Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3B87C93929EA1BE951549B8B74A3800C64833E85BE9D523BBA8EC24E94339AED/0/AS8151.roa
File: AS8151.roa (raw, json)
Hash identifier: NUM5RAYsFjWXVNbmcosI/lJ8Wq43X09gSvOQHGAImtE=
Subject key identifier: 14:33:E7:2F:CE:16:41:B4:55:46:30:43:DA:CD:57:24:AA:E2:7A:6C
Certificate issuer: /CN=C868DC422443FA70E7761C0304061EB998BF7378
Certificate serial: 1880145533E41D2E7D6501BD3DE427DDE10DBF9B
Authority key identifier: C8:68:DC:42:24:43:FA:70:E7:76:1C:03:04:06:1E:B9:98:BF:73:78
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C868DC422443FA70E7761C0304061EB998BF7378.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3B87C93929EA1BE951549B8B74A3800C64833E85BE9D523BBA8EC24E94339AED/0/AS8151.roa
Signing time: Wed 05 Feb 2025 02:30:00 +0000
ROA not before: Wed 05 Feb 2025 02:25:00 +0000
ROA not after: Wed 04 Feb 2026 02:30:00 +0000
asID: 8151
IP address blocks: 187.132.0.0/16 maxlen: 24
187.135.0.0/16 maxlen: 24
187.136.0.0/16 maxlen: 24
187.143.0.0/16 maxlen: 24
187.146.0.0/16 maxlen: 24
187.148.0.0/16 maxlen: 24
187.150.0.0/17 maxlen: 24
187.150.128.0/18 maxlen: 24
187.150.224.0/19 maxlen: 24
187.153.0.0/16 maxlen: 24
187.154.0.0/16 maxlen: 24
187.155.32.0/19 maxlen: 24
187.155.64.0/18 maxlen: 24
187.155.128.0/18 maxlen: 24
187.168.0.0/14 maxlen: 24
187.194.96.0/19 maxlen: 24
187.194.128.0/17 maxlen: 24
187.199.0.0/16 maxlen: 24
187.202.0.0/16 maxlen: 24
187.207.0.0/16 maxlen: 24
187.212.0.0/16 maxlen: 24
187.214.0.0/16 maxlen: 24
187.220.0.0/14 maxlen: 24
187.224.0.0/15 maxlen: 24
187.228.0.0/16 maxlen: 24
187.229.24.0/21 maxlen: 24
187.229.32.0/22 maxlen: 24
187.229.88.0/21 maxlen: 24
187.229.120.0/21 maxlen: 24
187.235.0.0/16 maxlen: 24
189.128.0.0/15 maxlen: 24
189.130.0.0/17 maxlen: 24
189.130.128.0/18 maxlen: 24
189.130.224.0/19 maxlen: 24
189.131.0.0/16 maxlen: 24
189.132.0.0/15 maxlen: 24
189.136.0.0/16 maxlen: 24
189.146.0.0/15 maxlen: 24
189.148.0.0/14 maxlen: 24
189.161.0.0/16 maxlen: 24
189.164.0.0/15 maxlen: 24
189.167.0.0/16 maxlen: 24
189.188.0.0/16 maxlen: 24
189.190.0.0/16 maxlen: 24
189.230.0.0/16 maxlen: 24
189.235.64.0/19 maxlen: 24
189.236.0.0/16 maxlen: 24
189.239.128.0/17 maxlen: 24
189.242.0.0/16 maxlen: 24
189.247.104.0/24 maxlen: 24
189.249.0.0/16 maxlen: 24
189.250.0.0/16 maxlen: 24
192.100.232.0/23 maxlen: 24
200.33.148.0/24 maxlen: 24
200.78.120.0/21 maxlen: 24
201.97.0.0/16 maxlen: 24
201.99.0.0/16 maxlen: 24
201.103.0.0/16 maxlen: 24
201.104.128.0/17 maxlen: 24
201.105.0.0/16 maxlen: 24
201.108.0.0/16 maxlen: 24
201.111.0.0/16 maxlen: 24
201.114.0.0/16 maxlen: 24
201.119.0.0/16 maxlen: 24
201.121.0.0/19 maxlen: 24
201.122.16.0/23 maxlen: 24
201.122.73.0/24 maxlen: 24
201.122.88.0/23 maxlen: 24
201.122.113.0/24 maxlen: 24
201.122.120.0/24 maxlen: 24
201.122.127.0/24 maxlen: 24
201.122.128.0/24 maxlen: 24
201.122.146.0/24 maxlen: 24
201.122.153.0/24 maxlen: 24
201.122.161.0/24 maxlen: 24
201.122.170.0/24 maxlen: 24
201.122.190.0/24 maxlen: 24
201.122.194.0/24 maxlen: 24
201.122.199.0/24 maxlen: 24
201.122.201.0/24 maxlen: 24
