Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d0fc6cda-e55e-4753-9c1b-3d65fa12c009/dabe95343822d63ca112e2a59931fab1edc8212c.roa
File: dabe95343822d63ca112e2a59931fab1edc8212c.roa (raw, json)
Hash identifier: VIFp5AzKXDaJUDQLtfnoKQm/EkKqkhulKtuoIBXTUh0=
Subject key identifier: B2:9E:ED:90:B6:DF:99:A3:BF:3E:50:DF:BC:2F:6E:2B:8B:AD:2F:21
Certificate issuer: /CN=2f53f8bd7b3bbee9e49400d913e37c2f6eb10bdd
Certificate serial: 1BFABB
Authority key identifier: 54:86:A0:70:8A:EA:8F:83:DE:61:E5:CB:41:C7:82:FF:1E:6E:AA:32
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2f53f8bd7b3bbee9e49400d913e37c2f6eb10bdd.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/d0fc6cda-e55e-4753-9c1b-3d65fa12c009/dabe95343822d63ca112e2a59931fab1edc8212c.roa
Signing time: Thu 08 Jun 2023 02:29:25 +0000
ROA not before: Wed 07 Jun 2023 02:29:25 +0000
ROA not after: Sun 08 Jun 2025 02:29:25 +0000
asID: 262253
IP address blocks: 181.224.225.0/24 maxlen: 24
181.224.226.0/23 maxlen: 24
181.224.228.0/23 maxlen: 24
181.224.231.0/24 maxlen: 24
181.224.232.0/24 maxlen: 24
181.224.235.0/24 maxlen: 24
181.224.236.0/22 maxlen: 24
181.224.240.0/20 maxlen: 24
2803:2500::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1833659 (0x1bfabb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f53f8bd7b3bbee9e49400d913e37c2f6eb10bdd
Validity
Not Before: Jun 7 02:29:25 2023 GMT
Not After : Jun 8 02:29:25 2025 GMT
Subject: CN=dabe95343822d63ca112e2a59931fab1edc8212c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:fa:d4:fa:3f:18:7e:8a:5f:02:fa:37:21:75:
81:eb:ff:62:10:70:ca:cc:08:13:19:15:33:ce:30:
4e:9e:8b:70:1a:81:97:6d:0f:3b:74:43:06:85:17:
01:ce:23:e4:c0:06:6c:37:b1:55:30:7e:25:42:92:
70:84:53:7b:9d:20:bb:68:40:0f:ee:d3:7c:e9:74:
42:b6:22:76:1a:cb:2f:2b:4d:97:a9:2d:f2:2b:e7:
3d:78:5b:d8:ad:ef:7d:21:dd:03:28:d1:ec:65:09:
08:19:44:75:2c:e1:cf:cf:d5:62:c9:95:46:f2:4d:
48:b5:19:c1:08:03:16:53:cd:d2:af:e3:db:1a:84:
15:a7:a2:6b:37:7b:e5:ac:72:ef:19:e3:6a:66:27:
91:31:e4:ed:f2:ef:83:bb:56:bd:44:1e:f5:c1:b7:
c5:5d:dd:a3:2b:7e:c3:84:86:53:47:94:22:b6:85:
4c:d0:f7:c0:e0:8a:1a:c2:53:45:40:40:98:64:2c:
da:86:12:34:fe:88:db:ea:b4:b4:3e:8b:f5:bb:3d:
5f:63:19:90:76:e2:60:97:1b:dd:31:df:59:9a:79:
29:3c:f4:c8:e4:ea:7e:d5:64:cb:29:70:77:47:42:
33:97:3c:42:6f:28:e3:88:53:1e:6a:b4:1b:b5:c8:
a5:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:9E:ED:90:B6:DF:99:A3:BF:3E:50:DF:BC:2F:6E:2B:8B:AD:2F:21
X509v3 Authority Key Identifier:
keyid:54:86:A0:70:8A:EA:8F:83:DE:61:E5:CB:41:C7:82:FF:1E:6E:AA:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2f53f8bd7b3bbee9e49400d913e37c2f6eb10bdd.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d0fc6cda-e55e-4753-9c1b-3d65fa12c009/dabe95343822d63ca112e2a59931fab1edc8212c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/d0fc6cda-e55e-4753-9c1b-3d65fa12c009/2f53f8bd7b3bbee9e49400d913e37c2f6eb10bdd.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.224.225.0-181.224.229.255
181.224.231.0-181.224.232.255
181.224.235.0-181.224.255.255
IPv6:
2803:2500::/32
Signature Algorithm: sha256WithRSAEncryption
00:c4:95:58:87:49:9c:67:a3:6e:9e:a9:24:b6:d0:1c:23:f4:
fe:3d:02:06:79:a6:31:7d:99:6a:9d:11:7c:31:3a:4f:9a:6d:
9a:83:2e:20:29:7f:fb:0e:0f:8e:cd:e6:5c:7f:06:b2:80:41:
8d:bc:ec:2b:6d:e1:01:74:6c:6d:39:6d:e5:ae:cb:61:9c:bd:
7f:1b:1d:e0:24:86:bf:5e:34:52:2d:fd:40:e3:74:0e:14:62:
6e:09:0c:39:af:cf:aa:8b:95:20:77:4d:53:f8:40:1f:bb:46:
6d:88:67:28:36:96:bd:09:79:56:c6:b0:ef:b9:ba:38:f6:6c:
f7:dc:75:e2:e8:0d:20:11:e7:67:75:ad:c7:6f:8f:60:69:86:
f6:b5:a4:a2:af:5a:14:66:db:ec:da:d3:ef:e9:53:5a:92:a5:
3d:ff:5e:d0:db:f0:1e:8c:75:1f:10:77:27:58:4f:3b:96:47:
b4:b5:28:8c:ce:d2:1b:40:df:8d:10:af:d1:01:0e:4d:6a:fc:
30:6f:51:cf:cc:79:43:27:54:d6:26:46:95:3e:ec:ef:6d:e7:
6e:5e:26:50:f3:81:e1:70:3b:5a:c1:ef:91:25:4a:40:9e:53:
8a:13:78:66:0b:79:47:b0:a1:b4:10:cc:4a:50:f0:3d:c1:2f:
70:4f:aa:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 07:27:58 2025 by rpki-client