Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/AS52468.roa
File: AS52468.roa (raw, json)
Hash identifier: Fni2cp0n+UofZxgoNymv9EO/BR1H014KViJOr/YYHNw=
Subject key identifier: 40:CE:49:6B:7B:80:0E:70:66:95:2D:57:11:05:F5:9B:FB:B1:4A:D6
Certificate issuer: /CN=99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50
Certificate serial: 367E7282006C1D45E3608BBFC9B3BD2F23F9621F
Authority key identifier: 99:D9:23:A2:52:7D:78:CB:CA:1B:C2:B6:B1:5D:AC:0F:1F:6C:7E:50
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/AS52468.roa
Signing time: Wed 29 Jan 2025 17:25:00 +0000
ROA not before: Wed 29 Jan 2025 17:20:00 +0000
ROA not after: Wed 28 Jan 2026 17:25:00 +0000
asID: 52468
IP address blocks: 181.78.0.0/19 maxlen: 24
181.78.40.0/23 maxlen: 24
181.78.42.0/23 maxlen: 24
181.78.44.0/23 maxlen: 24
181.78.48.0/21 maxlen: 24
181.78.56.0/22 maxlen: 24
181.78.60.0/23 maxlen: 24
181.78.62.0/23 maxlen: 24
181.78.64.0/19 maxlen: 24
181.78.64.0/20 maxlen: 24
181.78.75.160/29 maxlen: 29
181.78.75.240/28 maxlen: 28
181.78.80.0/21 maxlen: 24
181.78.88.0/22 maxlen: 24
181.78.92.0/22 maxlen: 24
181.78.96.0/23 maxlen: 24
181.78.98.0/23 maxlen: 24
181.78.100.0/22 maxlen: 24
181.78.104.0/21 maxlen: 24
181.78.112.0/21 maxlen: 24
181.78.120.0/21 maxlen: 24
181.78.120.0/24 maxlen: 24
181.78.121.0/24 maxlen: 24
181.78.122.0/24 maxlen: 24
181.78.123.0/24 maxlen: 24
181.78.124.0/24 maxlen: 24
181.78.125.0/24 maxlen: 24
181.78.126.0/24 maxlen: 24
181.78.127.0/24 maxlen: 24
181.78.192.0/20 maxlen: 24
181.78.195.192/26 maxlen: 26
181.78.208.0/21 maxlen: 24
181.78.216.0/23 maxlen: 24
181.78.218.0/24 maxlen: 24
181.78.219.0/24 maxlen: 24
181.78.224.0/24 maxlen: 24
181.79.80.0/20 maxlen: 24
181.79.96.0/22 maxlen: 24
181.79.192.0/24 maxlen: 24
181.79.193.0/24 maxlen: 24
181.79.194.0/24 maxlen: 24
181.79.195.0/24 maxlen: 24
181.79.196.0/24 maxlen: 24
181.79.197.0/24 maxlen: 24
181.79.198.0/24 maxlen: 24
181.79.199.0/24 maxlen: 24
181.79.200.0/24 maxlen: 24
181.79.201.0/24 maxlen: 24
181.79.202.0/23 maxlen: 24
181.79.204.0/23 maxlen: 24
181.79.206.0/23 maxlen: 24
181.79.208.0/22 maxlen: 24
181.79.217.0/24 maxlen: 24
181.79.220.0/24 maxlen: 24
181.79.221.0/24 maxlen: 24
181.119.64.0/24 maxlen: 24
181.119.66.0/23 maxlen: 24
181.119.68.0/23 maxlen: 24
181.119.70.0/24 maxlen: 24
181.119.82.0/23 maxlen: 24
181.119.84.0/22 maxlen: 24
181.119.88.0/21 maxlen: 24
181.119.96.0/20 maxlen: 24
181.119.113.0/24 maxlen: 24
181.119.114.0/23 maxlen: 24
181.119.122.0/24 maxlen: 24
181.119.124.0/23 maxlen: 24
181.119.126.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:7e:72:82:00:6c:1d:45:e3:60:8b:bf:c9:b3:bd:2f:23:f9:62:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50
