Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/AS27860.roa
File: AS27860.roa (raw, json)
Hash identifier: 4r8wNtxsVIdQbTOoPeegTn0mnkDXD5R+6UgDaWybvys=
Subject key identifier: FE:16:E7:2D:49:99:46:43:B0:B6:C8:1E:74:A0:61:F8:41:E1:1B:45
Certificate issuer: /CN=5D158BE61CA911BC34A887005B96056F4C474B1E
Certificate serial: 643B66D56D8059EAE15D3994576362D2D35DFC75
Authority key identifier: 5D:15:8B:E6:1C:A9:11:BC:34:A8:87:00:5B:96:05:6F:4C:47:4B:1E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/AS27860.roa
Signing time: Tue 05 Mar 2024 17:54:59 +0000
ROA not before: Tue 05 Mar 2024 17:49:59 +0000
ROA not after: Tue 04 Mar 2025 17:54:59 +0000
asID: 27860
IP address blocks: 201.218.210.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:3b:66:d5:6d:80:59:ea:e1:5d:39:94:57:63:62:d2:d3:5d:fc:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5D158BE61CA911BC34A887005B96056F4C474B1E
Validity
Not Before: Mar 5 17:49:59 2024 GMT
Not After : Mar 4 17:54:59 2025 GMT
Subject: CN=FE16E72D49994643B0B6C81E74A061F841E11B45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:99:e8:61:c8:9c:72:26:f2:77:8f:f5:8c:81:
42:d1:b9:f4:28:15:04:81:1f:9b:97:1e:85:28:29:
08:8a:85:0e:31:b1:cd:28:43:92:79:cd:e4:69:a0:
f4:ba:4d:35:12:c1:91:aa:99:a8:be:4f:30:53:9d:
22:b8:37:8a:03:e1:d2:90:dd:62:8d:28:cc:e4:a8:
ac:83:a4:09:42:9c:99:35:46:73:1c:4e:91:d7:d8:
fa:a5:5a:86:cf:e9:a5:ce:3e:de:e9:e3:b1:0d:8f:
30:e6:a1:ed:e3:58:5f:fc:c2:f2:d3:68:33:2b:4e:
1e:7a:f9:55:d5:6b:47:62:cd:b2:31:3f:a8:58:10:
6b:56:2a:11:1f:f4:71:73:43:f1:24:1a:fe:57:63:
83:60:1c:90:80:6a:b1:78:50:07:16:fa:69:52:85:
64:d1:da:ee:0a:67:0c:90:24:0d:08:81:13:0b:d8:
aa:85:a0:6d:67:95:74:02:c7:8e:77:59:02:04:cd:
47:d2:96:e3:94:f0:88:88:17:af:f7:9d:79:a3:c2:
06:d3:0f:5b:c9:54:ae:af:1f:05:cf:2c:ed:14:09:
81:83:e2:46:56:84:b5:28:bb:d7:2b:92:51:51:58:
38:b3:69:bd:de:0a:67:0a:0c:fe:40:6a:45:97:81:
d9:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:16:E7:2D:49:99:46:43:B0:B6:C8:1E:74:A0:61:F8:41:E1:1B:45
X509v3 Authority Key Identifier:
keyid:5D:15:8B:E6:1C:A9:11:BC:34:A8:87:00:5B:96:05:6F:4C:47:4B:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/AS27860.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.218.210.0/24
Signature Algorithm: sha256WithRSAEncryption
32:68:3c:c1:94:05:fc:e1:d2:00:76:5a:84:18:97:b7:19:9b:
ce:fe:65:87:da:2b:8f:cb:ad:41:5b:59:6c:7c:4e:49:8e:bc:
59:6e:fb:48:40:dc:d4:6e:97:8e:8f:fc:98:2d:dd:c3:18:60:
6b:c2:79:5c:61:ee:62:57:13:0c:0a:99:8c:a8:19:b4:cd:96:
dc:7f:98:12:02:f6:55:d4:ee:3b:d8:fd:4b:3c:80:48:aa:6f:
77:fa:8e:49:b8:8c:28:a7:a5:35:78:d6:4a:c1:7b:58:64:24:
a1:af:7f:77:b6:c2:32:cb:60:c2:aa:61:a8:4f:94:8d:b5:8c:
28:0c:52:ff:14:ad:c6:74:90:d3:ce:61:3f:96:c0:9e:24:32:
ed:78:eb:5a:98:44:41:fb:46:ce:c6:65:3a:91:0c:74:b7:26:
7a:6b:9a:35:3d:4e:d3:af:66:e8:d6:e6:e6:4c:6c:c4:27:f6:
da:a3:c2:aa:f5:f9:4f:49:fd:8b:2b:35:da:c1:43:7f:8f:85:
16:88:ac:aa:22:6c:49:57:f1:67:41:92:3a:96:b5:14:dd:8d:
8a:bc:b4:44:ca:ed:92:a6:ab:77:bf:fa:66:ce:89:5c:34:06:
cf:fb:c7:59:bf:cf:a3:12:9b:1e:8d:96:19:b2:96:d6:94:a4:
6f:2f:db:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 10:51:46 2025 by rpki-client