Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/74BA078ED5E11994C15D78B8CE6A4FE52869D076EE17E4859B31FEF29CB9C376/0/34352e3233302e3136382e302f32322d3234203d3e20323636373432.roa
File: 34352e3233302e3136382e302f32322d3234203d3e20323636373432.roa (raw, json)
Hash identifier: xC8Bs3k5W3ZwAp9inVgXC7pk+D5yYYTvXNvO2rxLbC8=
Subject key identifier: B5:8D:B3:5B:41:E9:E1:70:21:23:25:BF:0C:0C:70:0D:53:EC:2F:3D
Certificate issuer: /CN=B24CA78B7CA9E704118D756771FB5D680776F2CF
Certificate serial: 45A58E10945959977B0A9E5BFBD99E4AFF33C093
Authority key identifier: B2:4C:A7:8B:7C:A9:E7:04:11:8D:75:67:71:FB:5D:68:07:76:F2:CF
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B24CA78B7CA9E704118D756771FB5D680776F2CF.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/74BA078ED5E11994C15D78B8CE6A4FE52869D076EE17E4859B31FEF29CB9C376/0/34352e3233302e3136382e302f32322d3234203d3e20323636373432.roa
Signing time: Tue 04 Feb 2025 18:40:24 +0000
ROA not before: Tue 04 Feb 2025 18:35:24 +0000
ROA not after: Tue 03 Feb 2026 18:40:24 +0000
asID: 266742
IP address blocks: 45.230.168.0/22 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/74BA078ED5E11994C15D78B8CE6A4FE52869D076EE17E4859B31FEF29CB9C376/0/B24CA78B7CA9E704118D756771FB5D680776F2CF.crl
rsync://repository.lacnic.net/rpki/lacnic/74BA078ED5E11994C15D78B8CE6A4FE52869D076EE17E4859B31FEF29CB9C376/0/B24CA78B7CA9E704118D756771FB5D680776F2CF.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B24CA78B7CA9E704118D756771FB5D680776F2CF.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 17 Apr 2025 22:26:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:a5:8e:10:94:59:59:97:7b:0a:9e:5b:fb:d9:9e:4a:ff:33:c0:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B24CA78B7CA9E704118D756771FB5D680776F2CF
Validity
Not Before: Feb 4 18:35:24 2025 GMT
Not After : Feb 3 18:40:24 2026 GMT
Subject: CN=B58DB35B41E9E170212325BF0C0C700D53EC2F3D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:e3:47:27:79:ad:b0:a0:c4:da:4c:5f:ae:a0:
0e:09:0e:dd:1b:59:da:86:62:70:b2:db:7a:4f:95:
4f:87:dc:38:8d:02:a9:7f:03:44:f3:89:d4:6f:5c:
8c:89:26:b9:12:3f:74:bf:fb:f0:b1:8b:cf:48:7f:
39:d8:f8:0b:64:5d:f4:3a:6b:e1:10:e1:70:90:46:
bc:43:cb:39:64:45:41:db:c7:c3:8d:a2:c8:2b:19:
6e:1b:9a:41:8f:f0:1e:65:00:a3:62:ea:f8:2b:39:
17:e1:9b:21:5c:b3:92:e8:1e:7e:a9:4c:f5:2c:fa:
41:4f:49:d6:6c:13:49:3b:fb:00:0e:75:28:57:4e:
15:95:ce:c6:c2:86:2c:c7:64:80:0b:a1:29:e9:54:
fb:81:dd:e6:ef:14:5e:32:80:ea:5a:04:f5:e7:14:
fa:de:86:1f:38:91:e1:1b:82:75:7b:99:41:43:21:
f5:90:71:c6:0b:86:b5:21:ed:fe:27:e5:b5:57:15:
37:9e:41:7b:1d:03:f2:e7:e0:fc:a4:f2:83:8b:f9:
79:31:cf:45:30:fc:b0:cb:0c:71:78:ce:81:b7:78:
56:75:9b:f5:0e:48:d8:28:55:f9:5b:ee:63:86:45:
40:2e:d2:57:ba:3f:1c:53:02:46:7c:f1:02:50:fa:
b5:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:8D:B3:5B:41:E9:E1:70:21:23:25:BF:0C:0C:70:0D:53:EC:2F:3D
X509v3 Authority Key Identifier:
keyid:B2:4C:A7:8B:7C:A9:E7:04:11:8D:75:67:71:FB:5D:68:07:76:F2:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/74BA078ED5E11994C15D78B8CE6A4FE52869D076EE17E4859B31FEF29CB9C376/0/B24CA78B7CA9E704118D756771FB5D680776F2CF.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B24CA78B7CA9E704118D756771FB5D680776F2CF.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/74BA078ED5E11994C15D78B8CE6A4FE52869D076EE17E4859B31FEF29CB9C376/0/34352e3233302e3136382e302f32322d3234203d3e20323636373432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.230.168.0/22
Signature Algorithm: sha256WithRSAEncryption
50:69:a4:ab:1d:47:3f:05:c3:b2:91:68:ec:4d:ed:2f:d2:3e:
38:37:fe:59:45:af:e9:8e:dc:ec:e7:ac:4e:0c:c8:9e:82:b6:
78:12:d8:c5:09:57:ec:5c:90:ce:40:f6:fb:00:1f:94:c5:f4:
e4:a0:35:79:1b:3d:91:00:ee:f6:80:a0:00:bc:02:89:4d:b1:
7a:e8:1f:71:f5:34:aa:b4:f6:45:e3:59:ab:0b:4d:48:08:0f:
dd:19:91:65:9a:c9:65:35:0b:47:c0:67:06:47:4c:ab:48:51:
db:b4:c1:67:30:4b:5b:75:65:5f:71:e4:c2:cb:21:ce:2e:d5:
cc:03:de:2d:cf:61:f9:0e:ec:ad:4b:4f:7d:c1:5d:af:61:cd:
75:7a:9f:99:3f:46:99:ef:59:57:72:45:1b:b7:45:c4:8b:86:
ae:bf:a5:11:ec:ca:03:8f:15:22:88:54:c3:4c:94:99:d6:d9:
9f:0e:b0:ed:0a:c7:1f:d9:06:c5:8c:e9:c7:3b:0c:56:8e:ed:
3f:7b:76:5e:fd:90:73:a0:50:9a:8d:44:44:69:d0:76:72:29:
07:83:bb:75:16:db:3d:7c:55:e9:e7:dc:e5:95:ba:77:2f:01:
5b:f4:0d:25:f9:d7:a4:18:b0:b0:0a:52:6d:ba:ab:39:f2:05:
25:15:08:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 06:22:53 2025 by rpki-client