba:a5:8e:a4:43:d8:0b:ca:00:75:e1:fe:69:cd:3e:93:
65:cc:39:a6:43:38:58:5c:f9:72:86:2f:28:5a:12:f5:e7:1f:
50:4c:92:ce:41:1e:59:7a:84:51:94:ac:a6:d3:8c:2c:f7:3f:
f7:2b:78:ae:cf:f5:92:3b:14:04:c3:29:ed:0b:c9:31:9b:83:
3f:a2:05:32:5c:0b:5e:35:58:f8:95:a8:9c:09:b6:75:8b:c5:
81:69:20:1c:9c:47:2e:f2:41:71:28:0e:6c:6d:d2:0a:09:e9:
65:c7:02:8c:59:bc:6f:93:32:57:b5:24:8b:cc:49:f8:12:82:
a9:0f:23:b1:86:d8:d9:ac:e7:d6:1b:21:28:56:5f:a4:5c:46:
89:a7:55:65:69:5e:b6:3e:1e:6c:00:5f:f6:ed:88:75:89:89:
b5:79:7e:20:96:cd:68:39:a6:b7:8e:fa:64:c8:18:9b:d6:81:
50:fd:37:73:0d:3b:5a:c8:37:dc:9e:cf:a5:99:54:bf:0e:d8:
00:bd:9f:eb:a2:20:13:63:5e:26:56:a6:39:2b:81:43:40:a0:
65:e7:63:bf:bd:3f:e9:2e:ad:32:46:2e:dd:24:db:15:11:b4:
be:ee:e4:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:56:42 2025 by rpki-client