Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DBC13474CBC610F8F06084D5A0D5953A0326E771918715584C0C90A5686FBB82/0/34352e3232392e3234372e302f32342d3234203d3e20323636373131.roa
File: 34352e3232392e3234372e302f32342d3234203d3e20323636373131.roa (raw, json)
Hash identifier: jemKRG8iZNsVYKaY8qxvKHvAyBw7PsIUmklgmrOVPMo=
Subject key identifier: F7:59:5E:92:F1:E6:68:DE:9A:F2:81:44:78:FD:93:AE:93:88:3F:F5
Certificate issuer: /CN=8EEE8A60C988421683DBC2FDDE169C9AA912EF90
Certificate serial: 759272427174F2394E055FE6F94A6C74EC23D5F4
Authority key identifier: 8E:EE:8A:60:C9:88:42:16:83:DB:C2:FD:DE:16:9C:9A:A9:12:EF:90
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EEE8A60C988421683DBC2FDDE169C9AA912EF90.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/DBC13474CBC610F8F06084D5A0D5953A0326E771918715584C0C90A5686FBB82/0/34352e3232392e3234372e302f32342d3234203d3e20323636373131.roa
Signing time: Tue 04 Feb 2025 18:44:38 +0000
ROA not before: Tue 04 Feb 2025 18:39:38 +0000
ROA not after: Tue 03 Feb 2026 18:44:38 +0000
asID: 266711
IP address blocks: 45.229.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/DBC13474CBC610F8F06084D5A0D5953A0326E771918715584C0C90A5686FBB82/0/8EEE8A60C988421683DBC2FDDE169C9AA912EF90.crl
rsync://repository.lacnic.net/rpki/lacnic/DBC13474CBC610F8F06084D5A0D5953A0326E771918715584C0C90A5686FBB82/0/8EEE8A60C988421683DBC2FDDE169C9AA912EF90.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EEE8A60C988421683DBC2FDDE169C9AA912EF90.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 18 Apr 2025 17:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:92:72:42:71:74:f2:39:4e:05:5f:e6:f9:4a:6c:74:ec:23:d5:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8EEE8A60C988421683DBC2FDDE169C9AA912EF90
Validity
Not Before: Feb 4 18:39:38 2025 GMT
Not After : Feb 3 18:44:38 2026 GMT
Subject: CN=F7595E92F1E668DE9AF2814478FD93AE93883FF5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:3a:6d:5e:39:39:09:87:2a:c4:c5:bd:a4:60:
ca:5a:4f:d2:80:d7:2b:9d:8e:05:50:29:db:64:28:
4a:b9:8d:01:96:77:85:c7:4b:06:cb:a8:e6:d5:8f:
69:c2:5a:58:a2:11:49:d2:65:e4:67:d1:3d:66:22:
de:51:f8:5d:b1:db:ae:6b:31:48:a3:91:6d:d7:ae:
36:24:67:0c:55:e6:6a:7a:99:1c:85:c1:9c:11:3f:
2c:fd:ad:1a:02:e7:15:e8:1a:a9:ef:d5:27:42:89:
cd:5c:bb:58:bb:41:cc:ab:0e:b1:c7:2c:97:ed:91:
a8:eb:7e:5a:43:63:79:ce:29:52:46:81:ee:40:b3:
30:b9:2b:56:05:ba:69:b7:af:cd:5b:d1:7f:e4:e8:
3c:9e:40:af:8b:f5:04:81:8f:5e:3f:54:ef:fe:25:
bb:61:59:09:f2:12:dd:2a:e0:b3:db:5a:29:d3:70:
48:d9:a8:79:64:71:0e:aa:b1:45:df:6c:0d:40:f0:
4c:b0:64:eb:ff:23:ee:c2:09:0b:5f:1a:22:79:8c:
e3:72:ba:9a:2c:8a:36:93:57:4a:53:70:ec:a9:78:
0c:5b:ab:f1:fe:5e:64:e0:63:e1:70:5a:d5:46:6d:
f6:8d:28:c6:59:f5:2c:b1:32:64:20:37:71:9c:cc:
ff:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:59:5E:92:F1:E6:68:DE:9A:F2:81:44:78:FD:93:AE:93:88:3F:F5
X509v3 Authority Key Identifier:
keyid:8E:EE:8A:60:C9:88:42:16:83:DB:C2:FD:DE:16:9C:9A:A9:12:EF:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/DBC13474CBC610F8F06084D5A0D5953A0326E771918715584C0C90A5686FBB82/0/8EEE8A60C988421683DBC2FDDE169C9AA912EF90.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EEE8A60C988421683DBC2FDDE169C9AA912EF90.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DBC13474CBC610F8F06084D5A0D5953A0326E771918715584C0C90A5686FBB82/0/34352e3232392e3234372e302f32342d3234203d3e20323636373131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.229.247.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:1b:1c:a6:40:b5:44:fa:39:5f:6b:b1:80:2c:3a:08:16:69:
45:0c:4e:eb:a5:f9:7b:51:ed:e5:29:ca:d9:55:db:fc:aa:2d:
8b:53:23:79:83:cd:1b:b1:5b:f5:92:24:2a:cc:6c:88:3d:01:
c6:7e:65:ff:91:3b:78:d7:38:c1:a5:b7:ed:c8:d9:5f:54:87:
79:8c:a3:96:45:67:d4:0e:7f:5b:c6:1c:96:99:3a:51:b2:41:
c9:26:2e:8a:34:b6:50:da:49:b3:07:03:f6:ac:e9:1c:1e:5a:
80:ce:da:c9:92:39:b8:55:1d:67:dc:99:7d:09:e1:aa:83:da:
3b:a5:7d:86:c8:78:b4:e6:b5:85:8d:74:0d:62:47:22:91:a0:
97:99:a7:23:6d:b7:80:49:ac:45:47:14:7b:3f:c4:82:3d:c4:
8e:67:2e:e3:d9:0a:5a:c2:5a:ee:fc:d8:ab:4f:86:6b:15:22:
a5:ac:5d:d2:12:16:4d:ce:8d:3a:46:f5:68:b0:f6:46:5e:71:
c8:77:8b:cc:9f:2c:c9:ee:1b:bc:0a:db:09:78:65:04:fa:c7:
34:aa:3b:9e:bf:6e:9d:12:ba:b6:11:d1:3d:2b:8f:ca:e2:9e:
e7:45:d4:2a:b2:f1:42:78:25:28:9a:ee:55:14:80:17:2b:0d:
4c:7e:81:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 23:47:55 2025 by rpki-client