Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0B4592EA1FBE99BB0E6E1524335D45CE6025A2A7399D3206FDF8C111D7D90E45/0/34352e3232382e31372e302f32342d3234203d3e20323636363835.roa
File: 34352e3232382e31372e302f32342d3234203d3e20323636363835.roa (raw, json)
Hash identifier: Uc6UMKa+2ts+J5+jsSiJaD00YFAhAlh9h+tPJCMEBWk=
Subject key identifier: 4E:10:EF:94:8B:96:22:60:B9:A3:2A:1F:11:A4:1C:76:B3:0F:CB:A1
Certificate issuer: /CN=A91EA82506B0E7F6BACFA600950807C98CE9C2B3
Certificate serial: 5396FC94B8D0CEF9E047D3E6583AEAC9A8586EAD
Authority key identifier: A9:1E:A8:25:06:B0:E7:F6:BA:CF:A6:00:95:08:07:C9:8C:E9:C2:B3
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A91EA82506B0E7F6BACFA600950807C98CE9C2B3.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0B4592EA1FBE99BB0E6E1524335D45CE6025A2A7399D3206FDF8C111D7D90E45/0/34352e3232382e31372e302f32342d3234203d3e20323636363835.roa
Signing time: Tue 04 Feb 2025 18:41:55 +0000
ROA not before: Tue 04 Feb 2025 18:36:55 +0000
ROA not after: Tue 03 Feb 2026 18:41:55 +0000
asID: 266685
IP address blocks: 45.228.17.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/0B4592EA1FBE99BB0E6E1524335D45CE6025A2A7399D3206FDF8C111D7D90E45/0/A91EA82506B0E7F6BACFA600950807C98CE9C2B3.crl
rsync://repository.lacnic.net/rpki/lacnic/0B4592EA1FBE99BB0E6E1524335D45CE6025A2A7399D3206FDF8C111D7D90E45/0/A91EA82506B0E7F6BACFA600950807C98CE9C2B3.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A91EA82506B0E7F6BACFA600950807C98CE9C2B3.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 18 Apr 2025 17:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:96:fc:94:b8:d0:ce:f9:e0:47:d3:e6:58:3a:ea:c9:a8:58:6e:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EA82506B0E7F6BACFA600950807C98CE9C2B3
Validity
Not Before: Feb 4 18:36:55 2025 GMT
Not After : Feb 3 18:41:55 2026 GMT
Subject: CN=4E10EF948B962260B9A32A1F11A41C76B30FCBA1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:3f:b0:b8:8d:f9:07:1e:2c:a3:1b:d3:ed:ae:
bb:07:9f:e2:d2:5e:3a:3e:d8:d1:01:9a:50:b7:ee:
f5:47:84:65:1e:e6:b6:a4:e0:fd:3d:04:1e:28:62:
71:6c:02:9c:9d:c7:71:c4:d2:c3:2f:cf:50:42:01:
b3:d2:dc:0e:30:89:64:b2:20:01:a5:fb:60:a4:33:
2a:c4:b5:06:68:86:99:cc:41:5c:14:48:fd:79:9f:
c3:17:42:e7:dd:ce:56:42:3d:11:8e:64:aa:4b:dc:
5f:51:d2:66:71:cd:a1:c2:38:19:73:40:ba:24:be:
6e:39:5f:ff:51:0f:48:d2:04:37:73:52:63:1e:38:
89:60:5b:c8:99:96:2c:0d:2a:4a:3e:11:81:1b:28:
82:3a:db:a1:c6:f8:a3:18:4c:68:05:cd:1d:e5:55:
f4:f5:68:a1:95:5a:ae:8d:88:4d:8b:8d:7d:f3:3d:
e2:22:72:4b:fb:16:f7:d9:30:5b:0f:66:7d:0e:17:
54:0b:ab:10:34:71:cb:29:ad:0f:f2:f7:b7:64:6f:
78:eb:51:e0:42:9d:aa:7d:fb:5c:f6:b8:34:42:6b:
df:a9:48:96:34:ed:6e:3e:fe:eb:16:29:a1:f2:ce:
cf:0d:65:6a:d0:9a:14:c2:61:f0:15:91:43:e8:71:
b8:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:10:EF:94:8B:96:22:60:B9:A3:2A:1F:11:A4:1C:76:B3:0F:CB:A1
X509v3 Authority Key Identifier:
