Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/724424E852450082B9B54381D3A94A81D59CD4E663DDA85A42C9B05177D783E2/0/3230312e3135382e39372e302f32342d3234203d3e20323733393635.roa
File: 3230312e3135382e39372e302f32342d3234203d3e20323733393635.roa (raw, json)
Hash identifier: w3Yy4sRo0gzJGcEnOCGmEHKKiZdLPgWGX410//7WEO4=
Subject key identifier: EA:7C:3D:48:6C:08:0E:E8:1F:83:2A:65:E1:A4:6E:17:D3:C0:83:40
Certificate issuer: /CN=AA21B81A35BAF7E5F10E0C8ABE16466745C37BF8
Certificate serial: 5F817681E413995EF7D4C381135DE4F4E16465A0
Authority key identifier: AA:21:B8:1A:35:BA:F7:E5:F1:0E:0C:8A:BE:16:46:67:45:C3:7B:F8
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA21B81A35BAF7E5F10E0C8ABE16466745C37BF8.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/724424E852450082B9B54381D3A94A81D59CD4E663DDA85A42C9B05177D783E2/0/3230312e3135382e39372e302f32342d3234203d3e20323733393635.roa
Signing time: Mon 17 Feb 2025 20:00:00 +0000
ROA not before: Mon 17 Feb 2025 19:55:00 +0000
ROA not after: Mon 16 Feb 2026 20:00:00 +0000
asID: 273965
IP address blocks: 201.158.97.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/724424E852450082B9B54381D3A94A81D59CD4E663DDA85A42C9B05177D783E2/0/AA21B81A35BAF7E5F10E0C8ABE16466745C37BF8.crl
rsync://repository.lacnic.net/rpki/lacnic/724424E852450082B9B54381D3A94A81D59CD4E663DDA85A42C9B05177D783E2/0/AA21B81A35BAF7E5F10E0C8ABE16466745C37BF8.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA21B81A35BAF7E5F10E0C8ABE16466745C37BF8.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 17 Apr 2025 23:28:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:81:76:81:e4:13:99:5e:f7:d4:c3:81:13:5d:e4:f4:e1:64:65:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AA21B81A35BAF7E5F10E0C8ABE16466745C37BF8
Validity
Not Before: Feb 17 19:55:00 2025 GMT
Not After : Feb 16 20:00:00 2026 GMT
Subject: CN=EA7C3D486C080EE81F832A65E1A46E17D3C08340
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:6d:15:92:d5:35:af:ac:ba:09:e4:0f:8c:60:
9b:28:21:a2:72:1e:16:45:55:64:f2:48:8f:4c:83:
56:cf:cf:54:36:c3:30:16:19:01:03:78:85:34:25:
67:19:b2:7f:10:9d:38:23:6c:32:52:17:30:ef:8d:
22:7d:7a:54:85:7a:ed:4d:48:6d:24:ad:e2:d2:00:
89:8b:60:1a:90:ee:62:81:8e:fc:38:77:41:e7:ed:
5c:62:3c:e1:e6:53:41:94:ff:09:6c:87:e9:0b:30:
9e:33:02:24:d1:7b:21:ad:f8:7e:f6:3d:39:7e:1b:
43:bd:ed:c1:86:21:fe:9f:10:26:aa:49:a2:fd:6f:
3f:3e:b5:e6:f3:a2:d1:d7:0a:06:91:65:35:43:83:
98:1d:ae:d1:38:ba:36:18:cd:af:5d:8b:50:5f:bd:
d2:7f:ff:f1:7e:13:53:bc:7c:f6:15:a3:76:35:32:
70:cb:59:e6:78:97:3f:05:ad:bf:9d:e0:bb:75:75:
43:fc:93:56:f7:93:c0:c0:b5:1f:6d:49:06:10:69:
ae:19:6b:0f:da:2b:17:c1:fa:05:26:fe:ea:4d:55:
5d:55:8a:f5:12:ca:25:f7:9f:f4:93:5f:69:d6:4f:
6e:f0:a1:35:4a:0a:ff:b4:b8:f6:89:fb:c8:cf:c6:
f6:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:7C:3D:48:6C:08:0E:E8:1F:83:2A:65:E1:A4:6E:17:D3:C0:83:40
X509v3 Authority Key Identifier:
keyid:AA:21:B8:1A:35:BA:F7:E5:F1:0E:0C:8A:BE:16:46:67:45:C3:7B:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/724424E852450082B9B54381D3A94A81D59CD4E663DDA85A42C9B05177D783E2/0/AA21B81A35BAF7E5F10E0C8ABE16466745C37BF8.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA21B81A35BAF7E5F10E0C8ABE16466745C37BF8.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/724424E852450082B9B54381D3A94A81D59CD4E663DDA85A42C9B05177D783E2/0/3230312e3135382e39372e302f32342d3234203d3e20323733393635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.158.97.0/24
Signature Algorithm: sha256WithRSAEncryption
97:31:c0:a4:7c:ac:a1:6b:53:3c:0d:0c:53:de:fe:ed:f4:42:
59:34:22:90:e8:95:98:ba:ac:fa:ab:2d:a6:d3:af:65:28:06:
40:7a:bb:f3:ee:8f:95:48:69:ff:c5:a1:68:6d:aa:24:9d:c8:
7f:c9:66:a4:f0:47:a5:e3:21:10:32:e6:f6:4b:05:98:48:c9:
82:9a:c1:f5:65:a5:46:0e:9e:de:af:20:4d:12:eb:09:af:3c:
5a:8c:8b:39:98:44:e9:0e:8a:ad:fa:90:e1:47:27:a4:8e:92:
9d:41:fb:71:1d:ee:d6:3d:55:cd:da:a6:d3:6f:69:fe:9d:98:
6c:2a:ae:da:05:8e:f8:24:d4:01:a4:2b:eb:37:99:4d:b3:11:
b2:e5:87:82:a8:08:ec:43:88:7d:d1:de:da:cc:2f:cf:53:d6:
0c:e8:ba:e0:45:24:d1:bd:c8:7e:99:06:23:fd:62:1c:14:76:
b4:a1:b3:8b:e4:ea:b9:ef:23:20:ac:b5:dc:a2:0c:5f:0f:85:
63:a1:40:d3:08:ae:ac:87:cd:ae:30:57:f3:42:34:35:0d:44:
16:5a:15:99:b4:8e:28:08:0d:d6:f1:7b:c0:ec:30:08:1a:4f:
ca:63:0a:28:e3:bf:51:39:7c:6e:99:65:e8:90:35:90:98:6f:
6c:15:7f:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 06:35:36 2025 by rpki-client