Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/AS27754.roa
File: AS27754.roa (raw, json)
Hash identifier: EAo2vg84PYGIqR61Xl8FpU6+ypI9hdyiooqMKrJl1Zs=
Subject key identifier: E3:48:65:EE:3A:0C:B0:89:AC:12:5E:19:D0:CD:7C:1F:81:00:3C:5D
Certificate issuer: /CN=410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1
Certificate serial: 5B468CFA504321B91BC8EB988210D1C9CD61CBAE
Authority key identifier: 41:08:19:C7:C9:B4:C8:5C:E0:B1:D2:27:41:BE:5E:40:A1:F0:E7:B1
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/AS27754.roa
Signing time: Tue 05 Mar 2024 18:07:54 +0000
ROA not before: Tue 05 Mar 2024 18:02:54 +0000
ROA not after: Tue 04 Mar 2025 18:07:54 +0000
asID: 27754
IP address blocks: 186.38.89.0/24 maxlen: 24
186.38.90.0/23 maxlen: 24
186.38.92.0/24 maxlen: 24
186.38.108.0/24 maxlen: 24
186.38.110.0/24 maxlen: 24
186.56.39.0/24 maxlen: 24
186.56.50.0/24 maxlen: 24
201.251.73.0/24 maxlen: 24
201.251.249.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:46:8c:fa:50:43:21:b9:1b:c8:eb:98:82:10:d1:c9:cd:61:cb:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1
Validity
Not Before: Mar 5 18:02:54 2024 GMT
Not After : Mar 4 18:07:54 2025 GMT
Subject: CN=E34865EE3A0CB089AC125E19D0CD7C1F81003C5D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:2a:d0:38:13:75:39:08:1b:fb:c5:72:3d:3d:
11:13:a2:35:5b:6b:f2:bc:b0:66:2b:ac:0e:1f:53:
06:3b:4d:8d:2f:eb:25:94:83:f9:47:e6:b8:6f:53:
62:de:0d:c6:e6:a7:c2:95:0a:ce:a3:39:3a:c0:75:
89:7d:85:e5:3c:c7:67:75:d5:ce:13:b2:cb:6b:57:
cf:f2:58:4b:1f:81:33:cd:3f:59:34:9d:e9:f9:3e:
d7:14:d7:8c:59:25:eb:04:80:60:93:b5:8c:53:e4:
02:0b:74:01:eb:e9:a5:80:e5:e6:9c:4a:25:47:f3:
4b:a9:33:67:de:79:48:f6:ac:1d:60:0b:30:02:11:
03:5b:55:04:06:68:be:a5:c7:9f:7b:5f:44:15:be:
5b:c3:28:55:6b:3b:40:b9:5b:f9:7c:ba:d5:6a:f4:
76:f2:d3:70:19:91:ab:7d:40:9d:05:38:a0:f0:cb:
7f:89:aa:bb:53:8a:37:90:26:d7:12:07:e2:fa:41:
02:e8:1d:1f:69:11:f2:fc:9c:cf:70:b8:44:cd:1b:
b0:0f:15:8d:3a:01:8e:6a:ca:e3:2b:3a:23:c6:6c:
d5:63:5b:19:58:46:66:14:53:ee:6e:b6:dc:04:fc:
ea:1e:11:1d:c0:09:58:dc:a8:be:ce:43:d6:49:27:
cc:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:48:65:EE:3A:0C:B0:89:AC:12:5E:19:D0:CD:7C:1F:81:00:3C:5D
X509v3 Authority Key Identifier:
keyid:41:08:19:C7:C9:B4:C8:5C:E0:B1:D2:27:41:BE:5E:40:A1:F0:E7:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/AS27754.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.38.89.0-186.38.92.255
186.38.108.0/24
186.38.110.0/24
186.56.39.0/24
186.56.50.0/24
201.251.73.0/24
201.251.249.0/24
Signature Algorithm: sha256WithRSAEncryption
07:00:fd:15:2e:97:34:0f:53:47:92:37:ff:a9:8a:de:a0:35:
fb:9f:54:35:20:d6:4a:5b:69:bd:9b:81:33:6b:85:86:71:9c:
64:e4:d6:26:59:42:eb:8b:df:f6:3a:43:42:ae:43:24:05:bc:
af:0e:be:3f:b4:51:83:e9:66:3f:80:26:cf:31:18:28:63:a1:
65:50:ce:0f:66:8a:5d:91:35:82:bc:89:0b:0a:cc:c5:77:c3:
63:23:a0:2d:c0:6a:fe:8c:f7:eb:7d:1d:f9:fa:e7:fa:21:59:
d6:6b:db:a7:ff:05:ac:4d:08:1f:ba:48:d2:da:29:39:19:9b:
a9:cc:43:0a:ee:74:32:bd:ed:3f:a6:54:23:ee:cf:5b:82:b9:
75:13:63:e0:76:a2:16:e6:4b:8e:db:7e:56:31:e2:67:c4:e7:
30:67:2b:d6:c3:30:3c:86:f0:ea:d7:c0:63:6c:b8:52:58:e1:
3f:7e:6a:9a:25:89:d0:f4:6f:82:99:42:06:c2:37:6d:be:bf:
e0:64:c1:ee:67:23:b4:7f:58:ff:82:7b:dc:fc:23:a3:d7:70:
2f:7b:ae:7b:b2:69:5d:2d:47:d7:87:ff:15:c1:fe:0e:7b:23:
ce:2e:4d:24:46:88:34:47:19:46:8b:69:00:a5:90:90:43:e8:
b3:9e:9c:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 01:15:46 2025 by rpki-client