Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/3136382e3234332e38302e302f32322d3234203d3e20323633323138.roa
File: 3136382e3234332e38302e302f32322d3234203d3e20323633323138.roa (raw, json)
Hash identifier: x8p6sd6bnQlJ9cEz1kostbVwSbwloADXyOa6pswH7Wk=
Subject key identifier: 19:01:74:15:9E:AC:00:BF:8A:24:54:C4:F8:89:59:A5:FD:0B:6C:63
Certificate issuer: /CN=D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA
Certificate serial: 676889D15C0014D8804C19AF3E0E1DCD4C9DDADD
Authority key identifier: D3:50:3D:03:E3:D4:DF:A0:76:7F:6D:FF:3B:A7:1D:D7:B6:23:6A:FA
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/3136382e3234332e38302e302f32322d3234203d3e20323633323138.roa
Signing time: Tue 04 Feb 2025 18:20:32 +0000
ROA not before: Tue 04 Feb 2025 18:15:32 +0000
ROA not after: Tue 03 Feb 2026 18:20:32 +0000
asID: 263218
IP address blocks: 168.243.80.0/22 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.crl
rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 18 Apr 2025 17:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:68:89:d1:5c:00:14:d8:80:4c:19:af:3e:0e:1d:cd:4c:9d:da:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA
Validity
Not Before: Feb 4 18:15:32 2025 GMT
Not After : Feb 3 18:20:32 2026 GMT
Subject: CN=190174159EAC00BF8A2454C4F88959A5FD0B6C63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:b7:e2:0d:80:9f:21:b5:16:39:e4:f6:39:41:
b8:9c:7c:ec:79:09:1e:58:01:9b:85:81:3a:ec:10:
8b:cf:44:9f:e6:53:9a:ed:57:ac:a0:d2:03:36:f8:
54:05:fa:d0:f8:c3:05:b4:8c:92:28:99:45:c1:bb:
31:cf:da:de:a9:a8:26:4c:b7:54:e1:7d:86:91:b9:
25:8c:d8:d9:3b:8c:01:6e:c4:c3:af:bd:b5:dd:11:
e6:90:6f:09:e0:09:6e:68:ed:7d:c5:69:4e:c6:df:
7c:24:d1:3c:ca:b6:c1:14:3b:d3:76:44:6d:ea:b7:
d4:0b:1f:13:14:07:3a:f9:7b:b1:96:46:7f:db:7d:
6f:a4:12:de:fd:e0:42:0a:d9:52:13:3a:38:10:e6:
fb:2d:d6:b1:91:40:b8:bb:34:65:9e:1b:4b:da:1b:
4b:72:81:b8:bb:33:ca:43:6b:dc:94:5f:93:ac:e1:
a2:49:ba:d2:95:f4:4a:54:b8:8d:57:be:52:8f:6e:
c0:c0:e7:d9:f7:ef:c5:9a:7e:92:a0:50:be:1c:bd:
8a:40:ae:62:ba:c4:95:1d:d4:91:09:bb:49:b6:e8:
bc:68:45:42:67:aa:bd:b2:13:94:c4:e9:d0:9e:35:
09:1f:b3:12:58:eb:12:4d:49:ac:33:42:8d:a1:ba:
31:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:01:74:15:9E:AC:00:BF:8A:24:54:C4:F8:89:59:A5:FD:0B:6C:63
X509v3 Authority Key Identifier:
keyid:D3:50:3D:03:E3:D4:DF:A0:76:7F:6D:FF:3B:A7:1D:D7:B6:23:6A:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/3136382e3234332e38302e302f32322d3234203d3e20323633323138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.243.80.0/22
Signature Algorithm: sha256WithRSAEncryption
8c:bd:4f:ea:52:d3:b3:51:9a:2e:4a:10:af:fc:d4:3c:51:28:
72:38:8a:e2:db:79:2e:ef:fc:88:43:1e:1d:00:4d:6a:f3:d6:
b7:08:18:5d:42:c9:f6:26:c5:eb:c0:66:eb:91:54:bb:bc:bb:
0e:c9:f3:d5:aa:ce:34:9b:f3:24:d4:0f:4e:83:f4:df:49:9b:
a3:c9:1d:81:86:1a:f8:09:16:a7:0f:0d:cc:a1:0c:95:7a:bf:
a5:bd:1c:b3:e1:df:5f:ee:4f:05:0d:0c:d1:15:17:bf:ce:02:
10:f3:a4:4a:75:67:29:3f:27:51:8e:fe:1d:57:eb:ab:bd:c5:
1b:21:0e:c9:f4:2d:2a:70:2b:67:f4:0f:d8:09:b0:38:9f:d1:
6b:1e:de:da:fc:8f:65:2c:ae:ee:5f:95:cf:76:fa:3a:6a:1d:
e8:1b:bc:d6:60:9d:df:a2:ee:c1:5f:f7:2e:43:0f:e8:6d:69:
0a:7d:44:f2:86:c3:dd:3a:68:56:ea:9a:31:ad:60:10:80:d7:
28:37:c1:21:da:fa:a7:dc:e4:3c:ec:37:7f:de:09:41:71:bd:
a5:e4:fd:bf:41:b3:15:79:cb:e6:c1:69:33:b3:b0:46:8e:dd:
df:2d:12:7f:e9:37:b9:96:b5:66:f9:35:cc:1d:2a:fc:ae:15:
1a:7f:8f:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 17:36:01 2025 by rpki-client