Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CBAE3F2653825EA4CDE6B907DA95DCF926094AC068604C13D1B43A08748CD455/0/3136382e3139362e3138372e302f32342d3234203d3e203130373738.roa
File: 3136382e3139362e3138372e302f32342d3234203d3e203130373738.roa (raw, json)
Hash identifier: aufexPn1AuQ/OcEvU7KpSj0+VcKU1TUigpHJqvyFoLo=
Subject key identifier: 19:3D:7B:03:75:6D:59:16:8B:67:55:33:AF:99:F5:D9:64:DB:D8:01
Certificate issuer: /CN=E1FE19D68FCD8E2F46D7632D42E6373C148B46E4
Certificate serial: 6D95EB2F8E48F6A02C3E5872789CF80CB0EDDC74
Authority key identifier: E1:FE:19:D6:8F:CD:8E:2F:46:D7:63:2D:42:E6:37:3C:14:8B:46:E4
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E1FE19D68FCD8E2F46D7632D42E6373C148B46E4.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/CBAE3F2653825EA4CDE6B907DA95DCF926094AC068604C13D1B43A08748CD455/0/3136382e3139362e3138372e302f32342d3234203d3e203130373738.roa
Signing time: Tue 04 Feb 2025 18:52:04 +0000
ROA not before: Tue 04 Feb 2025 18:47:04 +0000
ROA not after: Tue 03 Feb 2026 18:52:04 +0000
asID: 10778
IP address blocks: 168.196.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/CBAE3F2653825EA4CDE6B907DA95DCF926094AC068604C13D1B43A08748CD455/0/E1FE19D68FCD8E2F46D7632D42E6373C148B46E4.crl
rsync://repository.lacnic.net/rpki/lacnic/CBAE3F2653825EA4CDE6B907DA95DCF926094AC068604C13D1B43A08748CD455/0/E1FE19D68FCD8E2F46D7632D42E6373C148B46E4.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E1FE19D68FCD8E2F46D7632D42E6373C148B46E4.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 18 Apr 2025 14:04:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:95:eb:2f:8e:48:f6:a0:2c:3e:58:72:78:9c:f8:0c:b0:ed:dc:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E1FE19D68FCD8E2F46D7632D42E6373C148B46E4
Validity
Not Before: Feb 4 18:47:04 2025 GMT
Not After : Feb 3 18:52:04 2026 GMT
Subject: CN=193D7B03756D59168B675533AF99F5D964DBD801
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:08:ce:ab:3b:63:cc:3a:85:11:b9:f2:b6:f8:
0b:84:50:b3:0a:0c:6d:0a:72:f3:30:5a:25:2b:21:
cf:e5:00:20:8d:2c:0f:9b:ff:26:cd:e4:05:7d:75:
98:f8:bf:76:f7:b3:36:e0:ef:ee:66:96:75:fa:01:
39:8c:bc:cb:af:7a:c2:2d:fd:9b:37:ed:67:8d:79:
35:c1:be:f7:05:11:cb:46:d5:28:f3:3f:a0:cf:9e:
31:14:75:05:28:3b:ba:43:0e:68:2a:68:a4:a2:47:
35:f8:c2:db:62:05:18:66:9f:34:f7:0b:9e:b8:62:
2a:96:39:20:b4:cf:2a:98:22:cc:4b:71:11:67:09:
56:b4:f0:52:6b:f3:bf:d2:b3:ed:bc:d5:04:a0:84:
f7:fe:e3:48:a9:07:17:bd:ac:10:a0:33:6b:50:01:
ad:96:e7:ef:dd:80:2e:fb:9b:e1:73:3b:77:a8:93:
12:3e:46:59:bd:4b:5d:82:46:93:bd:77:78:01:cf:
7a:e2:7a:b6:02:1f:35:ed:c4:08:fe:d2:24:ed:4a:
94:5b:3b:6c:63:a4:8d:a4:0d:11:00:e3:67:3c:a2:
72:14:9a:1e:15:64:fa:3a:b5:46:4b:3f:a3:ea:2c:
9f:c2:b4:87:98:80:a1:7c:47:53:97:ef:62:54:33:
9d:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:3D:7B:03:75:6D:59:16:8B:67:55:33:AF:99:F5:D9:64:DB:D8:01
X509v3 Authority Key Identifier:
keyid:E1:FE:19:D6:8F:CD:8E:2F:46:D7:63:2D:42:E6:37:3C:14:8B:46:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/CBAE3F2653825EA4CDE6B907DA95DCF926094AC068604C13D1B43A08748CD455/0/E1FE19D68FCD8E2F46D7632D42E6373C148B46E4.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E1FE19D68FCD8E2F46D7632D42E6373C148B46E4.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CBAE3F2653825EA4CDE6B907DA95DCF926094AC068604C13D1B43A08748CD455/0/3136382e3139362e3138372e302f32342d3234203d3e203130373738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.196.187.0/24
Signature Algorithm: sha256WithRSAEncryption
07:4c:ed:e6:bb:ec:fb:4f:ec:87:9d:6a:76:30:d4:67:56:b8:
bc:39:e4:6a:91:2d:c2:b9:95:f3:e2:40:fa:40:d8:87:da:d2:
fd:1f:7a:d1:d2:82:1e:cb:fb:b6:53:bc:1f:62:f6:f6:ed:31:
dc:f5:ac:99:f6:81:5e:37:48:b9:f4:c3:83:fc:23:83:73:35:
bc:21:1c:31:55:0d:ba:17:ba:e4:10:b0:55:49:1c:e6:51:eb:
81:9a:d8:b0:5d:72:dc:66:bd:33:ae:f9:e5:eb:90:2a:07:0d:
3b:5a:fe:35:07:8d:8b:ea:bd:44:37:fc:91:70:2a:c5:63:14:
73:8d:5e:0e:4d:93:7b:aa:17:91:52:23:93:f9:a2:7b:d2:f1:
2f:87:75:2d:ac:83:04:04:57:41:8a:db:39:23:e1:ed:a1:3d:
37:3e:8e:0e:83:32:89:d7:8f:9d:03:42:9e:f6:a5:e6:7e:50:
23:d5:bd:eb:cd:5f:e6:ab:1e:25:80:bc:e0:bd:20:ea:c4:67:
eb:95:20:3a:0a:5d:b6:af:2c:e5:52:94:f0:84:1b:8c:ba:ec:
ff:0c:58:28:27:d3:ca:07:4e:26:11:10:1b:25:8a:98:ef:9a:
aa:c8:ae:cc:3a:c7:bb:c7:f3:46:ef:0b:36:41:ed:dd:e7:95:
8b:2e:fc:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 03:09:54 2025 by rpki-client