Validity
Not Before: Jan 29 17:20:00 2025 GMT
Not After : Jan 28 17:25:00 2026 GMT
Subject: CN=40CE496B7B800E7066952D571105F59BFBB14AD6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:ea:f7:b8:04:95:b5:fd:9a:07:84:1a:59:65:
a5:bd:2c:bb:cb:15:05:03:b6:85:ca:a8:fe:c0:2a:
82:45:01:09:04:d1:18:8c:55:63:af:1f:de:c7:51:
a3:3b:bb:99:7f:ad:2f:4e:d1:88:79:d7:31:b6:7a:
46:1f:bf:ba:44:95:fd:4c:56:25:f1:5a:8f:f3:64:
aa:1b:c5:47:20:cf:08:a9:9f:e4:a2:63:62:d7:08:
0d:33:d9:ad:50:21:17:95:51:d2:df:d2:93:2f:77:
03:f2:d1:4e:a8:e6:93:0b:f2:42:b5:d0:d4:9e:4a:
c7:88:bf:f7:b5:05:70:b0:36:9f:24:34:b4:3b:0c:
10:5d:ed:a2:34:d0:cd:b4:df:4e:95:bb:58:c5:e2:
9d:7d:08:d9:e7:4b:fd:c1:b6:3f:f4:3b:4a:31:4f:
24:fc:26:08:34:c0:e7:87:32:e9:d1:7a:01:84:0f:
67:ea:05:16:0d:12:87:ee:f3:b1:4d:c7:a3:0c:4c:
1f:f4:4d:b9:3a:39:d3:4b:16:3b:be:bc:cd:8a:fb:
1a:58:c6:e0:c8:c6:6a:3a:6b:d7:13:43:f2:74:d4:
a3:1c:9f:0e:c5:64:16:b5:34:17:64:0f:06:29:56:
f0:84:e0:2d:9c:21:f1:15:5b:a6:19:b8:8d:60:75:
48:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:CE:49:6B:7B:80:0E:70:66:95:2D:57:11:05:F5:9B:FB:B1:4A:D6
X509v3 Authority Key Identifier:
keyid:99:D9:23:A2:52:7D:78:CB:CA:1B:C2:B6:B1:5D:AC:0F:1F:6C:7E:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/AS52468.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.78.0.0/19
181.78.40.0-181.78.45.255
181.78.48.0-181.78.127.255
181.78.192.0-181.78.219.255
181.78.224.0/24
181.79.80.0-181.79.99.255
181.79.192.0-181.79.211.255
181.79.217.0/24
181.79.220.0/23
181.119.64.0/24
181.119.66.0-181.119.70.255
181.119.82.0-181.119.111.255
181.119.113.0-181.119.115.255
181.119.122.0/24
181.119.124.0-181.119.126.255
Signature Algorithm: sha256WithRSAEncryption
97:ad:68:b2:33:f9:0b:6c:0e:2f:17:33:0c:42:67:41:e9:f5:
35:39:ee:a0:fc:80:ac:22:eb:bf:d2:55:31:86:ee:54:95:b7:
22:d8:30:f6:9b:d1:c9:38:ef:81:1a:68:bb:38:a3:30:cb:a0:
b4:3c:d0:b7:cb:12:bc:d2:fa:d6:23:fe:a3:74:9a:c9:ee:16:
99:7f:be:9b:ea:4a:6d:b2:09:47:4c:3b:d8:95:ac:b8:dc:65:
25:76:99:aa:31:ea:76:fd:63:66:89:9d:aa:b4:0f:a4:d7:94:
9f:13:8e:a2:c6:5a:0f:02:9e:f2:9d:cd:2b:d0:f4:9f:df:29:
9b:4d:85:fe:ae:84:72:3b:11:13:eb:ea:e0:67:84:c5:7c:af:
40:33:19:6a:59:9d:c0:7a:54:de:be:15:e3:f4:08:3d:f0:22:
c6:7d:e1:10:5f:3c:44:3e:c7:61:a9:28:97:59:21:03:ae:04:
76:df:d7:72:46:34:26:91:a4:64:e0:dc:96:5d:7d:da:05:9b:
ae:8b:8b:41:77:4b:06:e8:de:b1:6c:65:82:10:0d:92:98:fb:
a9:ff:4c:ea:0a:f2:ed:51:63:29:ce:b1:5d:69:13:6e:27:4b:
16:44:82:66:65:91:13:c7:1e:b3:14:93:ae:63:5d:bf:56:96:
6c:0c:85:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:10:23 2025 by rpki-client