Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/70A1CEA842F9ED29DD27DD97EFAB2973D5BB279303E37390D508F0F778E89CB4/0/34352e3232392e3134382e302f32332d3233203d3e20323636373039.roa
File: 34352e3232392e3134382e302f32332d3233203d3e20323636373039.roa (raw, json)
Hash identifier: uhtaOXYnyQWlgfLXAQhXNWn1L+HOA2wq8/yjiC4IM/c=
Subject key identifier: ED:1D:CF:FC:C6:6A:92:AE:E9:57:42:CF:83:B0:03:83:6C:76:00:2A
Certificate issuer: /CN=779F88CEF196B5EBF62DE93CD9CB49C78F317C2A
Certificate serial: 4E2AE7FD047535B8A157F1C6DC16F706141E71B7
Authority key identifier: 77:9F:88:CE:F1:96:B5:EB:F6:2D:E9:3C:D9:CB:49:C7:8F:31:7C:2A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/779F88CEF196B5EBF62DE93CD9CB49C78F317C2A.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/70A1CEA842F9ED29DD27DD97EFAB2973D5BB279303E37390D508F0F778E89CB4/0/34352e3232392e3134382e302f32332d3233203d3e20323636373039.roa
Signing time: Tue 04 Feb 2025 18:17:07 +0000
ROA not before: Tue 04 Feb 2025 18:12:07 +0000
ROA not after: Tue 03 Feb 2026 18:17:07 +0000
asID: 266709
IP address blocks: 45.229.148.0/23 maxlen: 23
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/70A1CEA842F9ED29DD27DD97EFAB2973D5BB279303E37390D508F0F778E89CB4/0/779F88CEF196B5EBF62DE93CD9CB49C78F317C2A.crl
rsync://repository.lacnic.net/rpki/lacnic/70A1CEA842F9ED29DD27DD97EFAB2973D5BB279303E37390D508F0F778E89CB4/0/779F88CEF196B5EBF62DE93CD9CB49C78F317C2A.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/779F88CEF196B5EBF62DE93CD9CB49C78F317C2A.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 18 Apr 2025 17:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:2a:e7:fd:04:75:35:b8:a1:57:f1:c6:dc:16:f7:06:14:1e:71:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=779F88CEF196B5EBF62DE93CD9CB49C78F317C2A
Validity
Not Before: Feb 4 18:12:07 2025 GMT
Not After : Feb 3 18:17:07 2026 GMT
Subject: CN=ED1DCFFCC66A92AEE95742CF83B003836C76002A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f8:d8:33:4a:c7:fe:47:85:0e:f9:04:19:2d:
02:92:22:58:ad:41:0f:43:2e:4c:16:b3:5b:f3:61:
d9:2f:5d:e0:c4:87:9d:0c:6f:a8:fb:07:a3:ae:2e:
3f:cf:1f:8e:3d:d3:64:f6:99:d5:72:7c:c9:e6:d7:
6b:b9:62:20:e0:fc:62:b4:f5:4d:0b:18:6b:9f:a6:
e8:fa:29:f7:62:6b:0a:26:17:3b:8e:a4:c4:b1:29:
db:50:ca:c0:50:5d:06:20:77:73:35:84:d8:3b:43:
1f:3a:bb:ff:df:f1:92:ab:d3:b2:52:1d:97:ff:a7:
dc:96:6b:bc:bf:a4:cf:e2:dc:71:69:4e:c1:44:4e:
60:fc:9a:27:43:fa:d1:2c:02:ec:04:3d:73:02:5c:
f8:e8:14:83:8e:43:be:46:20:a6:3e:2d:ad:7a:78:
f2:0d:87:a0:16:39:c8:99:00:84:25:52:8e:78:1a:
04:c6:85:c9:ef:e4:9c:12:94:5a:ec:0c:4f:69:a1:
47:32:0e:3d:21:11:e9:03:79:5e:c4:94:c7:cc:bf:
8e:2f:75:88:38:72:56:4f:e5:4e:63:5a:bc:92:b7:
bc:70:d7:a7:04:f6:c3:2f:4b:a7:ed:f5:4b:0c:e9:
c6:16:e5:35:98:c5:55:a5:de:d8:50:50:52:f2:80:
80:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:1D:CF:FC:C6:6A:92:AE:E9:57:42:CF:83:B0:03:83:6C:76:00:2A
X509v3 Authority Key Identifier:
keyid:77:9F:88:CE:F1:96:B5:EB:F6:2D:E9:3C:D9:CB:49:C7:8F:31:7C:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/70A1CEA842F9ED29DD27DD97EFAB2973D5BB279303E37390D508F0F778E89CB4/0/779F88CEF196B5EBF62DE93CD9CB49C78F317C2A.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/779F88CEF196B5EBF62DE93CD9CB49C78F317C2A.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/70A1CEA842F9ED29DD27DD97EFAB2973D5BB279303E37390D508F0F778E89CB4/0/34352e3232392e3134382e302f32332d3233203d3e20323636373039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.229.148.0/23
Signature Algorithm: sha256WithRSAEncryption
5c:9e:fb:0b:1e:e1:cd:53:fb:a1:26:68:e3:91:28:d0:52:c1:
24:51:6f:9e:70:76:4a:85:3e:73:fc:b3:b9:f0:fa:03:bb:4f:
ae:e7:b4:ca:75:c6:fa:72:84:a0:86:70:31:a3:a1:db:e7:7a:
b8:0b:8d:c4:23:c6:5a:d4:11:85:37:7f:35:f2:04:45:bf:9d:
03:79:fd:dd:ee:8d:cd:a2:74:83:67:b0:ad:46:6f:e9:3b:7a:
a6:03:e0:5e:17:77:2f:b4:be:06:74:ea:99:7a:63:28:4c:63:
98:82:b3:cb:87:f3:84:2e:37:34:6b:34:6d:8d:89:78:f1:e4:
36:f6:8b:9e:65:50:0f:e1:b7:8b:d3:30:4e:4c:0e:ce:75:11:
44:eb:48:e9:d8:a9:9b:67:f9:f7:76:f6:ed:b0:af:26:79:6b:
b7:16:84:b8:31:cf:cf:45:67:44:84:dc:ed:56:3f:45:f4:94:
b5:16:13:95:d9:3f:8f:63:18:a7:05:c3:47:96:c3:9a:72:ed:
b8:b7:f3:43:2e:31:e1:b2:b1:31:3f:dd:db:98:93:fb:10:97:
61:f9:f0:16:b9:e3:c8:d6:d7:7d:39:c7:48:21:4d:d0:02:3a:
d6:06:9d:18:e0:db:d0:99:49:b1:21:18:e4:65:32:3a:13:5f:
a8:5c:74:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 13:43:18 2025 by rpki-client