Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/3138362e3136302e35392e302f32342d3234203d3e20323632313832.roa
File: 3138362e3136302e35392e302f32342d3234203d3e20323632313832.roa (raw, json)
Hash identifier: LPXWGm1X1zH4TS1ziyI61aU5gxqs+2oC+i9Nil4KbF8=
Subject key identifier: CB:1F:9C:E5:BF:CE:F9:4C:6B:C0:3C:24:D9:58:A4:0F:B1:57:F3:2C
Certificate issuer: /CN=24D42265AC44C52C720364B7A5C0074DD2179046
Certificate serial: 120FAB9796E1184F3326BB76282E4553913A7D82
Authority key identifier: 24:D4:22:65:AC:44:C5:2C:72:03:64:B7:A5:C0:07:4D:D2:17:90:46
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24D42265AC44C52C720364B7A5C0074DD2179046.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/3138362e3136302e35392e302f32342d3234203d3e20323632313832.roa
Signing time: Tue 04 Feb 2025 18:18:07 +0000
ROA not before: Tue 04 Feb 2025 18:13:07 +0000
ROA not after: Tue 03 Feb 2026 18:18:07 +0000
asID: 262182
IP address blocks: 186.160.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/24D42265AC44C52C720364B7A5C0074DD2179046.crl
rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/24D42265AC44C52C720364B7A5C0074DD2179046.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24D42265AC44C52C720364B7A5C0074DD2179046.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 18 Apr 2025 17:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:0f:ab:97:96:e1:18:4f:33:26:bb:76:28:2e:45:53:91:3a:7d:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24D42265AC44C52C720364B7A5C0074DD2179046
Validity
Not Before: Feb 4 18:13:07 2025 GMT
Not After : Feb 3 18:18:07 2026 GMT
Subject: CN=CB1F9CE5BFCEF94C6BC03C24D958A40FB157F32C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:a1:9f:69:a5:65:29:d3:bd:38:4b:8b:1b:ce:
49:15:a0:08:5b:cf:1b:69:b8:9b:20:8b:cf:fa:b0:
ba:d0:18:f9:d8:7f:39:e8:a3:77:0e:f9:60:95:9a:
a7:3a:2e:a6:08:0e:51:75:f8:4a:de:68:38:4d:31:
34:4f:b4:80:db:2a:71:28:58:1f:b9:3e:14:0d:a9:
e5:fd:bd:a3:52:a5:08:92:ee:aa:f1:78:1a:c1:63:
eb:79:24:12:c4:68:be:cb:b7:c3:1d:7e:3e:52:56:
ae:f4:c1:92:ca:cc:6e:7e:1d:c3:5e:b0:f4:47:75:
73:67:e8:59:9d:ed:f0:7f:b3:e0:84:b8:1d:fc:a1:
f3:44:0c:53:b4:5d:bd:5e:56:d8:76:9c:2f:14:7f:
99:b6:b0:8e:f5:5b:68:63:81:07:fa:9b:43:74:cc:
2c:f1:e5:d0:b4:6b:d6:92:a0:a7:8f:53:e3:e4:8c:
61:64:e1:c8:c4:8a:e4:a3:d0:09:01:1f:e2:0d:f7:
52:2c:6e:df:dd:18:0c:c6:f9:22:57:48:af:ad:ba:
6f:b2:40:01:ad:eb:18:29:06:13:c6:8b:9a:35:db:
9a:2b:d4:1f:f6:1a:48:1f:a9:a2:fb:c2:74:fa:99:
c6:a6:c1:b1:ae:62:59:fa:68:97:34:e8:8e:ee:1c:
af:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:1F:9C:E5:BF:CE:F9:4C:6B:C0:3C:24:D9:58:A4:0F:B1:57:F3:2C
X509v3 Authority Key Identifier:
keyid:24:D4:22:65:AC:44:C5:2C:72:03:64:B7:A5:C0:07:4D:D2:17:90:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/24D42265AC44C52C720364B7A5C0074DD2179046.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24D42265AC44C52C720364B7A5C0074DD2179046.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/3138362e3136302e35392e302f32342d3234203d3e20323632313832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.160.59.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:c4:bd:1d:92:21:50:69:f7:c0:2c:68:d1:89:96:73:70:00:
23:50:cb:09:83:c9:26:75:53:bf:c5:88:8a:bf:e5:87:62:7e:
4b:1f:81:b1:0d:37:ba:1d:f9:f8:a1:fc:e9:2a:6b:ed:0b:be:
ad:67:14:59:84:f6:81:11:20:ff:0c:1d:a7:6c:5f:97:f0:8c:
3e:3b:3e:5b:8e:92:b9:75:98:79:9f:4b:0c:e1:19:1f:e9:c2:
ef:ea:11:bd:72:83:7d:2c:27:76:09:7f:79:af:97:da:0b:36:
b8:7f:4c:1f:82:c9:d8:b5:67:50:ac:0f:d6:dd:ce:5b:fd:c3:
c5:d2:9a:22:89:74:9b:53:9e:7f:2f:31:a3:f1:77:d1:fe:bc:
8f:dc:ad:03:96:8e:04:d0:00:f6:cd:11:1a:ab:3c:94:f0:cb:
76:84:49:6c:22:09:0b:9a:b3:ac:0c:eb:d5:69:ef:31:b7:91:
08:e8:dc:4e:17:fd:29:9d:b7:c7:29:05:33:d2:a3:01:e4:8b:
c2:3c:2d:30:49:56:d2:62:4a:db:33:00:a3:10:03:52:30:43:
6b:dd:a1:4d:ec:7c:9b:b9:68:a9:54:bf:bf:87:0f:a5:1c:4d:
19:80:fc:41:8f:32:b6:a6:45:9b:a7:ab:1e:59:99:1c:d2:6c:
3f:83:c1:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 21:55:45 2025 by rpki-client