keyid:A9:1E:A8:25:06:B0:E7:F6:BA:CF:A6:00:95:08:07:C9:8C:E9:C2:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/0B4592EA1FBE99BB0E6E1524335D45CE6025A2A7399D3206FDF8C111D7D90E45/0/A91EA82506B0E7F6BACFA600950807C98CE9C2B3.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A91EA82506B0E7F6BACFA600950807C98CE9C2B3.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0B4592EA1FBE99BB0E6E1524335D45CE6025A2A7399D3206FDF8C111D7D90E45/0/34352e3232382e31372e302f32342d3234203d3e20323636363835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.228.17.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:c6:32:ed:4b:23:75:93:fa:21:ef:92:83:4e:6c:cb:a2:c0:
78:85:94:bd:d6:d9:1e:1e:61:53:47:d2:a9:90:53:7c:27:d7:
a5:af:7e:ca:c2:c4:fb:83:2d:e9:d6:50:a5:89:37:91:cf:29:
27:92:77:d4:48:8e:32:0d:91:83:f8:99:8f:1f:2a:75:5e:dd:
77:1e:31:42:f2:1a:cd:70:0d:af:e6:f2:de:a3:5a:b4:3e:49:
93:2d:10:15:76:ae:19:ca:e7:49:e1:47:6e:6e:8e:e4:8e:89:
9f:75:9e:20:82:e9:ae:2a:04:09:c8:82:3c:73:43:05:97:cc:
25:e7:2f:41:5b:39:4a:b7:2b:61:6e:17:7f:50:b6:76:58:cc:
bf:10:43:6d:6d:98:f8:95:b2:21:5e:a5:1d:87:3c:a7:94:f9:
94:64:68:9e:f1:a4:e0:93:4d:54:1e:38:46:a4:0a:52:dc:f8:
e8:22:14:93:8c:be:dc:84:89:f6:94:73:11:75:94:1f:99:f2:
1a:6d:e2:a5:62:42:27:bd:ef:ea:80:2f:f4:35:17:cd:c4:a1:
7c:f5:49:e4:ad:18:5e:94:41:2d:a9:2e:1e:f5:eb:0f:f7:c9:
2f:67:88:9d:81:47:b3:32:25:54:f8:85:8a:73:6e:e5:31:f0:
f6:c8:57:91
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUU5b8lLjQzvngR9PmWDrqyahYbq0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTkxRUE4MjUwNkIwRTdGNkJBQ0ZBNjAwOTUwODA3Qzk4
Q0U5QzJCMzAeFw0yNTAyMDQxODM2NTVaFw0yNjAyMDMxODQxNTVaMDMxMTAvBgNV
BAMTKDRFMTBFRjk0OEI5NjIyNjBCOUEzMkExRjExQTQxQzc2QjMwRkNCQTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDuP7C4jfkHHiyjG9PtrrsHn+LS
Xjo+2NEBmlC37vVHhGUe5rak4P09BB4oYnFsApydx3HE0sMvz1BCAbPS3A4wiWSy
IAGl+2CkMyrEtQZohpnMQVwUSP15n8MXQufdzlZCPRGOZKpL3F9R0mZxzaHCOBlz
QLokvm45X/9RD0jSBDdzUmMeOIlgW8iZliwNKko+EYEbKII626HG+KMYTGgFzR3l
VfT1aKGVWq6NiE2LjX3zPeIickv7FvfZMFsPZn0OF1QLqxA0ccsprQ/y97dkb3jr
UeBCnap9+1z2uDRCa9+pSJY07W4+/usWKaHyzs8NZWrQmhTCYfAVkUPocbh3AgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUThDvlIuWImC5oyofEaQcdrMPy6EwHwYDVR0j
BBgwFoAUqR6oJQaw5/a6z6YAlQgHyYzpwrMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wQjQ1OTJFQTFGQkU5OUJCMEU2RTE1MjQzMzVENDVDRTYw
MjVBMkE3Mzk5RDMyMDZGREY4QzExMUQ3RDkwRTQ1LzAvQTkxRUE4MjUwNkIwRTdG
NkJBQ0ZBNjAwOTUwODA3Qzk4Q0U5QzJCMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BOTFFQTgyNTA2QjBFN0Y2QkFD
RkE2MDA5NTA4MDdDOThDRTlDMkIzLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMEI0NTkyRUExRkJFOTlCQjBFNkUxNTI0MzM1RDQ1Q0U2MDI1QTJBNzM5
OUQzMjA2RkRGOEMxMTFEN0Q5MEU0NS8wLzM0MzUyZTMyMzIzODJlMzEzNzJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYzNjM2MzgzNS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC3kETAN
BgkqhkiG9w0BAQsFAAOCAQEAnsYy7UsjdZP6Ie+Sg05sy6LAeIWUvdbZHh5hU0fS
qZBTfCfXpa9+ysLE+4Mt6dZQpYk3kc8pJ5J31EiOMg2Rg/iZjx8qdV7ddx4xQvIa
zXANr+by3qNatD5Jky0QFXauGcrnSeFHbm6O5I6Jn3WeIILprioECciCPHNDBZfM
JecvQVs5SrcrYW4Xf1C2dljMvxBDbW2Y+JWyIV6lHYc8p5T5lGRonvGk4JNNVB44
RqQKUtz46CIUk4y+3ISJ9pRzEXWUH5nyGm3ipWJCJ73v6oAv9DUXzcShfPVJ5K0Y
XpRBLakuHvXrD/fJL2eInYFHszIlVPiFinNu5THw9shXkQ==
-----END CERTIFICATE-----
Generated at Mon Apr 14 16:35:36 2025 by rpki-client