Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/3134382e3130322e3130302e302f32342d3234203d3e203231353735.roa
File: 3134382e3130322e3130302e302f32342d3234203d3e203231353735.roa (raw, json)
Hash identifier: ZgXg9EDbgtkY0lizzLMuGqCK16N+ktdMyCp9E4esSOs=
Subject key identifier: C8:F6:FA:7E:8D:4F:B1:F3:E9:39:B3:01:DF:01:95:06:D4:68:81:9E
Certificate issuer: /CN=2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5
Certificate serial: 32C889C660B6FAB23353F2CC4CC8C1B24F1582B6
Authority key identifier: 2B:1C:1B:7B:81:83:60:05:B4:55:C4:FF:26:DD:AA:1F:B3:A6:78:E5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/3134382e3130322e3130302e302f32342d3234203d3e203231353735.roa
Signing time: Tue 04 Feb 2025 18:42:29 +0000
ROA not before: Tue 04 Feb 2025 18:37:29 +0000
ROA not after: Tue 03 Feb 2026 18:42:29 +0000
asID: 21575
IP address blocks: 148.102.100.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.crl
rsync://repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 18 Apr 2025 11:50:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:c8:89:c6:60:b6:fa:b2:33:53:f2:cc:4c:c8:c1:b2:4f:15:82:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5
Validity
Not Before: Feb 4 18:37:29 2025 GMT
Not After : Feb 3 18:42:29 2026 GMT
Subject: CN=C8F6FA7E8D4FB1F3E939B301DF019506D468819E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:7d:8a:3b:ce:f5:47:12:a4:b2:6c:52:00:d4:
4c:c8:c4:bf:01:ee:06:24:a3:3a:87:d7:36:57:3e:
91:1d:2e:65:f4:2c:6d:d1:2b:fa:51:4d:b6:3d:bb:
e8:8c:67:8a:3c:f6:47:21:51:8e:f0:86:26:11:d9:
31:c6:2f:37:4a:1a:e8:e6:21:14:0b:22:ad:8d:a8:
1a:30:29:6f:63:e7:16:e4:70:3f:06:aa:a1:d2:57:
78:dd:af:77:f6:2f:ea:fc:af:2c:87:b5:19:2f:26:
d7:d4:8a:26:74:5e:50:e7:5a:1e:97:b3:40:ce:cb:
ab:58:c6:27:76:1a:92:9c:74:28:ab:dc:07:8f:93:
47:cd:85:6b:01:79:3f:d1:c8:5b:7f:7c:72:fb:fb:
ea:09:15:35:18:9e:7f:ae:c2:2f:eb:5a:b8:0f:80:
ce:f9:4f:15:f2:d6:d7:b2:10:c9:98:aa:81:a8:8f:
94:45:b9:71:31:da:22:db:81:b0:d8:7a:f2:be:fd:
ac:f0:a9:c2:ea:b2:a7:69:6c:70:8f:b8:2e:6e:53:
fc:b2:68:97:bf:a0:b3:26:2e:bb:d7:e5:1d:2e:61:
3f:30:58:11:25:98:71:39:b5:39:f1:31:cd:fd:bd:
cd:8f:1f:a6:c1:e9:f7:87:db:f4:0f:d1:e0:bf:d8:
51:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:F6:FA:7E:8D:4F:B1:F3:E9:39:B3:01:DF:01:95:06:D4:68:81:9E
X509v3 Authority Key Identifier:
keyid:2B:1C:1B:7B:81:83:60:05:B4:55:C4:FF:26:DD:AA:1F:B3:A6:78:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/3134382e3130322e3130302e302f32342d3234203d3e203231353735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
148.102.100.0/24
Signature Algorithm: sha256WithRSAEncryption
16:bb:33:51:39:86:c6:b7:3b:18:93:c4:01:2b:78:f6:9e:f5:
dc:c6:f2:15:fd:02:ce:9d:f8:ae:13:b9:78:82:dd:49:12:96:
fc:72:36:20:3d:67:24:97:65:1a:0d:41:19:e1:fb:76:47:98:
61:ff:43:91:8c:63:12:3c:60:e1:45:d2:19:34:80:09:af:12:
19:5d:2b:05:21:26:3a:3e:38:4a:ac:9e:0b:82:35:1f:3e:85:
24:fe:97:ac:96:64:f8:6a:96:e7:8c:88:4a:49:c0:c9:f5:b2:
79:92:36:23:27:9f:16:73:14:5c:40:fe:d1:d6:d4:99:79:6f:
70:09:04:c4:0c:15:21:6b:25:88:9e:f9:f0:19:7b:df:05:2f:
b7:e5:07:5c:cb:7f:39:44:b1:10:28:45:72:4e:fd:bd:37:06:
26:d9:34:ad:e1:08:4c:87:10:30:82:e0:ef:b9:6f:79:46:6a:
7a:e3:da:44:aa:9e:09:9f:2c:38:4c:30:cc:46:dc:2f:bb:52:
b6:40:42:45:a7:36:35:49:17:30:7f:61:ab:b5:03:a2:d8:08:
10:34:35:ab:de:da:39:32:47:49:69:a3:0a:e8:e5:2b:92:35:
87:8c:a7:f0:37:a9:e5:95:a2:a7:5b:86:4b:b1:19:e7:5c:b0:
4d:6c:a7:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 03:53:30 2025 by rpki-client