Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0D8377B8F810E69B1E6DE3F229848AB344FB7864942F76CCCCBE5C256B23D6BF/0/3134392e31392e3136312e302f32342d3234203d3e203134353933.roa
File: 3134392e31392e3136312e302f32342d3234203d3e203134353933.roa (raw, json)
Hash identifier: O2G/oHVjW5xhFhnHrzMtF/znvEk0oNpM/swul7Y2Tpk=
Subject key identifier: 7B:17:71:37:DC:42:48:40:21:A5:E9:C4:FA:00:E8:B4:B1:BA:3A:A0
Certificate issuer: /CN=15DA171D5AE09E55A7280DC227610D82A2AB0356
Certificate serial: 7192120F75C9857BADD0CDDDC52BFA8541D600D2
Authority key identifier: 15:DA:17:1D:5A:E0:9E:55:A7:28:0D:C2:27:61:0D:82:A2:AB:03:56
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/15DA171D5AE09E55A7280DC227610D82A2AB0356.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0D8377B8F810E69B1E6DE3F229848AB344FB7864942F76CCCCBE5C256B23D6BF/0/3134392e31392e3136312e302f32342d3234203d3e203134353933.roa
Signing time: Tue 04 Feb 2025 18:14:00 +0000
ROA not before: Tue 04 Feb 2025 18:09:00 +0000
ROA not after: Tue 03 Feb 2026 18:14:00 +0000
asID: 14593
IP address blocks: 149.19.161.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/0D8377B8F810E69B1E6DE3F229848AB344FB7864942F76CCCCBE5C256B23D6BF/0/15DA171D5AE09E55A7280DC227610D82A2AB0356.crl
rsync://repository.lacnic.net/rpki/lacnic/0D8377B8F810E69B1E6DE3F229848AB344FB7864942F76CCCCBE5C256B23D6BF/0/15DA171D5AE09E55A7280DC227610D82A2AB0356.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/15DA171D5AE09E55A7280DC227610D82A2AB0356.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 17 Apr 2025 15:10:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:92:12:0f:75:c9:85:7b:ad:d0:cd:dd:c5:2b:fa:85:41:d6:00:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15DA171D5AE09E55A7280DC227610D82A2AB0356
Validity
Not Before: Feb 4 18:09:00 2025 GMT
Not After : Feb 3 18:14:00 2026 GMT
Subject: CN=7B177137DC42484021A5E9C4FA00E8B4B1BA3AA0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f3:cb:2e:a2:05:7a:41:93:e6:78:72:83:6c:
10:94:0f:9e:13:80:ff:a1:54:73:15:e4:d8:99:c3:
ca:03:67:70:46:23:52:45:1d:39:35:46:01:1e:c1:
ea:55:a4:64:9c:7c:ea:2c:46:4c:6c:71:21:69:f3:
b4:7c:9b:66:d6:3f:97:60:6e:ff:30:37:06:0e:9a:
ab:64:b2:ca:64:aa:26:1d:bd:4a:e2:33:98:0e:3c:
48:88:2b:32:32:31:69:bc:46:d9:ea:92:1e:66:07:
9a:01:e9:73:8d:7b:87:23:49:ad:f7:4d:29:c7:b6:
76:3b:c9:95:7c:a6:e9:37:4f:c9:5b:71:ae:29:d8:
2e:bd:b6:c8:81:a5:df:f4:4c:41:a7:b0:d5:0c:2a:
31:6f:fb:65:82:6b:63:a4:13:d4:cc:86:33:d1:f4:
8d:05:35:53:00:13:25:8c:05:5a:a8:20:98:41:ad:
14:f3:75:22:e8:70:1b:a7:52:c1:88:15:00:fa:46:
19:d7:05:e0:bf:40:76:49:5b:7a:27:d8:9f:77:42:
59:f1:b9:6f:e8:4b:94:a4:b4:20:fe:37:1a:89:57:
ca:27:c1:2a:2b:b0:ae:3a:75:6d:68:4f:b7:cb:bd:
b8:5f:1d:82:a4:3a:b1:ae:03:bf:85:ed:26:ce:6d:
63:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:17:71:37:DC:42:48:40:21:A5:E9:C4:FA:00:E8:B4:B1:BA:3A:A0
X509v3 Authority Key Identifier:
keyid:15:DA:17:1D:5A:E0:9E:55:A7:28:0D:C2:27:61:0D:82:A2:AB:03:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/0D8377B8F810E69B1E6DE3F229848AB344FB7864942F76CCCCBE5C256B23D6BF/0/15DA171D5AE09E55A7280DC227610D82A2AB0356.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/15DA171D5AE09E55A7280DC227610D82A2AB0356.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0D8377B8F810E69B1E6DE3F229848AB344FB7864942F76CCCCBE5C256B23D6BF/0/3134392e31392e3136312e302f32342d3234203d3e203134353933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.19.161.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:8c:f0:7b:d6:56:64:1c:72:2a:16:db:6f:19:4c:d3:95:d8:
ea:54:66:72:1a:37:49:f9:75:c5:a4:49:52:be:15:99:39:4f:
1e:72:a4:43:dd:6e:1d:93:0d:50:e1:3a:e0:f9:63:f0:3b:bd:
9a:49:90:21:b3:7e:05:1e:6f:e7:a2:ad:2f:bf:6b:06:fd:02:
26:42:fb:b6:45:bd:9a:d9:6d:f3:a2:ad:d8:bc:4e:cf:51:70:
2f:3d:3d:37:6b:6a:f9:e8:5c:85:1c:b4:a5:55:b0:5d:2d:35:
a3:43:7a:3b:21:25:02:75:5c:e7:43:85:a0:8e:7b:71:e3:0f:
e5:d9:3a:a3:fd:78:53:02:5d:6b:ec:9c:93:de:be:12:75:c7:
9f:e0:61:a9:1f:bd:91:c0:93:4c:3b:a2:48:9c:7d:1b:5f:17:
62:96:ea:b3:db:23:fa:d2:f1:f9:0b:6e:2e:de:20:6c:62:4e:
77:e6:5d:18:99:8b:86:37:b5:34:18:5b:10:81:02:d5:3e:55:
68:83:c7:46:1d:bf:9f:5b:8f:14:17:57:3e:f6:79:52:65:14:
0c:f0:83:2a:12:5a:ed:db:d4:03:e4:b6:61:94:03:2d:af:37:
d2:3d:d6:3a:fe:a5:fb:34:25:3a:8f:e2:29:42:05:2e:1c:9f:
06:53:d6:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 16:49:05 2025 by rpki-client