Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7B15C99B60C3467DB710F176D9469BE63B6458FEA58DF3D6C540E8E7C6C5ABC5/0/34352e3233312e35322e302f32342d3234203d3e20323633373739.roa
File: 34352e3233312e35322e302f32342d3234203d3e20323633373739.roa (raw, json)
Hash identifier: xiKx17ycGN9eo4qlg9hS1CXcDtknld/LdtmogqFdfpY=
Subject key identifier: 8D:D4:39:7A:3A:43:3B:5F:39:15:0C:84:6A:A9:64:A6:2F:43:9C:82
Certificate issuer: /CN=20F2D550DA2FAFE7B64F3850D9C739B71E61FD18
Certificate serial: 4D443D4D9A704ADADE1901377B44DFB2DBE12B23
Authority key identifier: 20:F2:D5:50:DA:2F:AF:E7:B6:4F:38:50:D9:C7:39:B7:1E:61:FD:18
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20F2D550DA2FAFE7B64F3850D9C739B71E61FD18.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/7B15C99B60C3467DB710F176D9469BE63B6458FEA58DF3D6C540E8E7C6C5ABC5/0/34352e3233312e35322e302f32342d3234203d3e20323633373739.roa
Signing time: Tue 04 Feb 2025 18:14:03 +0000
ROA not before: Tue 04 Feb 2025 18:09:03 +0000
ROA not after: Tue 03 Feb 2026 18:14:03 +0000
asID: 263779
IP address blocks: 45.231.52.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/7B15C99B60C3467DB710F176D9469BE63B6458FEA58DF3D6C540E8E7C6C5ABC5/0/20F2D550DA2FAFE7B64F3850D9C739B71E61FD18.crl
rsync://repository.lacnic.net/rpki/lacnic/7B15C99B60C3467DB710F176D9469BE63B6458FEA58DF3D6C540E8E7C6C5ABC5/0/20F2D550DA2FAFE7B64F3850D9C739B71E61FD18.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20F2D550DA2FAFE7B64F3850D9C739B71E61FD18.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 18 Apr 2025 17:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:44:3d:4d:9a:70:4a:da:de:19:01:37:7b:44:df:b2:db:e1:2b:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20F2D550DA2FAFE7B64F3850D9C739B71E61FD18
Validity
Not Before: Feb 4 18:09:03 2025 GMT
Not After : Feb 3 18:14:03 2026 GMT
Subject: CN=8DD4397A3A433B5F39150C846AA964A62F439C82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:3f:fa:0e:69:47:f9:6b:47:ed:cb:96:d3:eb:
ac:6d:dd:c7:d9:13:cd:68:7e:83:8c:d2:7f:b1:39:
3a:94:fc:f4:b3:36:d8:f0:52:e1:9f:b3:53:dc:a7:
89:bc:1d:db:d1:ca:8e:a7:d3:4b:27:62:81:56:36:
28:de:c7:b3:97:90:1c:33:f2:2d:b3:da:51:e9:bd:
7f:0e:52:7d:ee:b8:b5:a9:e4:67:63:09:94:5b:88:
2f:18:81:8f:e9:18:15:dc:38:2d:8a:c0:c6:75:26:
99:df:85:cc:88:a7:85:5a:66:c8:67:ee:29:1f:54:
3d:eb:80:0c:9a:91:4d:92:8b:86:68:9d:99:30:36:
cd:f1:05:4f:11:87:0c:91:65:d7:f2:6b:d3:81:bd:
a6:5b:e9:be:1f:a5:8b:99:76:fb:65:c6:9d:77:94:
9b:63:29:80:80:50:c3:c1:25:a1:38:7d:40:68:b1:
86:92:df:cd:98:06:17:c3:f3:4a:06:cf:ca:96:28:
84:d9:d9:91:50:5f:a4:42:b1:26:2c:54:81:8c:83:
d1:80:a5:4b:48:f4:7a:02:ce:66:a8:f8:ea:eb:48:
ea:e4:39:bd:68:29:ef:73:23:1f:94:bf:1f:49:61:
8b:bc:fb:db:90:56:bf:08:23:26:6c:d7:92:a2:71:
36:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:D4:39:7A:3A:43:3B:5F:39:15:0C:84:6A:A9:64:A6:2F:43:9C:82
X509v3 Authority Key Identifier:
keyid:20:F2:D5:50:DA:2F:AF:E7:B6:4F:38:50:D9:C7:39:B7:1E:61:FD:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/7B15C99B60C3467DB710F176D9469BE63B6458FEA58DF3D6C540E8E7C6C5ABC5/0/20F2D550DA2FAFE7B64F3850D9C739B71E61FD18.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20F2D550DA2FAFE7B64F3850D9C739B71E61FD18.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7B15C99B60C3467DB710F176D9469BE63B6458FEA58DF3D6C540E8E7C6C5ABC5/0/34352e3233312e35322e302f32342d3234203d3e20323633373739.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.231.52.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:41:21:73:21:5b:44:e0:af:dd:3c:e5:87:e6:4a:f3:43:fd:
6b:62:81:e7:67:98:f9:fd:b1:4a:e5:5f:00:6b:9c:37:d7:86:
73:cc:0c:4e:ce:b9:db:d0:4d:82:dc:54:db:c0:26:fa:0b:68:
66:05:3c:ba:0f:dd:07:47:c7:a2:66:04:4b:21:14:4c:47:2e:
ae:91:86:b0:ce:30:ae:3e:0a:3a:a7:22:fb:64:9b:7a:44:02:
b2:e6:47:c0:6e:5c:55:c4:ed:e7:62:de:39:c2:b4:1a:c3:9e:
5c:12:f3:5b:dc:2b:bb:a8:5e:53:60:d1:00:ce:54:17:7a:46:
31:9e:2d:3d:9d:f3:33:93:bb:af:b9:be:9d:f6:36:ed:7b:94:
51:24:fc:a3:f0:3b:8d:6f:b7:c6:5a:6f:3f:35:58:1e:34:0e:
9f:97:a4:f5:de:10:e1:e5:2a:08:85:65:b8:25:7a:b8:5d:a2:
6a:c3:66:ca:2d:de:af:fe:a6:dd:8b:42:14:d6:68:60:5f:05:
42:33:2e:c7:f8:e0:a2:4a:58:3e:24:98:2f:19:b9:94:1a:d2:
a5:8a:df:44:a5:19:c1:d0:f3:89:c8:57:a7:64:16:62:83:fc:
26:17:a5:56:9a:b6:a7:af:66:ec:10:aa:2b:48:62:99:95:6a:
4e:2b:ca:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 13:54:56 2025 by rpki-client