Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D233B807710758B592DE153A98CC3B3CE031BE2875C996CD8F7E46E3526AAF20/0/3230302e31322e3234382e302f32342d3234203d3e20323633323432.roa
File: 3230302e31322e3234382e302f32342d3234203d3e20323633323432.roa (raw, json)
Hash identifier: qqgSh9uiPbe6nw556pdORvwa0MNVBUMjfj5vme7pfdg=
Subject key identifier: 46:72:1C:9C:80:93:2F:56:38:F4:90:29:B4:81:57:AF:E3:7A:5E:56
Certificate issuer: /CN=F84C64765934CC9A2CE97A1150E058489F19D535
Certificate serial: 1715CE94648F19209626DE003A4FCB42ABC66F1A
Authority key identifier: F8:4C:64:76:59:34:CC:9A:2C:E9:7A:11:50:E0:58:48:9F:19:D5:35
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F84C64765934CC9A2CE97A1150E058489F19D535.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D233B807710758B592DE153A98CC3B3CE031BE2875C996CD8F7E46E3526AAF20/0/3230302e31322e3234382e302f32342d3234203d3e20323633323432.roa
Signing time: Tue 04 Feb 2025 18:25:29 +0000
ROA not before: Tue 04 Feb 2025 18:20:29 +0000
ROA not after: Tue 03 Feb 2026 18:25:29 +0000
asID: 263242
IP address blocks: 200.12.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/D233B807710758B592DE153A98CC3B3CE031BE2875C996CD8F7E46E3526AAF20/0/F84C64765934CC9A2CE97A1150E058489F19D535.crl
rsync://repository.lacnic.net/rpki/lacnic/D233B807710758B592DE153A98CC3B3CE031BE2875C996CD8F7E46E3526AAF20/0/F84C64765934CC9A2CE97A1150E058489F19D535.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F84C64765934CC9A2CE97A1150E058489F19D535.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 18 Apr 2025 17:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:15:ce:94:64:8f:19:20:96:26:de:00:3a:4f:cb:42:ab:c6:6f:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F84C64765934CC9A2CE97A1150E058489F19D535
Validity
Not Before: Feb 4 18:20:29 2025 GMT
Not After : Feb 3 18:25:29 2026 GMT
Subject: CN=46721C9C80932F5638F49029B48157AFE37A5E56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:b2:ac:42:44:3a:25:a7:c9:b8:6f:cc:8b:68:
3b:2b:c4:8a:46:ab:52:20:05:97:9f:17:f4:d2:a2:
57:a0:bd:d7:6c:7d:ba:78:05:bc:4a:f8:68:a9:36:
67:d1:26:8d:f3:20:4d:40:b6:f2:f3:93:22:86:ce:
66:0e:72:13:9f:a5:5c:86:3a:85:d2:75:f6:da:2a:
c9:c6:b9:5a:a0:0e:b9:4f:7e:2c:3d:d7:aa:b8:97:
d0:f8:cc:16:b0:aa:5c:13:67:16:29:fd:45:3a:18:
fc:ed:9b:81:b3:14:72:79:10:97:45:fd:af:0a:0a:
17:a7:1a:42:68:81:1d:bb:2d:b1:b2:83:43:62:49:
1b:98:cc:bb:f2:35:ea:48:4e:76:49:18:6d:94:d1:
67:d5:39:8a:8f:2c:7d:cd:fb:4f:bb:c8:d3:4d:c1:
44:0d:26:a1:e7:92:f6:52:63:3b:09:fc:51:2f:b0:
c5:e7:65:1e:47:50:0f:9d:61:64:99:bc:82:93:21:
32:df:84:c7:c4:81:be:28:74:e5:35:f1:cf:20:42:
f6:8c:c1:b6:4b:db:44:fc:be:26:91:bb:60:ec:f0:
56:eb:3a:fd:ae:05:e1:96:0e:a2:0b:fc:9e:be:27:
31:d4:1d:03:43:c8:c7:1c:b4:81:76:2e:1f:4a:db:
c7:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:72:1C:9C:80:93:2F:56:38:F4:90:29:B4:81:57:AF:E3:7A:5E:56
X509v3 Authority Key Identifier:
keyid:F8:4C:64:76:59:34:CC:9A:2C:E9:7A:11:50:E0:58:48:9F:19:D5:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/D233B807710758B592DE153A98CC3B3CE031BE2875C996CD8F7E46E3526AAF20/0/F84C64765934CC9A2CE97A1150E058489F19D535.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F84C64765934CC9A2CE97A1150E058489F19D535.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D233B807710758B592DE153A98CC3B3CE031BE2875C996CD8F7E46E3526AAF20/0/3230302e31322e3234382e302f32342d3234203d3e20323633323432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.12.248.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:ef:6c:3c:f4:6f:b6:13:74:25:55:9e:6d:52:b7:a4:35:97:
b2:aa:46:74:db:09:68:62:cf:ce:32:02:31:ce:8b:31:72:40:
16:0f:6a:a9:00:d3:8a:0c:3a:0d:c4:48:1f:87:54:76:b3:05:
13:50:16:da:a0:1e:66:d8:ad:0c:08:ff:35:4e:46:fd:b8:ea:
69:50:f5:a0:d4:e5:ae:16:3a:5b:67:73:77:02:15:97:21:d5:
3e:25:12:07:c8:d2:34:39:1f:41:81:ad:0a:7b:04:db:37:3f:
ba:dc:64:af:2b:19:16:5b:70:38:ff:e1:7d:e9:d3:cb:41:f0:
60:1b:d4:05:a3:50:68:ee:8c:bf:91:59:8b:ad:50:7d:06:18:
6c:69:a1:ff:c7:04:dd:9f:43:0e:7c:7d:6d:05:cf:64:6d:98:
6f:03:65:40:34:9f:63:0e:9e:c9:16:cd:6c:e6:be:67:99:d4:
51:cc:59:84:c3:b0:55:c8:bd:ce:dd:ac:aa:7d:fd:e0:16:23:
9e:a1:15:b8:05:f6:7b:6c:84:cd:04:5a:58:a1:43:e4:28:1f:
16:63:f7:ed:0d:2c:ff:89:07:9a:cc:9a:39:8f:1b:b2:99:de:
9e:fd:14:d2:7c:84:0f:0d:c1:1a:68:ff:37:55:45:c6:f9:04:
0c:70:71:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 16:49:25 2025 by rpki-client