Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/AS7303.roa
File: AS7303.roa (raw, json)
Hash identifier: 8kkHaw1To/s/Eex7VBwJbv+bjVbPOQ/ju7nTrF9TSB0=
Subject key identifier: CB:C7:BC:20:19:F4:02:05:C3:70:D3:1E:33:C9:A0:6C:1D:E1:73:A0
Certificate issuer: /CN=274D68F06BB1F2ED094F03B52FED7565F7825D99
Certificate serial: 259EFF8849945346BC5E5E9B2E6D3CC39C1A8BC2
Authority key identifier: 27:4D:68:F0:6B:B1:F2:ED:09:4F:03:B5:2F:ED:75:65:F7:82:5D:99
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/AS7303.roa
Signing time: Wed 07 Aug 2024 19:45:00 +0000
ROA not before: Wed 07 Aug 2024 19:40:00 +0000
ROA not after: Wed 06 Aug 2025 19:45:00 +0000
asID: 7303
IP address blocks: 24.232.0.0/16 maxlen: 24
66.60.0.0/18 maxlen: 24
152.168.0.0/14 maxlen: 24
170.150.196.0/22 maxlen: 24
170.231.136.0/22 maxlen: 24
181.0.0.0/16 maxlen: 24
181.1.0.0/17 maxlen: 24
181.1.128.0/20 maxlen: 24
181.1.144.0/21 maxlen: 24
181.1.156.0/22 maxlen: 24
181.1.160.0/19 maxlen: 24
181.1.192.0/18 maxlen: 24
181.2.0.0/15 maxlen: 15
181.2.0.0/15 maxlen: 24
181.4.0.0/14 maxlen: 15
181.4.0.0/14 maxlen: 24
181.8.0.0/13 maxlen: 24
181.28.0.0/14 maxlen: 24
181.80.0.0/14 maxlen: 15
181.80.0.0/14 maxlen: 24
181.86.0.0/15 maxlen: 15
181.86.0.0/15 maxlen: 24
181.88.0.0/15 maxlen: 15
181.88.0.0/15 maxlen: 24
181.92.0.0/15 maxlen: 15
181.92.0.0/15 maxlen: 24
181.94.100.0/24 maxlen: 24
181.96.0.0/12 maxlen: 24
181.164.0.0/14 maxlen: 24
181.168.0.0/14 maxlen: 24
181.228.0.0/14 maxlen: 24
186.108.0.0/14 maxlen: 24
186.124.0.0/14 maxlen: 24
186.136.0.0/14 maxlen: 24
186.152.0.0/15 maxlen: 24
190.16.0.0/14 maxlen: 24
190.30.0.0/15 maxlen: 24
190.136.0.0/14 maxlen: 24
190.188.0.0/14 maxlen: 24
190.192.0.0/14 maxlen: 24
190.224.0.0/13 maxlen: 24
190.244.0.0/14 maxlen: 24
191.97.128.0/17 maxlen: 24
196.32.64.0/19 maxlen: 24
200.3.32.0/19 maxlen: 24
200.3.64.0/19 maxlen: 24
200.32.0.0/19 maxlen: 24
200.42.0.0/17 maxlen: 24
200.42.128.0/19 maxlen: 24
200.43.0.0/16 maxlen: 24
200.45.0.0/16 maxlen: 24
200.49.96.0/20 maxlen: 24
200.49.128.0/19 maxlen: 24
200.55.64.0/18 maxlen: 24
200.61.192.0/19 maxlen: 24
200.63.0.0/19 maxlen: 24
200.71.224.0/20 maxlen: 24
200.73.128.0/18 maxlen: 24
200.80.64.0/20 maxlen: 24
200.82.0.0/17 maxlen: 24
200.89.128.0/18 maxlen: 24
200.105.0.0/18 maxlen: 24
200.105.64.0/19 maxlen: 24
200.110.224.0/21 maxlen: 24
200.114.128.0/17 maxlen: 24
200.117.0.0/16 maxlen: 24
200.122.0.0/17 maxlen: 24
200.126.128.0/17 maxlen: 24
200.127.0.0/16 maxlen: 24
201.212.0.0/15 maxlen: 24
201.231.0.0/16 maxlen: 24
201.235.0.0/16 maxlen: 24
201.252.0.0/15 maxlen: 24
2001:13d0::/29 maxlen: 48
2800:2000::/20 maxlen: 48
2800:b000::/32 maxlen: 48
2803:da80::/32 maxlen: 48
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.crl
rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 02 Oct 2024 04:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:9e:ff:88:49:94:53:46:bc:5e:5e:9b:2e:6d:3c:c3:9c:1a:8b:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=274D68F06BB1F2ED094F03B52FED7565F7825D99
Validity
Not Before: Aug 7 19:40:00 2024 GMT
Not After : Aug 6 19:45:00 2025 GMT
