Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9D7DD4937B63A683B9BF81631E20DBA403FFE434FD4861D98DE839478345B033/0/3138312e3137362e35322e302f32322d3234203d3e20323632323130.roa
File: 3138312e3137362e35322e302f32322d3234203d3e20323632323130.roa (raw, json)
Hash identifier: 4JBa+7IgZm7YWNU7LuMqsm2fd/irssfNrup0VpA5VSE=
Subject key identifier: 88:98:C0:31:F2:9B:F6:FD:16:B8:5C:34:A5:36:8B:15:46:8C:B9:3C
Certificate issuer: /CN=2AB6FC0008E3CB5A059B1D935090BD3A42310F93
Certificate serial: 5D742401BE3571DE8E73121E0AFE183BC53BE97F
Authority key identifier: 2A:B6:FC:00:08:E3:CB:5A:05:9B:1D:93:50:90:BD:3A:42:31:0F:93
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2AB6FC0008E3CB5A059B1D935090BD3A42310F93.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9D7DD4937B63A683B9BF81631E20DBA403FFE434FD4861D98DE839478345B033/0/3138312e3137362e35322e302f32322d3234203d3e20323632323130.roa
Signing time: Mon 27 Jan 2025 11:05:00 +0000
ROA not before: Mon 27 Jan 2025 11:00:00 +0000
ROA not after: Mon 26 Jan 2026 11:05:00 +0000
asID: 262210
IP address blocks: 181.176.52.0/22 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/9D7DD4937B63A683B9BF81631E20DBA403FFE434FD4861D98DE839478345B033/0/2AB6FC0008E3CB5A059B1D935090BD3A42310F93.crl
rsync://repository.lacnic.net/rpki/lacnic/9D7DD4937B63A683B9BF81631E20DBA403FFE434FD4861D98DE839478345B033/0/2AB6FC0008E3CB5A059B1D935090BD3A42310F93.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2AB6FC0008E3CB5A059B1D935090BD3A42310F93.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 17 Apr 2025 19:22:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:74:24:01:be:35:71:de:8e:73:12:1e:0a:fe:18:3b:c5:3b:e9:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2AB6FC0008E3CB5A059B1D935090BD3A42310F93
Validity
Not Before: Jan 27 11:00:00 2025 GMT
Not After : Jan 26 11:05:00 2026 GMT
Subject: CN=8898C031F29BF6FD16B85C34A5368B15468CB93C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:27:4d:2e:13:b6:2d:97:d1:46:72:4e:63:8f:
0a:5d:84:5d:44:95:e3:39:56:ab:37:e6:ac:cd:e3:
55:fc:99:d9:eb:77:d8:52:81:c6:9b:41:34:68:57:
19:ad:15:6f:11:ed:02:8c:d6:94:a7:98:ff:c2:a3:
9e:8f:4a:ba:00:c0:65:b2:39:de:ef:84:0f:03:8c:
10:46:34:04:04:91:00:4e:47:94:0b:3c:76:04:f0:
bb:c4:a1:23:03:2b:f0:7b:ca:a6:4a:a6:36:88:f9:
37:ae:f1:5f:a4:51:61:c3:44:68:14:ae:52:53:a9:
50:29:6e:c5:bc:a5:87:8f:5f:c0:ad:ad:6c:ad:4c:
b4:4e:81:c1:a4:d2:59:da:16:67:6d:8c:73:d5:6b:
07:fe:4c:f7:bb:e2:3e:3a:8c:75:58:cf:68:4f:97:
a0:79:12:e8:8c:a1:df:64:06:7c:db:57:5b:3d:bc:
e3:55:66:a5:44:ac:df:cd:b7:70:4c:b5:16:20:87:
5f:2a:b3:74:42:a4:88:09:44:81:f1:b1:df:0a:bc:
8e:62:5e:3d:41:a3:e2:66:7f:78:5d:c7:7d:33:ae:
7d:80:c8:aa:30:e9:59:cd:29:2f:7c:eb:89:9d:4f:
5d:95:97:eb:5f:d5:ae:be:22:a8:c9:f3:0e:7f:6f:
89:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:98:C0:31:F2:9B:F6:FD:16:B8:5C:34:A5:36:8B:15:46:8C:B9:3C
X509v3 Authority Key Identifier:
keyid:2A:B6:FC:00:08:E3:CB:5A:05:9B:1D:93:50:90:BD:3A:42:31:0F:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9D7DD4937B63A683B9BF81631E20DBA403FFE434FD4861D98DE839478345B033/0/2AB6FC0008E3CB5A059B1D935090BD3A42310F93.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2AB6FC0008E3CB5A059B1D935090BD3A42310F93.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9D7DD4937B63A683B9BF81631E20DBA403FFE434FD4861D98DE839478345B033/0/3138312e3137362e35322e302f32322d3234203d3e20323632323130.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.176.52.0/22
Signature Algorithm: sha256WithRSAEncryption
7d:2f:ec:c1:3d:fb:89:3e:76:bb:d4:6a:aa:74:1b:ec:ed:63:
af:1f:f9:66:90:b0:e6:e4:6a:e5:d3:56:ba:eb:4b:e4:79:de:
19:90:7e:b5:cb:6d:8f:81:08:4c:d7:67:df:72:d7:c6:a4:a9:
db:13:ce:03:0d:48:e7:3f:55:64:bb:4f:9e:2c:ee:40:ff:3c:
7b:e0:22:36:18:97:bf:d8:73:93:f9:1a:67:fc:a6:a2:3d:84:
04:38:49:72:7e:24:54:13:15:74:b4:c8:d1:19:12:d1:c0:2a:
e5:30:f8:11:a6:48:b0:d9:11:8f:4d:1e:bc:66:d6:96:a8:89:
7c:e4:9e:4a:fa:47:dd:93:d4:a0:ea:32:b6:bf:0f:c0:6e:28:
e5:e6:7d:e4:8c:22:3e:c5:56:de:25:67:22:70:3c:c5:44:64:
29:a7:90:14:03:24:57:cf:f0:12:ef:9f:f7:8f:4a:6f:17:8d:
a1:98:9e:35:23:6d:9b:8f:3a:2a:a4:04:4f:c8:0f:c5:20:d3:
6d:83:74:0a:73:f6:19:2c:f5:a5:a6:e5:db:e8:eb:68:27:e2:
d5:8c:b5:ef:f7:96:34:d8:e1:45:fa:94:b5:c9:f4:1c:b6:e4:
6a:4a:98:87:ff:1c:b0:49:0b:0b:f5:93:f6:ae:4e:33:21:1f:
9a:03:0a:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 17:35:58 2025 by rpki-client