Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3230302e34312e33342e302f32332d3234203d3e20323633323330.roa
File: 3230302e34312e33342e302f32332d3234203d3e20323633323330.roa (raw, json)
Hash identifier: Wd9khGLoz26bJTFzVHfeUkPVZfXksEGpKIS9BdTiCvY=
Subject key identifier: B5:B3:4F:D4:51:A0:7C:62:D2:36:4A:6D:D2:B4:9D:68:CB:76:03:4E
Certificate issuer: /CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
Certificate serial: 379024F7197EAB5806040B69D59480C7F32DB90F
Authority key identifier: C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3230302e34312e33342e302f32332d3234203d3e20323633323330.roa
Signing time: Tue 04 Feb 2025 18:41:28 +0000
ROA not before: Tue 04 Feb 2025 18:36:28 +0000
ROA not after: Tue 03 Feb 2026 18:41:28 +0000
asID: 263230
IP address blocks: 200.41.34.0/23 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.crl
rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 17 Apr 2025 20:26:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:90:24:f7:19:7e:ab:58:06:04:0b:69:d5:94:80:c7:f3:2d:b9:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
Validity
Not Before: Feb 4 18:36:28 2025 GMT
Not After : Feb 3 18:41:28 2026 GMT
Subject: CN=B5B34FD451A07C62D2364A6DD2B49D68CB76034E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:1d:46:48:3b:d4:4e:a6:0a:95:e9:93:cc:88:
e2:96:69:68:be:fb:b4:32:ce:d7:65:9e:25:80:ad:
58:d0:ae:ab:1e:6a:f4:67:01:f9:01:f6:72:c8:f4:
1b:2d:0e:f0:0d:e6:b4:23:4a:c8:f7:23:d9:96:97:
7a:bc:04:2d:d5:76:c1:e3:35:7b:e4:d4:90:4e:91:
3a:a2:e3:19:ac:dc:53:4e:e0:80:95:6f:f8:9d:0e:
b3:02:c1:f4:a9:47:9d:08:9e:c0:12:87:ad:f2:c7:
47:0c:ae:ca:9d:dd:d4:d2:2e:36:08:aa:e3:4d:6d:
df:11:ae:40:d6:47:9d:79:fe:30:46:fd:2b:d1:6c:
ba:b9:47:db:ce:65:d4:73:cf:4a:d0:ca:a3:30:d6:
33:3d:cd:e1:05:66:73:ef:5e:83:b4:67:41:ce:67:
30:ff:e4:da:4b:3b:35:0a:ee:5d:bd:ef:47:b7:d0:
eb:ea:e5:b6:49:62:29:df:b2:e7:2e:1d:35:d8:e7:
a7:7c:b7:74:64:b1:ec:07:cb:e5:bc:1c:a7:c4:33:
3f:e8:79:9d:1d:f7:e4:0e:8e:ca:c2:dc:b1:33:d0:
87:8b:c3:27:db:45:ba:86:92:f9:05:7f:e0:9d:c8:
2c:60:ad:51:8e:b3:8d:07:16:81:7d:bc:e1:f9:cc:
a8:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:B3:4F:D4:51:A0:7C:62:D2:36:4A:6D:D2:B4:9D:68:CB:76:03:4E
X509v3 Authority Key Identifier:
keyid:C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3230302e34312e33342e302f32332d3234203d3e20323633323330.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.41.34.0/23
Signature Algorithm: sha256WithRSAEncryption
2e:df:89:c6:45:41:5e:f8:8f:a1:cc:b9:1a:6d:a0:d8:93:07:
59:23:d5:e7:ec:69:73:d3:97:d3:18:d3:ac:4c:d8:cf:cb:3e:
80:d6:e3:11:2d:de:4a:f5:84:73:61:c0:48:cb:5a:b5:09:48:
12:66:4d:06:e3:6d:a5:67:90:e8:1d:91:3e:70:9e:8b:da:f1:
7f:1c:a9:d8:c1:f7:9b:26:2c:2f:cc:5f:17:05:98:29:ae:7e:
e7:13:8f:b4:77:c7:1f:de:3e:fd:91:4c:ae:ed:c5:45:b5:83:
06:de:06:24:27:ce:59:a3:43:e7:36:70:48:d1:95:e7:ae:17:
c4:5c:87:bd:cc:d8:48:3c:37:a0:ef:14:f7:24:15:50:c4:51:
52:b3:2a:b6:ef:03:3c:8a:28:83:9c:12:a2:e3:ec:bc:78:3f:
23:1a:76:d7:bc:8b:0a:ec:94:fc:a5:40:7f:e0:5c:f3:fb:67:
88:2f:d1:56:ee:1f:05:97:83:55:2c:5f:8c:0f:f6:c4:2d:7c:
27:bc:24:0a:bc:a6:ca:4b:ef:e1:42:d5:16:b4:ee:de:8c:fb:
23:28:55:b9:4d:63:82:f5:7c:23:c5:3b:6a:49:22:69:d4:cb:
cb:28:4c:39:e6:4c:ca:a8:78:d7:3d:75:61:bb:6a:f9:f8:09:
c0:3e:77:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 11:42:35 2025 by rpki-client