Subject: CN=CBC7BC2019F40205C370D31E33C9A06C1DE173A0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:36:be:c3:bd:4c:32:4c:90:66:d3:b7:1a:25:
5b:fd:08:7d:50:b8:fb:a6:87:4f:7b:ee:87:3b:04:
23:ad:ae:40:0f:88:7b:8b:32:f8:dc:e3:07:22:ca:
c7:67:55:39:d9:b1:eb:a3:e7:0f:6b:30:ab:60:aa:
fb:da:d9:17:61:ab:12:9c:0a:2b:65:a6:36:1d:00:
2f:cd:64:e6:84:ee:9f:8b:f8:37:87:c2:2b:23:cd:
9e:a1:8d:8d:75:6e:48:e6:5d:43:13:ae:f1:f8:46:
9c:dd:ab:4f:b7:06:23:a8:d7:ba:0d:b0:fd:84:3b:
b0:ac:fe:36:bc:55:6e:ec:af:58:41:f3:76:a5:b5:
a4:90:ec:19:54:b8:85:88:bd:df:c2:c0:55:90:b3:
01:9e:f9:7c:e0:d4:49:ba:50:c9:6e:2a:d9:1b:a7:
b9:fe:13:b7:70:8a:2f:a0:42:c6:53:e9:2f:a4:63:
d8:69:eb:89:ef:dd:53:ae:6e:69:03:8b:1c:22:50:
5f:c6:db:a3:c5:f7:dc:79:5e:60:92:29:ce:24:82:
cc:97:ab:03:33:eb:bf:7f:40:df:4e:3b:17:78:bd:
5d:9e:1e:53:fc:67:de:c7:e7:80:97:6b:fc:6d:19:
c5:45:e9:5d:4b:e5:9c:f7:88:dd:93:e0:72:86:a9:
1c:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:C7:BC:20:19:F4:02:05:C3:70:D3:1E:33:C9:A0:6C:1D:E1:73:A0
X509v3 Authority Key Identifier:
keyid:27:4D:68:F0:6B:B1:F2:ED:09:4F:03:B5:2F:ED:75:65:F7:82:5D:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/AS7303.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
24.232.0.0/16
66.60.0.0/18
152.168.0.0/14
170.150.196.0/22
170.231.136.0/22
181.0.0.0-181.1.151.255
181.1.156.0-181.15.255.255
181.28.0.0/14
181.80.0.0/14
181.86.0.0-181.89.255.255
181.92.0.0/15
181.94.100.0/24
181.96.0.0/12
181.164.0.0-181.171.255.255
181.228.0.0/14
186.108.0.0/14
186.124.0.0/14
186.136.0.0/14
186.152.0.0/15
190.16.0.0/14
190.30.0.0/15
190.136.0.0/14
190.188.0.0-190.195.255.255
190.224.0.0/13
190.244.0.0/14
191.97.128.0/17
196.32.64.0/19
200.3.32.0-200.3.95.255
200.32.0.0/19
200.42.0.0-200.42.159.255
200.43.0.0/16
200.45.0.0/16
200.49.96.0/20
200.49.128.0/19
200.55.64.0/18
200.61.192.0/19
200.63.0.0/19
200.71.224.0/20
200.73.128.0/18
200.80.64.0/20
200.82.0.0/17
200.89.128.0/18
200.105.0.0-200.105.95.255
200.110.224.0/21
200.114.128.0/17
200.117.0.0/16
200.122.0.0/17
200.126.128.0-200.127.255.255
201.212.0.0/15
201.231.0.0/16
201.235.0.0/16
201.252.0.0/15
IPv6:
2001:13d0::/29
2800:2000::/20
2800:b000::/32
2803:da80::/32
Signature Algorithm: sha256WithRSAEncryption
61:2a:47:c4:6b:32:d6:2e:8a:0c:20:ea:50:98:2f:04:c1:96:
52:6f:c0:82:e4:0c:97:d4:e2:15:e5:6b:98:27:6c:7e:75:bd:
07:29:7a:c1:4d:84:ac:c3:86:d9:60:ea:01:f9:f0:40:ee:49:
66:46:3c:c9:6f:ef:82:7e:19:1b:9b:b0:48:ef:d3:75:13:d5:
65:c6:24:01:0b:06:fb:4a:0f:34:14:c4:26:10:2b:da:8b:4c:
b4:49:70:26:7b:d6:28:f0:00:cd:31:db:df:4e:ae:49:eb:71:
ef:46:56:db:62:01:89:6d:bf:95:11:08:1c:9c:1b:3f:cd:39:
22:8a:5c:0a:9f:2c:ad:bd:81:0c:71:1d:90:43:0c:e8:5f:2e:
58:93:52:d5:ed:30:a4:d3:b0:3e:4c:62:c7:76:69:36:db:74:
0c:d5:bd:be:3c:72:18:82:20:0c:2b:a8:27:f7:25:34:70:e8:
5a:dc:d9:87:bd:59:19:31:4b:af:1f:64:87:ff:6b:0d:1b:80:
0c:a7:04:f8:18:d3:a1:87:13:8f:7f:fa:08:36:7e:9c:cf:fb:
e6:cb:9c:b4:69:ac:d3:7e:e1:23:c7:49:15:61:47:a7:40:31:
b3:23:23:5e:d9:b7:bd:1d:83:ce:cc:93:fb:6a:f6:f6:31:61:
00:c7:e4:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 14:26:45 2024 by rpki-client on console-ams.rpki-client.org