
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E6E0C00B921CCCC53D273ACD6F3B25FA643983B1920778E10996AD10008779F1/0/3132382e3230312e3130392e302f32342d3234203d3e20323635373731.roa
File: 3132382e3230312e3130392e302f32342d3234203d3e20323635373731.roa (raw, json)
Hash identifier: koYyhtRf+y1BqnVn5dMqU/eH6hsz6Ya0lj38asS3wAw=
Subject key identifier: 69:52:79:A5:72:B2:77:2F:B0:D9:E6:5A:B3:1A:19:62:5C:08:81:DD
Certificate issuer: /CN=8DA9C456551A9FA4318565E4EF5BF4C6B5F9AAC3
Certificate serial: 0459F84BF58ACE4E2101011897AEB79F90BCC907
Authority key identifier: 8D:A9:C4:56:55:1A:9F:A4:31:85:65:E4:EF:5B:F4:C6:B5:F9:AA:C3
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8DA9C456551A9FA4318565E4EF5BF4C6B5F9AAC3.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/E6E0C00B921CCCC53D273ACD6F3B25FA643983B1920778E10996AD10008779F1/0/3132382e3230312e3130392e302f32342d3234203d3e20323635373731.roa
Signing time: Tue 04 Feb 2025 18:28:46 +0000
ROA not before: Tue 04 Feb 2025 18:23:46 +0000
ROA not after: Tue 03 Feb 2026 18:28:46 +0000
asID: 265771
IP address blocks: 128.201.109.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/E6E0C00B921CCCC53D273ACD6F3B25FA643983B1920778E10996AD10008779F1/0/8DA9C456551A9FA4318565E4EF5BF4C6B5F9AAC3.crl
rsync://repository.lacnic.net/rpki/lacnic/E6E0C00B921CCCC53D273ACD6F3B25FA643983B1920778E10996AD10008779F1/0/8DA9C456551A9FA4318565E4EF5BF4C6B5F9AAC3.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8DA9C456551A9FA4318565E4EF5BF4C6B5F9AAC3.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 04 Nov 2025 21:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:59:f8:4b:f5:8a:ce:4e:21:01:01:18:97:ae:b7:9f:90:bc:c9:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8DA9C456551A9FA4318565E4EF5BF4C6B5F9AAC3
Validity
Not Before: Feb 4 18:23:46 2025 GMT
Not After : Feb 3 18:28:46 2026 GMT
Subject: CN=695279A572B2772FB0D9E65AB31A19625C0881DD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:cc:ee:e7:e2:b1:4f:25:a3:5e:94:b7:1a:2d:
fa:86:55:08:ef:3d:de:d1:15:b1:a5:fe:34:63:fd:
1b:22:cf:b1:2d:aa:3a:16:dd:3e:a1:6f:f9:25:b8:
99:68:cf:21:6b:2e:b0:66:f4:5a:ee:e1:e2:7e:8e:
97:b9:2a:20:3c:e3:31:68:06:88:08:aa:27:c9:64:
d7:7a:17:98:0f:14:38:f0:f5:bd:5d:d5:03:39:a0:
63:1c:cc:38:6a:d1:87:fd:3b:6a:11:5b:56:d6:9a:
cf:06:ab:f2:4b:91:4d:91:74:15:55:c8:ea:b4:a0:
26:4f:34:c2:90:86:5a:ed:e6:1d:52:55:60:f7:4b:
a2:55:6e:33:19:b8:1b:81:2d:48:fd:81:b3:1f:24:
d6:9e:06:f9:35:53:df:c8:fc:1e:e2:25:07:fc:fa:
68:c5:b9:35:36:01:54:34:57:61:f9:39:74:35:e5:
7c:da:1e:a2:45:b3:73:df:ed:52:83:63:ab:40:28:
d1:3f:19:28:b7:76:43:2e:d6:18:3d:25:9b:48:ec:
59:12:96:ec:7c:75:05:2b:3b:cc:82:98:c9:a3:fc:
bf:89:4a:ca:28:01:b2:da:c6:f6:b3:70:6b:c5:86:
8f:4e:99:e8:84:80:5b:dd:6c:40:62:70:2a:e5:bb:
7c:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:52:79:A5:72:B2:77:2F:B0:D9:E6:5A:B3:1A:19:62:5C:08:81:DD
X509v3 Authority Key Identifier:
keyid:8D:A9:C4:56:55:1A:9F:A4:31:85:65:E4:EF:5B:F4:C6:B5:F9:AA:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/E6E0C00B921CCCC53D273ACD6F3B25FA643983B1920778E10996AD10008779F1/0/8DA9C456551A9FA4318565E4EF5BF4C6B5F9AAC3.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8DA9C456551A9FA4318565E4EF5BF4C6B5F9AAC3.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E6E0C00B921CCCC53D273ACD6F3B25FA643983B1920778E10996AD10008779F1/0/3132382e3230312e3130392e302f32342d3234203d3e20323635373731.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
128.201.109.0/24
Signature Algorithm: sha256WithRSAEncryption
68:f7:9c:7a:e9:34:a9:7f:04:eb:51:2e:58:a3:88:6e:9e:22:
7f:be:26:a5:49:7c:e5:d6:48:e7:fd:9e:52:a1:d9:3d:c3:af:
98:7e:f7:1b:45:31:9b:e9:32:36:55:93:ae:34:b8:08:26:5e:
59:7c:bb:60:85:31:9a:2d:05:df:d0:fc:67:a3:a6:26:9d:8b:
db:43:ae:3e:c0:7f:a8:b8:27:d0:17:3a:0c:ef:2c:51:76:be:
37:30:f4:3f:a8:78:cb:01:c1:0c:4d:63:71:bb:ae:f2:33:c7:
07:ae:12:bf:e5:ea:35:91:ce:68:a5:32:ea:10:64:3c:cc:10:
8d:c7:b5:1d:ed:63:0a:03:83:02:77:35:ed:c4:e9:e0:53:b4:
ee:9c:86:a9:21:d1:17:33:79:c7:e6:bd:67:c4:68:6a:3e:61:
44:ee:d7:47:9c:9b:f1:15:49:45:b8:83:a5:9f:64:82:d6:5d:
dc:fe:67:9d:b2:1c:24:d7:a4:b1:44:c0:81:23:23:1b:b6:6a:
6d:b3:3d:07:7f:7e:61:fc:73:ee:35:de:9a:aa:43:7e:fa:aa:
28:91:ba:59:a0:42:08:7e:f1:4e:f5:61:ef:4e:78:f7:9d:dd:
8c:4c:e5:6d:84:44:44:90:1e:cc:c3:28:df:df:c3:ac:ce:10:
8c:33:eb:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 1 20:49:33 2025 by rpki-client