Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D3D500DFD7BB1A6A132644D93CFDF53174B8435A640F8BA7402E6E6E13FB0536/0/3230312e3231372e3232342e302f32302d3234203d3e203238303135.roa
File: 3230312e3231372e3232342e302f32302d3234203d3e203238303135.roa (raw, json)
Hash identifier: VPx/xY3cik6DoxbpU7Tss9gCYhlHDmL0lLr3uRWgMPs=
Subject key identifier: 78:BA:C3:B8:6F:59:08:85:BF:2D:C6:78:0F:CC:17:8D:34:72:9A:E3
Certificate issuer: /CN=B6C16AD4F82E72D9287A5D4EB99768B0C41C8061
Certificate serial: 7D4E5AA3AEF884144114933F376706FBECDAE6D5
Authority key identifier: B6:C1:6A:D4:F8:2E:72:D9:28:7A:5D:4E:B9:97:68:B0:C4:1C:80:61
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B6C16AD4F82E72D9287A5D4EB99768B0C41C8061.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D3D500DFD7BB1A6A132644D93CFDF53174B8435A640F8BA7402E6E6E13FB0536/0/3230312e3231372e3232342e302f32302d3234203d3e203238303135.roa
Signing time: Tue 04 Feb 2025 20:06:05 +0000
ROA not before: Tue 04 Feb 2025 20:01:05 +0000
ROA not after: Tue 03 Feb 2026 20:06:05 +0000
asID: 28015
IP address blocks: 201.217.224.0/20 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/D3D500DFD7BB1A6A132644D93CFDF53174B8435A640F8BA7402E6E6E13FB0536/0/B6C16AD4F82E72D9287A5D4EB99768B0C41C8061.crl
rsync://repository.lacnic.net/rpki/lacnic/D3D500DFD7BB1A6A132644D93CFDF53174B8435A640F8BA7402E6E6E13FB0536/0/B6C16AD4F82E72D9287A5D4EB99768B0C41C8061.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B6C16AD4F82E72D9287A5D4EB99768B0C41C8061.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 18 Apr 2025 17:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:4e:5a:a3:ae:f8:84:14:41:14:93:3f:37:67:06:fb:ec:da:e6:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B6C16AD4F82E72D9287A5D4EB99768B0C41C8061
Validity
Not Before: Feb 4 20:01:05 2025 GMT
Not After : Feb 3 20:06:05 2026 GMT
Subject: CN=78BAC3B86F590885BF2DC6780FCC178D34729AE3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:aa:cb:06:79:9d:33:5f:7a:17:cb:2a:2d:18:
07:07:89:46:f6:63:1a:6c:2e:89:55:98:05:19:b3:
4d:a8:40:c4:02:77:f6:73:99:9a:3c:b5:12:7c:6e:
05:37:9f:dc:0b:fa:1b:89:ee:de:7c:1e:97:28:c8:
b4:83:e8:65:05:26:9d:db:9a:a4:f1:a0:ce:9d:d0:
1a:b9:45:32:d0:e5:d7:bd:9b:43:81:a5:d7:72:31:
84:ba:52:9b:20:f0:6b:2b:ac:9b:fc:4d:02:ad:e4:
5c:da:04:d2:33:3b:da:cc:d6:88:2d:b5:98:fa:0c:
15:64:1d:dd:a6:87:e1:b8:b2:71:d2:61:50:57:e2:
18:4c:8d:0a:bc:59:d6:62:a1:26:e6:25:91:e8:71:
55:58:f2:17:dc:2b:b2:ab:f3:2a:58:3c:7e:8f:4f:
09:05:ee:72:02:ae:4a:be:82:16:f2:03:47:c0:21:
59:7b:b8:f6:4a:b3:5c:97:a6:f1:0a:78:dc:22:43:
0b:89:0f:03:c7:fa:e5:31:d9:ea:0f:3c:d9:1f:cc:
ad:1c:98:ab:af:31:45:92:b3:98:19:5b:51:d0:ed:
f5:a2:cb:0a:10:ba:dc:13:97:0a:00:72:5f:1c:61:
6a:49:dd:fb:6f:8f:51:fb:a6:75:16:e9:bd:86:5c:
13:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:BA:C3:B8:6F:59:08:85:BF:2D:C6:78:0F:CC:17:8D:34:72:9A:E3
X509v3 Authority Key Identifier:
keyid:B6:C1:6A:D4:F8:2E:72:D9:28:7A:5D:4E:B9:97:68:B0:C4:1C:80:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/D3D500DFD7BB1A6A132644D93CFDF53174B8435A640F8BA7402E6E6E13FB0536/0/B6C16AD4F82E72D9287A5D4EB99768B0C41C8061.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B6C16AD4F82E72D9287A5D4EB99768B0C41C8061.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D3D500DFD7BB1A6A132644D93CFDF53174B8435A640F8BA7402E6E6E13FB0536/0/3230312e3231372e3232342e302f32302d3234203d3e203238303135.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.217.224.0/20
Signature Algorithm: sha256WithRSAEncryption
23:58:8a:43:af:2c:47:dd:71:ab:c5:ae:21:05:1c:de:33:fe:
bd:38:e6:88:07:89:7b:22:a2:18:0a:c8:f6:6d:93:58:20:9a:
d0:bd:97:35:21:af:7c:41:6d:05:e2:42:f7:ec:e9:a7:12:46:
f3:fb:db:b9:aa:04:1b:11:9a:3c:8a:da:b5:8a:c9:c8:61:39:
72:4e:fd:b5:4d:89:6a:47:23:ff:51:e1:d8:f5:04:cb:d6:e0:
bc:f1:54:07:fc:9d:22:e1:25:b9:5a:d8:3b:93:fb:89:b1:73:
d6:4e:8f:15:03:35:77:82:d4:b3:21:cf:d8:84:0e:4c:c9:2a:
57:2c:3b:8c:fe:f8:c9:a5:4b:ed:a1:5b:f5:44:7f:04:2f:d1:
10:5d:36:b7:8c:f3:bc:63:ea:92:83:3c:5e:54:de:bb:76:ae:
d4:77:0d:a2:48:62:14:e9:cc:5a:4e:c1:7f:9d:bb:8a:25:81:
39:c1:a9:22:d5:70:b9:be:3c:d4:66:10:f1:25:83:78:fd:37:
6d:a7:97:be:97:70:8b:5c:28:d0:80:7c:1b:ba:27:e8:69:90:
60:ed:71:a9:86:64:40:ad:3b:8e:2f:9f:8d:02:20:26:cb:29:
d5:5c:92:ce:51:f7:21:6e:a9:8c:71:07:01:c8:65:bb:6f:d1:
6e:73:2a:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 15:38:13 2025 by rpki-client