Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/AS27819.roa
File: AS27819.roa (raw, json)
Hash identifier: iPfKiDYuKKOY0O0sey72xIMhy60GFh2Ts0aWQLT6cAU=
Subject key identifier: A6:18:36:E8:AB:F5:09:2F:4D:1B:3B:B1:71:A2:53:6A:35:50:0B:37
Certificate issuer: /CN=5D158BE61CA911BC34A887005B96056F4C474B1E
Certificate serial: 45B4773BE66798365610FD2EAA8A333702BCFE1B
Authority key identifier: 5D:15:8B:E6:1C:A9:11:BC:34:A8:87:00:5B:96:05:6F:4C:47:4B:1E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/AS27819.roa
Signing time: Tue 04 Feb 2025 18:02:40 +0000
ROA not before: Tue 04 Feb 2025 17:57:40 +0000
ROA not after: Tue 03 Feb 2026 18:02:40 +0000
asID: 27819
IP address blocks: 201.218.194.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:b4:77:3b:e6:67:98:36:56:10:fd:2e:aa:8a:33:37:02:bc:fe:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5D158BE61CA911BC34A887005B96056F4C474B1E
Validity
Not Before: Feb 4 17:57:40 2025 GMT
Not After : Feb 3 18:02:40 2026 GMT
Subject: CN=A61836E8ABF5092F4D1B3BB171A2536A35500B37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:af:d7:03:75:30:79:31:8f:ee:ea:74:02:47:
d6:ea:1b:41:9f:a0:3f:ef:8a:fa:08:e4:67:7a:14:
21:df:a7:53:11:ba:38:45:e7:76:90:e8:fc:1f:3a:
3c:ec:a5:d7:3d:07:ee:8b:21:67:6d:3a:12:48:0c:
f2:8c:da:8c:cc:f6:4d:71:c9:bf:86:78:f5:ad:68:
68:f4:1d:7c:06:5f:4b:3d:f8:0a:e4:5c:82:aa:14:
38:e2:5d:3d:a9:47:b2:7f:99:a5:18:83:70:2c:50:
e7:56:37:e9:1b:95:49:c1:ef:b5:ac:34:9f:16:b5:
57:22:e0:b2:21:24:d7:b3:b2:7e:3d:20:b4:82:42:
e9:be:73:ea:44:ac:15:9e:85:23:b7:6c:18:d2:2a:
fe:35:42:d1:7e:87:a1:c0:4e:e4:1d:9e:e9:ab:0e:
48:a2:9c:df:0d:cb:dd:4e:c1:96:75:34:68:ce:76:
f3:2d:35:f8:69:2e:04:84:5b:fa:29:35:30:73:51:
0d:b4:7d:fc:98:ad:d0:2d:46:f0:fa:5b:70:0b:44:
d5:58:47:bb:7e:32:69:9f:6b:6f:ba:a0:01:3e:6d:
9d:24:49:bd:1d:dd:46:9d:90:5b:47:65:59:1b:d3:
0c:2a:60:e0:0a:95:df:43:c9:b7:af:4d:ee:3b:bc:
a0:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:18:36:E8:AB:F5:09:2F:4D:1B:3B:B1:71:A2:53:6A:35:50:0B:37
X509v3 Authority Key Identifier:
keyid:5D:15:8B:E6:1C:A9:11:BC:34:A8:87:00:5B:96:05:6F:4C:47:4B:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/AS27819.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.218.194.0/24
Signature Algorithm: sha256WithRSAEncryption
46:90:1a:74:e8:4d:6a:e1:fa:72:9a:4f:1e:b6:94:bd:a1:92:
e5:bd:16:0e:25:58:46:46:07:1a:32:a8:8a:f1:8a:d9:1f:ec:
99:5a:2b:cc:65:05:fa:c3:8f:e7:2f:42:3e:ef:1b:b8:18:09:
9d:88:26:44:ab:5a:66:d1:8e:7b:f1:f7:b0:d9:1a:55:1d:a3:
0c:5e:14:07:71:54:b6:97:ab:49:2c:2f:44:34:fd:5b:a3:6b:
74:79:69:55:17:70:b0:88:7a:6d:5e:c6:de:5e:68:d9:0e:7e:
3c:b3:0b:f8:1e:67:55:0a:db:0f:d1:83:09:22:b4:b9:c0:6f:
c5:fb:c0:ab:95:5f:43:05:96:e8:73:04:3b:a8:5a:cd:d6:39:
a8:8b:f3:2b:55:5c:85:33:6a:d9:d3:46:1b:f0:9a:ce:32:c0:
5b:35:ea:32:16:26:19:7a:1e:98:c5:51:fa:85:21:87:06:fb:
0b:d3:1f:d0:6c:ef:ca:c3:80:65:e3:c9:c6:9c:46:03:6a:eb:
c9:7a:58:15:77:bb:8e:f8:59:a9:94:cd:e4:94:61:8f:ee:aa:
ad:d6:90:79:6c:1d:8b:e9:6a:7a:c7:7b:45:7c:44:1b:96:2a:
d6:89:cd:cb:bd:69:e7:40:34:95:29:59:ff:4f:83:9a:6c:c9:
fb:16:27:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 12:59:35 2025 by rpki-client