201.122.213.0/24 maxlen: 24
201.122.214.0/24 maxlen: 24
201.122.226.0/24 maxlen: 24
201.123.0.0/16 maxlen: 24
201.124.0.0/16 maxlen: 24
201.125.120.0/24 maxlen: 24
201.128.0.0/17 maxlen: 24
201.134.128.0/18 maxlen: 24
201.136.64.0/18 maxlen: 24
201.137.0.0/16 maxlen: 24
201.138.0.0/16 maxlen: 24
201.152.0.0/14 maxlen: 24
201.155.12.0/24 maxlen: 24
201.155.91.0/24 maxlen: 24
201.155.109.0/24 maxlen: 24
201.155.121.0/24 maxlen: 24
201.155.188.0/24 maxlen: 24
201.155.203.0/24 maxlen: 24
201.155.215.0/24 maxlen: 24
2806:1001::/32 maxlen: 48
2806:1002::/31 maxlen: 48
2806:1004::/30 maxlen: 48
2806:1009::/32 maxlen: 48
2806:100a::/31 maxlen: 48
2806:100c::/30 maxlen: 48
2806:103e:5::/48 maxlen: 48
2806:103e:c::/48 maxlen: 48
2806:104e::/32 maxlen: 48
2806:1061::/32 maxlen: 48
2806:1062::/31 maxlen: 48
2806:1064::/30 maxlen: 48
2806:1068::/29 maxlen: 48
2806:1071::/32 maxlen: 48
2806:1072::/31 maxlen: 48
2806:1074::/30 maxlen: 48
2806:1078::/29 maxlen: 48
2806:10a1::/32 maxlen: 48
2806:10a2::/31 maxlen: 48
2806:10a4::/30 maxlen: 48
2806:10a9::/32 maxlen: 48
2806:10aa::/31 maxlen: 48
2806:10ac::/30 maxlen: 48
2806:10be:7::/48 maxlen: 48
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/3B87C93929EA1BE951549B8B74A3800C64833E85BE9D523BBA8EC24E94339AED/0/C868DC422443FA70E7761C0304061EB998BF7378.crl
rsync://repository.lacnic.net/rpki/lacnic/3B87C93929EA1BE951549B8B74A3800C64833E85BE9D523BBA8EC24E94339AED/0/C868DC422443FA70E7761C0304061EB998BF7378.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C868DC422443FA70E7761C0304061EB998BF7378.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 08 Apr 2025 22:50:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:80:14:55:33:e4:1d:2e:7d:65:01:bd:3d:e4:27:dd:e1:0d:bf:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C868DC422443FA70E7761C0304061EB998BF7378
Validity
Not Before: Feb 5 02:25:00 2025 GMT
Not After : Feb 4 02:30:00 2026 GMT
Subject: CN=1433E72FCE1641B455463043DACD5724AAE27A6C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:34:0e:44:2f:f1:d2:d2:b5:c0:c7:5d:4b:f4:
b8:80:62:5d:c5:82:8a:ca:a8:41:3c:0c:59:86:3a:
cc:a1:22:e1:45:d4:d1:9b:3d:07:59:db:77:68:79:
f6:db:80:fb:12:2b:d2:05:55:d2:1f:e5:4d:b4:21:
f0:5a:b8:15:e7:c2:71:90:b7:35:df:b3:8c:17:df:
63:b9:53:03:ed:91:fc:5f:92:2e:fe:e7:f7:fe:ca:
94:ef:53:53:dd:87:31:47:1e:09:b5:86:86:0d:7b:
b1:3f:64:41:5d:78:8a:82:e9:00:a9:45:f3:b9:7b:
c2:e5:3c:11:86:44:57:76:9f:4f:84:11:a0:4c:54:
a5:6e:43:a6:ec:c9:12:84:0a:1b:c7:6f:98:8b:31:
5b:6e:b5:1f:96:ec:28:07:e0:f3:57:4f:bc:e7:68:
2d:60:35:19:95:26:59:ad:a6:3a:99:5d:de:fb:24:
96:a0:5f:cf:55:9b:15:9c:17:f2:a1:8c:23:9a:32:
27:9a:77:9f:e2:dc:9a:bd:f3:b6:1a:50:1a:80:10:
9a:1a:eb:62:a6:52:9b:a9:5a:5b:a4:ff:95:52:06:
51:fc:ed:ea:b5:8c:b4:2c:2c:89:29:fa:79:09:6a:
7a:97:bc:8a:ef:bf:dd:b0:67:5d:6a:5a:dc:77:bc:
0d:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:33:E7:2F:CE:16:41:B4:55:46:30:43:DA:CD:57:24:AA:E2:7A:6C
X509v3 Authority Key Identifier:
keyid:C8:68:DC:42:24:43:FA:70:E7:76:1C:03:04:06:1E:B9:98:BF:73:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/3B87C93929EA1BE951549B8B74A3800C64833E85BE9D523BBA8EC24E94339AED/0/C868DC422443FA70E7761C0304061EB998BF7378.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C868DC422443FA70E7761C0304061EB998BF7378.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3B87C93929EA1BE951549B8B74A3800C64833E85BE9D523BBA8EC24E94339AED/0/AS8151.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.132.0.0/16
187.135.0.0-187.136.255.255
187.143.0.0/16
187.146.0.0/16
187.148.0.0/16
187.150.0.0-187.150.191.255
187.150.224.0/19
187.153.0.0-187.154.255.255
187.155.32.0-187.155.191.255
187.168.0.0/14
187.194.96.0-187.194.255.255
187.199.0.0/16
187.202.0.0/16
187.207.0.0/16
187.212.0.0/16
187.214.0.0/16
187.220.0.0-187.225.255.255
187.228.0.0/16
187.229.24.0-187.229.35.255
187.229.88.0/21
187.229.120.0/21
187.235.0.0/16
189.128.0.0-189.130.191.255
189.130.224.0-189.133.255.255
189.136.0.0/16
189.146.0.0-189.151.255.255
189.161.0.0/16
189.164.0.0/15
189.167.0.0/16
189.188.0.0/16
189.190.0.0/16
189.230.0.0/16
189.235.64.0/19
189.236.0.0/16
189.239.128.0/17
189.242.0.0/16
189.247.104.0/24
189.249.0.0-189.250.255.255
192.100.232.0/23
200.33.148.0/24
200.78.120.0/21
201.97.0.0/16
201.99.0.0/16
201.103.0.0/16
201.104.128.0-201.105.255.255
201.108.0.0/16
201.111.0.0/16
201.114.0.0/16
201.119.0.0/16
201.121.0.0/19
201.122.16.0/23
201.122.73.0/24
201.122.88.0/23
201.122.113.0/24
201.122.120.0/24
201.122.127.0-201.122.128.255
201.122.146.0/24
201.122.153.0/24
201.122.161.0/24
201.122.170.0/24
201.122.190.0/24
201.122.194.0/24
201.122.199.0/24
201.122.201.0/24
201.122.213.0-201.122.214.255
201.122.226.0/24
201.123.0.0-201.124.255.255
201.125.120.0/24
201.128.0.0/17
201.134.128.0/18
201.136.64.0/18
201.137.0.0-201.138.255.255
201.152.0.0/14
IPv6:
2806:1001::-2806:1007:ffff:ffff:ffff:ffff:ffff:ffff
2806:1009::-2806:100f:ffff:ffff:ffff:ffff:ffff:ffff
2806:103e:5::/48
2806:103e:c::/48
2806:104e::/32
2806:1061::-2806:106f:ffff:ffff:ffff:ffff:ffff:ffff
2806:1071::-2806:107f:ffff:ffff:ffff:ffff:ffff:ffff
2806:10a1::-2806:10a7:ffff:ffff:ffff:ffff:ffff:ffff
2806:10a9::-2806:10af:ffff:ffff:ffff:ffff:ffff:ffff
2806:10be:7::/48
Signature Algorithm: sha256WithRSAEncryption
d8:6b:be:94:9b:39:14:3a:7a:b9:8b:42:3b:a0:ba:4d:05:96:
b5:ee:90:1c:e3:6f:21:bb:88:61:c6:c3:c3:d6:4c:e4:53:16:
bd:72:87:2f:cb:7b:72:fe:f0:c7:f4:2c:20:fe:58:cd:48:5e:
5a:7b:12:e4:3b:2c:f6:c6:8c:dd:42:e3:0f:0a:be:74:d4:89:
11:81:9f:c0:19:c6:72:79:96:cb:96:67:9b:7c:6c:9d:e2:db:
02:28:32:8c:76:db:15:63:5e:10:19:04:37:88:dd:2d:1c:93:
80:8c:45:91:22:fe:10:9d:8e:4a:99:43:b5:64:9a:a2:6d:f3:
9c:2b:00:2d:75:c6:09:14:31:dc:53:d6:57:d3:71:74:c7:f1:
a9:60:b7:1a:bf:83:77:f6:9a:90:ae:8e:1f:ba:73:c8:d1:83:
6c:fb:6d:ca:38:d0:50:c2:ac:ed:81:97:44:88:e7:b6:af:e8:
3e:c2:9d:40:ee:ba:dc:fd:fe:8c:e6:54:c4:1c:db:3e:d2:18:
c4:2d:28:f8:d8:29:d1:51:8a:d6:43:f1:6f:58:4c:9f:fe:8c:
55:fb:c0:91:ca:ad:9f:fe:8c:19:11:20:29:14:07:99:33:e9:
55:33:0a:8f:0b:29:0a:85:20:ce:e0:78:e8:cc:8a:68:ec:2c:
25:48:66:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:00:21 2025 by rpki-client