Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0D4370C5419038DFAFE42339E6D2362DBF9F48F5A1A225DFD8EDC70969C1C230/0/3136382e3139342e3234302e302f32322d3232203d3e20323634373730.roa
File: 3136382e3139342e3234302e302f32322d3232203d3e20323634373730.roa (raw, json)
Hash identifier: qMGeoMiPFRQpX1xOUGt5aiHiH2Z2E8mTo/QXB3jN7QY=
Subject key identifier: DC:03:BE:C9:5A:71:0A:62:4A:29:35:60:D3:32:49:57:C5:13:D2:13
Certificate issuer: /CN=F7AC0CE553F93FC5CE942F12360E6A144723F82D
Certificate serial: 27463A24200CEDD17B02BD372705C9CC90879322
Authority key identifier: F7:AC:0C:E5:53:F9:3F:C5:CE:94:2F:12:36:0E:6A:14:47:23:F8:2D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F7AC0CE553F93FC5CE942F12360E6A144723F82D.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0D4370C5419038DFAFE42339E6D2362DBF9F48F5A1A225DFD8EDC70969C1C230/0/3136382e3139342e3234302e302f32322d3232203d3e20323634373730.roa
Signing time: Tue 04 Feb 2025 18:01:34 +0000
ROA not before: Tue 04 Feb 2025 17:56:34 +0000
ROA not after: Tue 03 Feb 2026 18:01:34 +0000
asID: 264770
IP address blocks: 168.194.240.0/22 maxlen: 22
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/0D4370C5419038DFAFE42339E6D2362DBF9F48F5A1A225DFD8EDC70969C1C230/0/F7AC0CE553F93FC5CE942F12360E6A144723F82D.crl
rsync://repository.lacnic.net/rpki/lacnic/0D4370C5419038DFAFE42339E6D2362DBF9F48F5A1A225DFD8EDC70969C1C230/0/F7AC0CE553F93FC5CE942F12360E6A144723F82D.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F7AC0CE553F93FC5CE942F12360E6A144723F82D.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 18 Apr 2025 17:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:46:3a:24:20:0c:ed:d1:7b:02:bd:37:27:05:c9:cc:90:87:93:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F7AC0CE553F93FC5CE942F12360E6A144723F82D
Validity
Not Before: Feb 4 17:56:34 2025 GMT
Not After : Feb 3 18:01:34 2026 GMT
Subject: CN=DC03BEC95A710A624A293560D3324957C513D213
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:2c:5e:6d:e5:25:98:b0:c7:f8:62:39:8b:e6:
c0:26:5a:bc:b6:ad:51:ab:35:fa:13:13:23:b5:f0:
66:48:ac:5d:fe:12:e0:52:d2:d9:c7:a0:03:6a:44:
40:36:2d:a7:bc:48:d2:8e:38:c3:5e:b3:bd:37:57:
16:f9:7c:60:e1:29:34:95:08:08:9d:6f:a9:cf:e4:
ce:8b:70:91:d3:3e:c7:10:c1:e3:c5:ae:ec:a1:3c:
c9:f8:cc:a7:8e:9b:9e:ca:37:d0:64:21:d2:10:82:
b2:03:41:4f:55:06:dc:57:bf:cd:33:32:a6:91:b8:
04:0f:b3:eb:5d:28:3e:d5:18:8e:12:54:cf:5b:80:
83:33:bb:89:21:e5:d4:30:ca:62:e3:f1:92:e0:c6:
59:09:e5:38:d7:49:05:85:21:c3:66:6f:74:3b:68:
3a:df:84:e8:ae:96:1d:c5:eb:fc:e6:c7:84:df:4c:
9f:8e:fd:f8:b6:ae:97:62:f0:4c:28:fe:f2:76:44:
1f:b8:7c:4c:f6:6c:e6:11:6c:1c:ac:52:c7:40:ba:
95:c3:8d:2a:7f:50:a6:db:74:88:c3:0f:3c:86:3b:
8b:b9:f2:76:09:c3:68:b0:14:b0:54:30:e6:9d:14:
96:5c:d3:2d:19:f1:1d:70:2d:83:7d:cc:29:ea:b6:
70:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:03:BE:C9:5A:71:0A:62:4A:29:35:60:D3:32:49:57:C5:13:D2:13
X509v3 Authority Key Identifier:
keyid:F7:AC:0C:E5:53:F9:3F:C5:CE:94:2F:12:36:0E:6A:14:47:23:F8:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/0D4370C5419038DFAFE42339E6D2362DBF9F48F5A1A225DFD8EDC70969C1C230/0/F7AC0CE553F93FC5CE942F12360E6A144723F82D.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F7AC0CE553F93FC5CE942F12360E6A144723F82D.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0D4370C5419038DFAFE42339E6D2362DBF9F48F5A1A225DFD8EDC70969C1C230/0/3136382e3139342e3234302e302f32322d3232203d3e20323634373730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.194.240.0/22
Signature Algorithm: sha256WithRSAEncryption
8c:0b:7c:66:f6:36:bc:67:35:86:a9:7a:77:2b:9a:16:f5:fa:
5d:c7:23:db:ee:a5:8d:10:3c:a1:f6:33:72:96:a1:8c:ed:0e:
dc:fb:82:d5:06:45:22:9d:7c:08:e3:0f:50:bb:30:de:f6:7e:
5b:3c:78:c8:13:08:34:08:16:c1:de:28:2c:a2:93:94:f3:58:
a6:be:0d:87:d4:25:f7:9b:01:d1:a9:25:86:1a:20:ab:65:5d:
df:e1:7b:29:22:cb:37:96:86:c3:b7:98:20:de:b7:67:de:74:
75:0f:e0:e0:21:38:0b:1a:17:42:1e:ee:7d:fa:78:78:e8:ac:
b1:ac:d4:d3:5a:6f:44:71:f7:03:d7:9e:94:10:2b:51:6a:f8:
53:56:cd:5d:ca:4e:e4:09:2d:bc:0b:9f:34:af:df:fa:f7:7b:
55:8a:3a:cb:34:86:35:6c:d1:4c:f2:8a:94:67:65:e8:48:c6:
7c:08:71:1f:72:bf:d0:f7:84:d4:81:ae:af:73:9f:64:4e:a6:
28:d2:f6:11:3b:c7:8b:95:71:79:37:85:eb:76:e2:97:28:4c:
eb:8d:60:d2:21:20:85:6b:ba:c1:52:a3:05:dc:19:96:48:c5:
97:71:5c:31:77:07:05:90:6c:3b:17:9f:35:4d:88:e8:20:41:
2b:a4:f7:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 04:06:12 2025 by rpki-client