Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/59F0FD8273BD179246780F8BF2D7DB0AE56FE33EEE020D07550D60E23FD01F2E/0/3133382e302e3234302e302f32322d3232203d3e20323634383530.roa
File: 3133382e302e3234302e302f32322d3232203d3e20323634383530.roa (raw, json)
Hash identifier: RXDwffaEMp/t5WuLEFZgVGtYSBOBcfEAHNWyxGQ7UjA=
Subject key identifier: 0A:C4:D3:8C:19:23:4F:A0:AB:73:EA:68:E5:C6:54:C2:62:67:46:9F
Certificate issuer: /CN=FA7A92609CADE6A78C1E178DEFE7C9C24CF75169
Certificate serial: 61CB916102FC3D9D2E0625E0C1FE98D018EEFE9A
Authority key identifier: FA:7A:92:60:9C:AD:E6:A7:8C:1E:17:8D:EF:E7:C9:C2:4C:F7:51:69
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FA7A92609CADE6A78C1E178DEFE7C9C24CF75169.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/59F0FD8273BD179246780F8BF2D7DB0AE56FE33EEE020D07550D60E23FD01F2E/0/3133382e302e3234302e302f32322d3232203d3e20323634383530.roa
Signing time: Tue 04 Feb 2025 18:39:13 +0000
ROA not before: Tue 04 Feb 2025 18:34:13 +0000
ROA not after: Tue 03 Feb 2026 18:39:13 +0000
asID: 264850
IP address blocks: 138.0.240.0/22 maxlen: 22
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/59F0FD8273BD179246780F8BF2D7DB0AE56FE33EEE020D07550D60E23FD01F2E/0/FA7A92609CADE6A78C1E178DEFE7C9C24CF75169.crl
rsync://repository.lacnic.net/rpki/lacnic/59F0FD8273BD179246780F8BF2D7DB0AE56FE33EEE020D07550D60E23FD01F2E/0/FA7A92609CADE6A78C1E178DEFE7C9C24CF75169.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FA7A92609CADE6A78C1E178DEFE7C9C24CF75169.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 17 Apr 2025 18:56:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:cb:91:61:02:fc:3d:9d:2e:06:25:e0:c1:fe:98:d0:18:ee:fe:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FA7A92609CADE6A78C1E178DEFE7C9C24CF75169
Validity
Not Before: Feb 4 18:34:13 2025 GMT
Not After : Feb 3 18:39:13 2026 GMT
Subject: CN=0AC4D38C19234FA0AB73EA68E5C654C26267469F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:63:f4:a2:e7:1e:97:01:8a:d6:53:85:48:ec:
9d:b5:16:21:9f:d2:0e:e6:40:36:22:9e:64:82:e8:
ff:b5:ce:65:41:a7:61:9d:8a:98:06:18:3d:d2:ea:
e7:9c:c8:9b:86:58:81:04:9b:53:ec:22:d3:ed:8a:
c0:47:14:32:9a:30:40:d5:65:20:ff:cf:d4:db:d2:
a8:e7:22:c7:a1:5b:19:ef:3c:15:93:66:7d:9c:1b:
d3:ec:ef:cb:61:37:40:ef:70:65:73:03:b8:9b:da:
08:d7:d3:62:ee:ca:5c:89:5a:f2:d9:b2:f9:6b:3a:
11:da:1b:b5:ce:e5:36:f3:e8:77:29:de:e7:98:6e:
9e:ac:38:63:63:cd:58:dc:10:45:67:59:f4:77:d7:
a2:07:93:56:cd:e5:71:d8:7c:50:e9:f6:b9:8e:c5:
61:53:c0:9b:e6:c1:6a:8d:de:4f:3b:21:9b:86:53:
15:c5:c1:c2:c1:e4:e7:75:61:0f:0f:9c:bb:5b:7c:
8f:04:e8:c6:08:d3:87:b0:37:77:1e:21:e0:da:ec:
56:f8:f8:39:25:d2:73:22:b5:4a:39:91:d9:a7:f1:
0f:d8:12:58:8d:68:c9:f1:92:7c:7a:ea:61:16:05:
7e:46:34:df:af:93:ec:af:3b:9a:2d:4a:a4:0a:38:
a1:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:C4:D3:8C:19:23:4F:A0:AB:73:EA:68:E5:C6:54:C2:62:67:46:9F
X509v3 Authority Key Identifier:
keyid:FA:7A:92:60:9C:AD:E6:A7:8C:1E:17:8D:EF:E7:C9:C2:4C:F7:51:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/59F0FD8273BD179246780F8BF2D7DB0AE56FE33EEE020D07550D60E23FD01F2E/0/FA7A92609CADE6A78C1E178DEFE7C9C24CF75169.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FA7A92609CADE6A78C1E178DEFE7C9C24CF75169.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/59F0FD8273BD179246780F8BF2D7DB0AE56FE33EEE020D07550D60E23FD01F2E/0/3133382e302e3234302e302f32322d3232203d3e20323634383530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.0.240.0/22
Signature Algorithm: sha256WithRSAEncryption
55:ce:a7:d4:16:e9:85:52:90:98:e1:3d:a8:29:8a:e3:40:b9:
3c:3e:6d:a7:ff:4b:85:11:19:91:e2:09:07:b9:8a:a4:24:bf:
10:58:b1:21:f0:27:10:f3:24:f9:ec:d2:fd:8a:5b:56:e3:5d:
c8:bb:ed:48:86:63:62:d4:20:a0:1e:1f:67:78:f8:1f:d3:e9:
ed:5a:65:cf:27:68:2a:2e:dd:5b:bc:9b:71:fa:64:f7:5d:cb:
cc:5f:04:aa:18:3c:77:1a:1e:17:3c:3e:41:0d:72:b6:23:f0:
23:d9:c6:4e:97:29:e9:c2:f3:50:ca:f1:06:4c:ce:f6:5c:98:
3d:5d:18:da:64:55:13:18:16:6d:44:87:3e:b9:a7:d9:0b:0c:
03:24:7f:62:51:9b:12:15:41:16:5a:8f:fa:94:b0:27:8d:86:
d7:e1:83:c4:3a:79:1e:0e:84:c3:b1:96:dd:4d:1e:da:8d:70:
99:0f:a4:c1:6b:a0:ba:b1:a5:da:df:fc:87:45:df:85:99:9b:
90:34:59:fa:28:1f:65:ac:9a:1d:18:06:05:15:6c:ab:70:81:
cd:64:37:40:2b:62:5c:1b:80:d7:a8:80:76:c1:16:55:ce:70:
c4:c9:db:a6:54:e7:ed:36:da:21:6f:ff:51:fd:37:63:f8:5c:
22:5e:96:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 04:26:43 2025 by rpki-client