Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3B87C93929EA1BE951549B8B74A3800C64833E85BE9D523BBA8EC24E94339AED/0/AS8151.roa
File: AS8151.roa (raw, json)
Hash identifier: 4pmQ/n7ObjtpOf5sfbBycvepT1HSFXYcalFIZ9IRAgg=
Subject key identifier: 99:3A:2C:D0:40:7B:05:A7:E0:BA:B6:77:60:BA:38:62:D0:24:7E:14
Certificate issuer: /CN=C868DC422443FA70E7761C0304061EB998BF7378
Certificate serial: 7955FF0BC1213BF8A592CEF601D67D8ACAFEBAF0
Authority key identifier: C8:68:DC:42:24:43:FA:70:E7:76:1C:03:04:06:1E:B9:98:BF:73:78
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C868DC422443FA70E7761C0304061EB998BF7378.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3B87C93929EA1BE951549B8B74A3800C64833E85BE9D523BBA8EC24E94339AED/0/AS8151.roa
Signing time: Wed 18 Sep 2024 23:20:00 +0000
ROA not before: Wed 18 Sep 2024 23:15:00 +0000
ROA not after: Wed 17 Sep 2025 23:20:00 +0000
asID: 8151
IP address blocks: 187.132.0.0/16 maxlen: 24
187.135.0.0/16 maxlen: 24
187.136.0.0/16 maxlen: 24
187.143.0.0/16 maxlen: 24
187.146.0.0/16 maxlen: 24
187.148.0.0/16 maxlen: 24
187.150.0.0/17 maxlen: 24
187.150.128.0/18 maxlen: 24
187.150.224.0/19 maxlen: 24
187.153.0.0/16 maxlen: 24
187.154.0.0/16 maxlen: 24
187.155.32.0/19 maxlen: 24
187.155.64.0/18 maxlen: 24
187.155.128.0/18 maxlen: 24
187.168.0.0/14 maxlen: 24
187.194.96.0/19 maxlen: 24
187.194.128.0/17 maxlen: 24
187.199.0.0/16 maxlen: 24
187.202.0.0/16 maxlen: 24
187.207.0.0/16 maxlen: 24
187.212.0.0/16 maxlen: 24
187.214.0.0/16 maxlen: 24
187.220.0.0/14 maxlen: 24
187.224.0.0/15 maxlen: 24
187.228.0.0/16 maxlen: 24
187.229.24.0/21 maxlen: 24
187.229.32.0/22 maxlen: 24
187.229.88.0/21 maxlen: 24
187.229.120.0/21 maxlen: 24
187.235.0.0/16 maxlen: 24
189.128.0.0/15 maxlen: 24
189.130.0.0/17 maxlen: 24
189.130.128.0/18 maxlen: 24
189.130.224.0/19 maxlen: 24
189.131.0.0/16 maxlen: 24
189.132.0.0/15 maxlen: 24
189.136.0.0/16 maxlen: 24
189.146.0.0/15 maxlen: 24
189.148.0.0/14 maxlen: 24
189.161.0.0/16 maxlen: 24
189.164.0.0/15 maxlen: 24
189.167.0.0/16 maxlen: 24
189.188.0.0/16 maxlen: 24
189.190.0.0/16 maxlen: 24
189.230.0.0/16 maxlen: 24
189.235.64.0/19 maxlen: 24
189.236.0.0/16 maxlen: 24
189.239.128.0/17 maxlen: 24
189.242.0.0/16 maxlen: 24
189.247.104.0/24 maxlen: 24
189.249.0.0/16 maxlen: 24
189.250.0.0/16 maxlen: 24
192.100.232.0/23 maxlen: 24
200.33.148.0/24 maxlen: 24
200.78.120.0/21 maxlen: 24
201.97.0.0/16 maxlen: 24
201.99.0.0/16 maxlen: 24
201.103.0.0/16 maxlen: 24
201.104.128.0/17 maxlen: 24
201.105.0.0/16 maxlen: 24
201.108.0.0/16 maxlen: 24
201.111.0.0/16 maxlen: 24
201.114.0.0/16 maxlen: 24
201.119.0.0/16 maxlen: 24
201.121.0.0/19 maxlen: 24
201.122.16.0/23 maxlen: 24
201.122.73.0/24 maxlen: 24
201.122.88.0/23 maxlen: 24
201.122.113.0/24 maxlen: 24
201.122.120.0/24 maxlen: 24
201.122.127.0/24 maxlen: 24
201.122.128.0/24 maxlen: 24
201.122.146.0/24 maxlen: 24
201.122.153.0/24 maxlen: 24
201.122.161.0/24 maxlen: 24
201.122.170.0/24 maxlen: 24
201.122.190.0/24 maxlen: 24
201.122.194.0/24 maxlen: 24
201.122.199.0/24 maxlen: 24
201.122.201.0/24 maxlen: 24
