Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/AS18747.roa
File: AS18747.roa (raw, json)
Hash identifier: DkuMHNPgEAduLRSFY6npKzlMOGvExyFMicxKewL6tI0=
Subject key identifier: AE:C6:1F:FC:FB:24:4C:24:B9:65:77:18:9A:E8:B7:AF:9C:DE:74:F6
Certificate issuer: /CN=99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50
Certificate serial: 623BF8300D737955F1C66475BEA6F679F6304A96
Authority key identifier: 99:D9:23:A2:52:7D:78:CB:CA:1B:C2:B6:B1:5D:AC:0F:1F:6C:7E:50
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/AS18747.roa
Signing time: Tue 24 Sep 2024 22:10:00 +0000
ROA not before: Tue 24 Sep 2024 22:05:00 +0000
ROA not after: Tue 23 Sep 2025 22:10:00 +0000
asID: 18747
IP address blocks: 181.78.0.0/15 maxlen: 24
181.78.32.0/24 maxlen: 24
181.78.64.0/18 maxlen: 24
181.78.64.0/19 maxlen: 19
181.78.96.0/21 maxlen: 21
181.78.128.0/17 maxlen: 24
181.78.128.0/19 maxlen: 19
181.78.160.0/19 maxlen: 24
181.78.160.0/21 maxlen: 24
181.78.192.0/19 maxlen: 19
181.78.224.0/21 maxlen: 21
181.79.0.0/19 maxlen: 24
181.79.64.0/21 maxlen: 21
181.79.72.0/23 maxlen: 23
181.79.220.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:3b:f8:30:0d:73:79:55:f1:c6:64:75:be:a6:f6:79:f6:30:4a:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50
Validity
Not Before: Sep 24 22:05:00 2024 GMT
Not After : Sep 23 22:10:00 2025 GMT
Subject: CN=AEC61FFCFB244C24B96577189AE8B7AF9CDE74F6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:a5:47:c8:a8:65:9c:16:58:95:58:8b:7d:ad:
bd:2c:5b:b2:56:bc:36:08:57:87:7f:d5:7f:0f:67:
38:8d:81:dc:db:d0:e9:66:96:4e:a2:8e:76:e5:c9:
23:87:d4:c7:e2:5c:11:34:66:60:a1:2a:0e:29:c9:
92:84:06:d7:ac:02:97:c4:7c:dd:cd:69:2c:57:a2:
30:82:6b:4e:ba:32:49:20:be:8a:03:3c:c4:f2:45:
90:da:1f:42:a4:3b:86:2d:cc:4d:6f:67:ce:29:9d:
c3:b6:31:49:78:77:43:1b:e9:88:89:b9:38:3f:97:
6f:72:3e:0d:47:9c:44:79:bd:10:d6:9b:df:0d:5a:
14:0a:29:ef:6c:ab:08:a7:22:d0:2b:8b:47:98:44:
c3:72:d5:18:1f:ca:98:4d:16:e2:57:67:db:af:fa:
93:c1:d9:97:46:98:31:62:36:e6:8d:62:f2:c9:bf:
a0:ac:73:bf:47:71:9d:1b:cf:34:f6:a5:dc:1b:d4:
e2:fe:a5:51:18:64:be:20:53:4c:11:6b:14:d2:d8:
eb:0d:ae:d5:91:be:d1:ab:45:72:3d:af:5c:93:9f:
18:09:d2:18:cc:3c:45:b1:35:2d:a5:a7:73:69:38:
9c:92:58:ab:7b:cd:bf:e4:b1:d6:96:f3:d8:06:11:
79:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:C6:1F:FC:FB:24:4C:24:B9:65:77:18:9A:E8:B7:AF:9C:DE:74:F6
X509v3 Authority Key Identifier:
keyid:99:D9:23:A2:52:7D:78:CB:CA:1B:C2:B6:B1:5D:AC:0F:1F:6C:7E:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/AS18747.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.78.0.0/15
Signature Algorithm: sha256WithRSAEncryption
43:de:dd:a1:f0:75:5a:a2:c2:5c:87:a6:a1:fa:30:c9:91:cd:
c8:a6:9c:1b:27:92:2a:11:83:1a:5d:ac:20:8e:6a:1b:d2:c6:
f2:af:e4:d7:b2:60:db:ba:08:0e:09:63:fc:5c:3f:20:44:e1:
f1:f5:ba:f4:f4:31:d1:2d:13:29:a2:ae:bd:8c:82:a6:0e:0c:
fa:5c:2d:87:02:97:ac:1c:99:93:84:d4:3b:eb:1a:f5:93:e0:
94:b9:2b:a7:a4:16:11:bb:9c:2f:b7:b9:be:63:a1:7b:4c:a3:
0a:72:2c:43:d0:a4:ab:c4:4a:74:fd:a4:8d:1f:23:74:8d:16:
a1:a0:15:d9:91:f6:56:32:63:5e:06:33:4a:0e:7d:ac:80:f1:
b3:7b:f8:37:96:45:bc:c6:3d:74:e6:ad:e5:c5:70:a7:d3:d8:
e3:29:f8:a3:c0:40:22:69:b3:93:fa:dc:b8:6c:69:55:21:10:
b5:ba:e8:c8:59:ee:16:55:41:aa:1a:ba:35:c2:3d:98:ca:65:
6c:6b:46:22:f3:95:08:5a:d7:ee:01:ed:df:cc:04:6d:e1:2a:
7d:02:5f:3c:b0:64:56:54:40:bf:29:3a:70:40:25:66:c4:a3:
b8:36:cd:d3:06:66:30:62:ca:4d:81:87:c6:1f:38:7e:e9:c0:
ce:3d:0f:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:12:56 2025 by rpki-client