Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/23FA4088CD9CCAC1CE76FC0DF08CF7A90EA938BF5DAD53BE889EB981A44E8A61/0/3136382e3139352e3231362e302f32322d3234203d3e20323633373939.roa
File: 3136382e3139352e3231362e302f32322d3234203d3e20323633373939.roa (raw, json)
Hash identifier: EXnLTY5U73HI8SEYhr8O6uuT4l4emJMRsqDGEG/d054=
Subject key identifier: 88:D4:A0:C5:19:65:F4:C9:0F:BD:D6:54:8F:9A:79:86:22:AA:6B:48
Certificate issuer: /CN=3424CAC085E77B82A8878925FC49A646944DB380
Certificate serial: 467B4A52B3D43E27A0C9743A5125064623E53582
Authority key identifier: 34:24:CA:C0:85:E7:7B:82:A8:87:89:25:FC:49:A6:46:94:4D:B3:80
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3424CAC085E77B82A8878925FC49A646944DB380.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/23FA4088CD9CCAC1CE76FC0DF08CF7A90EA938BF5DAD53BE889EB981A44E8A61/0/3136382e3139352e3231362e302f32322d3234203d3e20323633373939.roa
Signing time: Tue 04 Feb 2025 18:37:31 +0000
ROA not before: Tue 04 Feb 2025 18:32:31 +0000
ROA not after: Tue 03 Feb 2026 18:37:31 +0000
asID: 263799
IP address blocks: 168.195.216.0/22 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/23FA4088CD9CCAC1CE76FC0DF08CF7A90EA938BF5DAD53BE889EB981A44E8A61/0/3424CAC085E77B82A8878925FC49A646944DB380.crl
rsync://repository.lacnic.net/rpki/lacnic/23FA4088CD9CCAC1CE76FC0DF08CF7A90EA938BF5DAD53BE889EB981A44E8A61/0/3424CAC085E77B82A8878925FC49A646944DB380.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3424CAC085E77B82A8878925FC49A646944DB380.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 17 Apr 2025 07:59:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:7b:4a:52:b3:d4:3e:27:a0:c9:74:3a:51:25:06:46:23:e5:35:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3424CAC085E77B82A8878925FC49A646944DB380
Validity
Not Before: Feb 4 18:32:31 2025 GMT
Not After : Feb 3 18:37:31 2026 GMT
Subject: CN=88D4A0C51965F4C90FBDD6548F9A798622AA6B48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:5a:7f:29:0e:8a:14:dd:4b:a5:34:62:1c:98:
f6:94:54:a0:d3:ff:6c:e1:9a:30:52:e2:dd:4a:c4:
a2:32:87:36:ef:95:fa:16:ef:36:39:21:fe:7e:79:
4f:38:ae:cb:d9:29:74:73:06:5d:2a:8b:dc:94:6f:
12:3d:2c:82:80:fd:c1:bd:dd:f0:c4:b2:b9:d0:74:
76:73:fb:06:73:04:2e:2a:66:0c:56:3e:16:ea:63:
90:75:63:dd:e6:f9:b6:15:5c:15:e1:53:1a:88:0d:
90:ea:5d:f6:c0:b4:59:60:dc:33:3d:ef:5e:23:a5:
94:b3:cd:91:68:ef:8c:32:5a:4c:ff:7b:0a:3f:5e:
55:65:8e:8c:ac:84:ed:0e:bc:0a:15:c1:fa:27:17:
4d:9a:e8:22:fd:30:a7:87:8f:4a:38:59:95:31:05:
21:87:3d:38:b9:c0:14:f3:e2:cf:cf:a1:ae:02:57:
55:c3:ef:e2:68:96:5c:3a:44:e7:c3:a8:a8:70:02:
51:f5:f8:29:9c:5a:6e:fd:7b:1e:b0:2c:be:18:43:
21:42:57:f3:6d:e4:b1:64:59:55:19:a7:ed:e2:72:
8b:90:4f:2f:87:aa:22:0e:8d:a4:b5:75:f6:93:e8:
bd:8c:4f:91:ff:77:78:ad:28:0b:6a:6d:2b:04:4f:
60:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:D4:A0:C5:19:65:F4:C9:0F:BD:D6:54:8F:9A:79:86:22:AA:6B:48
X509v3 Authority Key Identifier:
keyid:34:24:CA:C0:85:E7:7B:82:A8:87:89:25:FC:49:A6:46:94:4D:B3:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/23FA4088CD9CCAC1CE76FC0DF08CF7A90EA938BF5DAD53BE889EB981A44E8A61/0/3424CAC085E77B82A8878925FC49A646944DB380.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3424CAC085E77B82A8878925FC49A646944DB380.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/23FA4088CD9CCAC1CE76FC0DF08CF7A90EA938BF5DAD53BE889EB981A44E8A61/0/3136382e3139352e3231362e302f32322d3234203d3e20323633373939.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.195.216.0/22
Signature Algorithm: sha256WithRSAEncryption
0d:a4:06:46:9f:37:a8:9f:7c:7a:86:57:3a:24:04:ad:98:43:
a2:80:db:62:6e:69:d0:52:3c:94:88:82:ab:08:c1:fe:da:98:
3f:bc:53:4d:4a:02:6c:42:af:ff:9b:a4:4c:1e:26:64:c3:3a:
6c:88:aa:b2:32:34:31:db:2b:ae:1a:f5:a7:e0:17:8f:c7:8f:
e0:ce:8a:ff:da:5d:0d:36:f5:62:46:fe:bd:95:93:0a:3d:10:
88:96:66:53:a3:f1:54:8e:42:e5:bf:dd:fa:53:d5:c5:ab:61:
ab:8a:df:e9:ea:6e:77:5c:22:35:9f:cb:2a:29:bd:0e:c0:cd:
17:f2:f9:ab:34:97:1a:5f:0e:cb:4f:f1:88:80:23:72:f8:a6:
d1:53:82:e1:f2:65:5f:85:05:f6:ed:f8:f0:9a:7c:d5:99:af:
6b:46:18:13:f4:84:d4:b1:6a:f3:e7:e3:79:23:4b:d1:b2:b9:
c2:43:04:66:b6:83:29:8d:87:e4:51:f8:c7:9d:65:4b:e5:92:
40:10:ef:bf:5c:d8:0b:f2:48:19:a1:99:00:d5:83:f4:8f:ad:
70:8e:51:89:cc:72:74:04:e9:af:97:fc:77:54:f1:de:44:4f:
24:4b:cb:88:e8:30:cf:ed:17:75:f8:ed:57:df:67:2c:40:9f:
06:cc:ff:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 01:56:35 2025 by rpki-client