Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C10F84743706253A9E919BFC714C4D6DDC4E73D5DD27CD55DA27ADCDB862A15C/0/3133382e3131372e38352e302f32342d3234203d3e20323635363838.roa
File: 3133382e3131372e38352e302f32342d3234203d3e20323635363838.roa (raw, json)
Hash identifier: WinjQyXUWPjEV6qS1aOD5Kb+dbL/DwkHHdU204QdtDE=
Subject key identifier: 7C:56:9E:C8:B6:AC:29:3F:A7:53:BC:BF:AC:08:3A:DB:44:92:FE:37
Certificate issuer: /CN=EBDDE091CD51F6714942A5267FBC4B80AFB4E022
Certificate serial: 0624CAAF5228BFE187BC6B5C9C61BD122148E5BC
Authority key identifier: EB:DD:E0:91:CD:51:F6:71:49:42:A5:26:7F:BC:4B:80:AF:B4:E0:22
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EBDDE091CD51F6714942A5267FBC4B80AFB4E022.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/C10F84743706253A9E919BFC714C4D6DDC4E73D5DD27CD55DA27ADCDB862A15C/0/3133382e3131372e38352e302f32342d3234203d3e20323635363838.roa
Signing time: Fri 07 Mar 2025 16:11:25 +0000
ROA not before: Fri 07 Mar 2025 16:06:25 +0000
ROA not after: Fri 06 Mar 2026 16:11:25 +0000
asID: 265688
IP address blocks: 138.117.85.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/C10F84743706253A9E919BFC714C4D6DDC4E73D5DD27CD55DA27ADCDB862A15C/0/EBDDE091CD51F6714942A5267FBC4B80AFB4E022.crl
rsync://repository.lacnic.net/rpki/lacnic/C10F84743706253A9E919BFC714C4D6DDC4E73D5DD27CD55DA27ADCDB862A15C/0/EBDDE091CD51F6714942A5267FBC4B80AFB4E022.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EBDDE091CD51F6714942A5267FBC4B80AFB4E022.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 17 Apr 2025 06:12:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:24:ca:af:52:28:bf:e1:87:bc:6b:5c:9c:61:bd:12:21:48:e5:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EBDDE091CD51F6714942A5267FBC4B80AFB4E022
Validity
Not Before: Mar 7 16:06:25 2025 GMT
Not After : Mar 6 16:11:25 2026 GMT
Subject: CN=7C569EC8B6AC293FA753BCBFAC083ADB4492FE37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:6b:d5:89:1d:43:76:31:0d:37:e1:39:af:9c:
65:56:42:aa:b0:86:05:00:b5:67:ca:d8:c7:43:49:
2c:67:41:ed:4c:0a:06:c3:b4:51:61:6f:93:1d:f0:
d7:cd:77:5d:54:22:3e:48:ac:58:7b:71:97:fd:ea:
08:40:15:d5:c7:66:76:74:da:b0:ca:90:1e:01:37:
44:6b:22:00:32:b2:83:12:ed:4e:43:03:6d:16:a0:
66:af:4d:cf:64:65:70:2c:f1:c1:f8:15:a7:2a:c7:
ca:92:57:4e:71:67:ae:81:3d:ae:b5:b0:f7:1e:48:
15:83:44:36:53:ae:53:3a:7d:f5:1d:8f:78:d0:e8:
a7:81:89:c3:bc:0a:80:96:93:49:1c:ee:2b:fa:82:
db:cb:32:82:7f:46:bd:c6:49:c7:14:72:58:81:46:
90:9c:58:72:00:d8:25:09:59:cf:3c:db:13:b7:31:
df:3f:80:0f:b7:74:b6:dc:f2:e3:fc:0d:ca:32:dd:
58:6c:53:27:6d:cf:c4:21:19:62:6f:ea:57:60:e7:
6c:c6:48:79:d3:9f:a1:bd:1e:c8:aa:c8:28:3f:96:
88:8b:99:19:02:47:01:43:07:a2:bc:44:ab:e6:4b:
c3:57:2e:e8:5a:8a:2c:b9:1b:18:46:44:aa:8f:ae:
77:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:56:9E:C8:B6:AC:29:3F:A7:53:BC:BF:AC:08:3A:DB:44:92:FE:37
X509v3 Authority Key Identifier:
keyid:EB:DD:E0:91:CD:51:F6:71:49:42:A5:26:7F:BC:4B:80:AF:B4:E0:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/C10F84743706253A9E919BFC714C4D6DDC4E73D5DD27CD55DA27ADCDB862A15C/0/EBDDE091CD51F6714942A5267FBC4B80AFB4E022.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EBDDE091CD51F6714942A5267FBC4B80AFB4E022.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C10F84743706253A9E919BFC714C4D6DDC4E73D5DD27CD55DA27ADCDB862A15C/0/3133382e3131372e38352e302f32342d3234203d3e20323635363838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.117.85.0/24
Signature Algorithm: sha256WithRSAEncryption
60:82:10:84:8c:b1:ea:96:8d:cb:b2:48:e1:f9:e5:88:2b:f5:
6d:e3:d6:59:cb:13:cd:19:2a:9e:0d:83:69:64:e7:38:d0:0c:
7c:a8:8d:95:13:28:62:0c:45:da:3a:ea:55:a2:ef:09:d6:57:
a1:a3:31:de:7a:23:61:4d:f3:d1:1f:70:21:3f:c2:d6:f7:3d:
e7:37:16:7a:d2:11:c6:e5:86:f7:9e:50:05:fa:aa:59:4a:af:
15:f7:30:8b:54:3b:79:72:05:8e:5c:4f:4a:a6:a1:15:69:a5:
49:75:ef:72:2e:3c:3d:19:04:54:8a:28:20:cd:5d:51:9c:ef:
9e:c3:34:45:83:26:de:31:47:8b:9a:28:cc:3d:f3:55:15:01:
f5:35:d2:47:01:a5:d3:10:92:c6:38:76:0a:58:a6:54:0b:35:
51:fc:c7:9b:8f:50:87:90:16:7f:ad:a1:65:1b:ce:4e:8c:fb:
5d:1c:04:a4:6e:99:08:02:6d:c1:f9:5c:c6:d8:24:c9:b1:14:
0c:93:91:83:a5:bf:42:95:62:b2:35:a5:89:e6:b0:09:22:13:
b8:06:c0:fe:7e:26:e0:3c:14:37:c2:23:56:18:34:ab:b0:2a:
4b:85:5f:92:21:ad:4d:ef:54:c7:6a:1c:67:a0:9f:3c:46:61:
a2:5d:c6:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 04:26:52 2025 by rpki-client