Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6B448B2F99F750DEE4FB3820BFDEEA5C070AC78AC1DDEAE4BA5B472B580DA264/0/3134332e3230322e3139322e302f32322d3232203d3e203238303735.roa
File: 3134332e3230322e3139322e302f32322d3232203d3e203238303735.roa (raw, json)
Hash identifier: ZmLvKUlaxaW1nlp+ayN9Kb12MwXis+bkpGzckobjb3Q=
Subject key identifier: 72:7D:D5:47:CC:DA:70:47:85:EA:26:E7:02:ED:F1:44:39:75:FE:1B
Certificate issuer: /CN=CCC7DFB2C7C9FCF2F114061476ECB87B573A4E18
Certificate serial: 443172959DC420650D3241E9FE9A618E820121A0
Authority key identifier: CC:C7:DF:B2:C7:C9:FC:F2:F1:14:06:14:76:EC:B8:7B:57:3A:4E:18
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CCC7DFB2C7C9FCF2F114061476ECB87B573A4E18.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/6B448B2F99F750DEE4FB3820BFDEEA5C070AC78AC1DDEAE4BA5B472B580DA264/0/3134332e3230322e3139322e302f32322d3232203d3e203238303735.roa
Signing time: Tue 04 Feb 2025 19:59:01 +0000
ROA not before: Tue 04 Feb 2025 19:54:01 +0000
ROA not after: Tue 03 Feb 2026 19:59:01 +0000
asID: 28075
IP address blocks: 143.202.192.0/22 maxlen: 22
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/6B448B2F99F750DEE4FB3820BFDEEA5C070AC78AC1DDEAE4BA5B472B580DA264/0/CCC7DFB2C7C9FCF2F114061476ECB87B573A4E18.crl
rsync://repository.lacnic.net/rpki/lacnic/6B448B2F99F750DEE4FB3820BFDEEA5C070AC78AC1DDEAE4BA5B472B580DA264/0/CCC7DFB2C7C9FCF2F114061476ECB87B573A4E18.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CCC7DFB2C7C9FCF2F114061476ECB87B573A4E18.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 17 Apr 2025 13:19:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:31:72:95:9d:c4:20:65:0d:32:41:e9:fe:9a:61:8e:82:01:21:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CCC7DFB2C7C9FCF2F114061476ECB87B573A4E18
Validity
Not Before: Feb 4 19:54:01 2025 GMT
Not After : Feb 3 19:59:01 2026 GMT
Subject: CN=727DD547CCDA704785EA26E702EDF1443975FE1B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f2:fe:6d:67:25:cc:0f:c4:62:37:eb:7d:5f:
9d:72:93:6a:f4:b9:e7:c9:64:6b:49:5a:e1:00:51:
cb:5d:b5:e9:d7:69:d9:71:4e:dd:71:76:41:60:69:
67:87:17:a3:b5:14:b0:09:5c:7e:ff:37:0d:84:c4:
3e:14:69:52:ce:33:76:8b:29:4f:55:85:ee:16:63:
c5:0c:c8:b8:17:cb:2f:fa:fa:e3:5b:48:47:d6:01:
71:32:34:72:13:78:3f:3e:1d:31:ad:ed:2b:fc:1c:
43:b6:d0:a1:4f:81:2d:37:da:64:16:44:a8:be:a8:
7a:83:0a:6e:a2:aa:8f:21:d9:09:43:e9:5b:62:a1:
a4:17:0e:21:fd:8c:b6:e9:9c:30:fd:2f:63:21:18:
db:05:2d:71:25:b2:9b:0f:f0:e8:ee:89:65:07:71:
37:a6:ce:ca:67:f0:6c:da:b4:05:ed:1a:c3:19:d7:
ff:28:25:ef:1b:6c:f2:32:70:09:1e:97:d1:c3:a8:
1b:4d:4b:55:86:ff:d1:a8:27:8a:99:a4:b7:9d:03:
ec:29:5a:01:fa:65:f3:a2:3d:e0:cf:4f:0d:7a:00:
34:9e:e2:13:c9:5b:ad:71:f4:99:e7:54:be:2e:3b:
f3:66:ab:3e:e7:35:3e:b0:c9:80:7f:3c:e0:b5:f1:
cd:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:7D:D5:47:CC:DA:70:47:85:EA:26:E7:02:ED:F1:44:39:75:FE:1B
X509v3 Authority Key Identifier:
keyid:CC:C7:DF:B2:C7:C9:FC:F2:F1:14:06:14:76:EC:B8:7B:57:3A:4E:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/6B448B2F99F750DEE4FB3820BFDEEA5C070AC78AC1DDEAE4BA5B472B580DA264/0/CCC7DFB2C7C9FCF2F114061476ECB87B573A4E18.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CCC7DFB2C7C9FCF2F114061476ECB87B573A4E18.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6B448B2F99F750DEE4FB3820BFDEEA5C070AC78AC1DDEAE4BA5B472B580DA264/0/3134332e3230322e3139322e302f32322d3232203d3e203238303735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.202.192.0/22
Signature Algorithm: sha256WithRSAEncryption
07:43:3b:69:1b:a2:fc:0c:53:a4:f5:1f:ed:f0:9b:67:d9:1a:
02:14:6d:4b:e0:a6:c9:bf:c0:9d:a9:33:61:af:2b:fd:24:bd:
5e:94:d5:1e:99:48:c9:f6:82:ba:9a:0c:0a:25:89:5c:4f:14:
e2:28:83:d3:44:98:f8:3c:f2:b4:19:f3:c7:78:59:0c:96:de:
b2:46:3e:20:4a:18:b0:d2:1e:69:06:6c:ea:fa:8d:d9:3c:35:
3f:ab:7c:74:1b:3e:84:69:08:d7:1d:b2:1d:34:56:e5:43:56:
9a:e9:48:e4:6e:7c:81:46:55:0d:f3:1e:cc:36:0a:df:f4:a2:
81:6a:7b:f1:c2:4a:e1:86:3c:21:06:26:d8:3d:e4:fd:46:36:
55:ee:6e:c0:48:dc:9d:cb:c4:cb:f5:51:34:b4:23:1a:41:53:
eb:60:ec:62:08:9e:33:82:2a:42:29:de:fc:4f:8a:d4:e4:ea:
86:6e:b0:da:0f:ad:73:c0:37:52:17:28:9e:a3:fc:f0:6f:a7:
3e:e6:8a:7a:d8:bc:ba:41:a6:97:78:ec:de:84:66:c9:0b:ae:
7b:1c:a4:14:ab:b6:98:26:32:4e:81:1b:d6:66:1e:d8:b5:7d:
b5:2a:f4:7d:c2:1c:ee:93:a3:30:33:b9:c4:28:6c:21:fb:f4:
5b:38:04:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 03:28:42 2025 by rpki-client