201.122.213.0/24 maxlen: 24
201.122.214.0/24 maxlen: 24
201.122.226.0/24 maxlen: 24
201.123.0.0/16 maxlen: 24
201.124.0.0/16 maxlen: 24
201.128.0.0/17 maxlen: 24
201.134.128.0/18 maxlen: 24
201.136.64.0/18 maxlen: 24
201.137.0.0/16 maxlen: 24
201.138.0.0/16 maxlen: 24
201.152.0.0/14 maxlen: 24
201.155.12.0/24 maxlen: 24
201.155.91.0/24 maxlen: 24
201.155.109.0/24 maxlen: 24
201.155.121.0/24 maxlen: 24
201.155.188.0/24 maxlen: 24
201.155.203.0/24 maxlen: 24
201.155.215.0/24 maxlen: 24
2806:1001::/32 maxlen: 48
2806:1002::/31 maxlen: 48
2806:1004::/30 maxlen: 48
2806:1009::/32 maxlen: 48
2806:100a::/31 maxlen: 48
2806:100c::/30 maxlen: 48
2806:103e:5::/48 maxlen: 48
2806:103e:c::/48 maxlen: 48
2806:104e::/32 maxlen: 48
2806:1061::/32 maxlen: 48
2806:1062::/31 maxlen: 48
2806:1064::/30 maxlen: 48
2806:1068::/29 maxlen: 48
2806:1071::/32 maxlen: 48
2806:1072::/31 maxlen: 48
2806:1074::/30 maxlen: 48
2806:1078::/29 maxlen: 48
2806:10a1::/32 maxlen: 48
2806:10a2::/31 maxlen: 48
2806:10a4::/30 maxlen: 48
2806:10a9::/32 maxlen: 48
2806:10aa::/31 maxlen: 48
2806:10ac::/30 maxlen: 48
2806:10be:7::/48 maxlen: 48
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/3B87C93929EA1BE951549B8B74A3800C64833E85BE9D523BBA8EC24E94339AED/0/C868DC422443FA70E7761C0304061EB998BF7378.crl
rsync://repository.lacnic.net/rpki/lacnic/3B87C93929EA1BE951549B8B74A3800C64833E85BE9D523BBA8EC24E94339AED/0/C868DC422443FA70E7761C0304061EB998BF7378.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C868DC422443FA70E7761C0304061EB998BF7378.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 23 Nov 2024 22:22:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:55:ff:0b:c1:21:3b:f8:a5:92:ce:f6:01:d6:7d:8a:ca:fe:ba:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C868DC422443FA70E7761C0304061EB998BF7378
Validity
Not Before: Sep 18 23:15:00 2024 GMT
Not After : Sep 17 23:20:00 2025 GMT
Subject: CN=993A2CD0407B05A7E0BAB67760BA3862D0247E14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:87:0c:40:e7:cb:7c:39:bc:c3:cc:be:a8:c2:
e5:ed:46:76:cc:1f:09:03:0f:9c:db:21:b9:b3:6f:
0d:50:a7:9a:36:c1:0e:ec:09:75:74:7f:21:e9:28:
c2:b7:fb:e0:c0:00:b2:10:50:d7:d5:07:dc:9a:08:
31:65:f7:6b:f6:22:07:9d:75:03:30:da:f7:11:ba:
3f:cb:6f:98:bf:03:af:7a:a3:82:93:d3:30:91:5d:
da:82:07:8c:d1:11:b8:22:6f:31:40:ce:25:7c:3a:
e5:6f:e7:2c:49:16:30:0c:67:17:bc:64:3e:f6:cd:
d1:24:df:e1:a6:d9:d0:b8:5f:da:c8:11:c8:83:53:
ea:e4:aa:2b:b6:53:a2:64:74:8c:5e:d8:88:65:92:
5b:6c:13:7b:c3:06:96:9b:7b:75:af:47:04:ce:ba:
27:62:1d:f5:a1:00:84:3e:67:4a:db:ff:0b:ff:30:
bb:66:c1:57:17:41:01:b5:86:7a:fd:cf:10:66:c1:
e2:5f:d1:8c:e3:67:8d:32:ef:4c:69:03:c8:e0:18:
79:ce:06:8d:a1:f5:1d:31:7d:39:5e:83:38:4d:26:
e7:83:64:db:f1:c4:06:2e:a8:05:4c:5d:fa:42:65:
7f:c3:82:ad:79:bd:f4:62:93:65:69:2c:60:10:8a:
b8:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:3A:2C:D0:40:7B:05:A7:E0:BA:B6:77:60:BA:38:62:D0:24:7E:14
X509v3 Authority Key Identifier:
keyid:C8:68:DC:42:24:43:FA:70:E7:76:1C:03:04:06:1E:B9:98:BF:73:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/3B87C93929EA1BE951549B8B74A3800C64833E85BE9D523BBA8EC24E94339AED/0/C868DC422443FA70E7761C0304061EB998BF7378.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C868DC422443FA70E7761C0304061EB998BF7378.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3B87C93929EA1BE951549B8B74A3800C64833E85BE9D523BBA8EC24E94339AED/0/AS8151.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.132.0.0/16
187.135.0.0-187.136.255.255
187.143.0.0/16
187.146.0.0/16
187.148.0.0/16
187.150.0.0-187.150.191.255
187.150.224.0/19
187.153.0.0-187.154.255.255
187.155.32.0-187.155.191.255
187.168.0.0/14
187.194.96.0-187.194.255.255
187.199.0.0/16
187.202.0.0/16
187.207.0.0/16
187.212.0.0/16
187.214.0.0/16
187.220.0.0-187.225.255.255
187.228.0.0/16
187.229.24.0-187.229.35.255
187.229.88.0/21
187.229.120.0/21
187.235.0.0/16
189.128.0.0-189.130.191.255
189.130.224.0-189.133.255.255
189.136.0.0/16
189.146.0.0-189.151.255.255
189.161.0.0/16
189.164.0.0/15
189.167.0.0/16
189.188.0.0/16
189.190.0.0/16
189.230.0.0/16
189.235.64.0/19
189.236.0.0/16
189.239.128.0/17
189.242.0.0/16
189.247.104.0/24
189.249.0.0-189.250.255.255
192.100.232.0/23
200.33.148.0/24
200.78.120.0/21
201.97.0.0/16
201.99.0.0/16
201.103.0.0/16
201.104.128.0-201.105.255.255
201.108.0.0/16
201.111.0.0/16
201.114.0.0/16
201.119.0.0/16
201.121.0.0/19
201.122.16.0/23
201.122.73.0/24
201.122.88.0/23
201.122.113.0/24
201.122.120.0/24
201.122.127.0-201.122.128.255
201.122.146.0/24
201.122.153.0/24
201.122.161.0/24
201.122.170.0/24
201.122.190.0/24
201.122.194.0/24
201.122.199.0/24
201.122.201.0/24
201.122.213.0-201.122.214.255
201.122.226.0/24
201.123.0.0-201.124.255.255
201.128.0.0/17
201.134.128.0/18
201.136.64.0/18
201.137.0.0-201.138.255.255
201.152.0.0/14
IPv6:
2806:1001::-2806:1007:ffff:ffff:ffff:ffff:ffff:ffff
2806:1009::-2806:100f:ffff:ffff:ffff:ffff:ffff:ffff
2806:103e:5::/48
2806:103e:c::/48
2806:104e::/32
2806:1061::-2806:106f:ffff:ffff:ffff:ffff:ffff:ffff
2806:1071::-2806:107f:ffff:ffff:ffff:ffff:ffff:ffff
2806:10a1::-2806:10a7:ffff:ffff:ffff:ffff:ffff:ffff
2806:10a9::-2806:10af:ffff:ffff:ffff:ffff:ffff:ffff
2806:10be:7::/48
Signature Algorithm: sha256WithRSAEncryption
d4:93:15:22:be:3e:74:d1:4e:1c:6d:96:d6:e5:ce:c4:21:7e:
0c:bf:ea:19:72:a1:0d:70:8f:d1:4b:44:b6:8d:ae:cb:45:72:
d7:75:6a:09:06:6a:af:8a:d3:fe:54:7d:5d:8c:54:b9:c7:8f:
05:dd:c4:07:6a:1e:3c:31:dc:86:58:8e:46:25:65:4e:e7:4d:
23:bb:2c:5c:d4:52:1a:2d:e9:f5:8f:ba:d9:90:73:85:a9:9c:
b8:12:76:28:c9:9d:0d:e3:b5:fa:bb:28:a3:c4:36:09:bf:ff:
cb:27:30:aa:39:6a:32:51:3b:fd:e6:dd:50:22:a7:a1:f1:40:
4b:37:07:2e:3d:98:5a:76:c8:4c:fc:6a:3b:c2:dc:63:9f:a5:
5c:b3:7d:13:8b:0c:42:18:19:b3:d7:18:85:fc:24:85:f7:ee:
a3:cf:86:20:22:01:81:61:ed:cc:37:4c:dc:41:cb:88:9d:7a:
05:da:b5:95:af:88:9d:7d:18:ce:63:d6:63:f3:90:3c:ba:e1:
b4:0f:7a:50:cd:54:50:1d:d0:7d:bc:62:66:bc:28:68:36:a3:
ff:d3:c4:e0:00:5d:4e:ea:4f:54:e9:68:f0:5b:ae:c9:2b:89:
bc:33:cc:cf:55:be:6d:a6:0f:cc:4b:d5:12:b8:90:a1:18:72:
f5:af:66:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 01:20:21 2024 by rpki-client on console-ams.rpki-client.org