Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/3230302e39342e3130362e302f32342d3234203d3e20323635353034.roa
File: 3230302e39342e3130362e302f32342d3234203d3e20323635353034.roa (raw, json)
Hash identifier: 5TikqLq8ghRdzX8YplVYoaKxtI3iNMSN+06mefeesUA=
Subject key identifier: 19:83:E5:9D:69:3B:6F:AE:FF:D3:0F:CE:0A:F4:32:F6:DC:FB:06:19
Certificate issuer: /CN=E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15
Certificate serial: 18E91DDFF9338A366C709D7F8BEEACFA533AF645
Authority key identifier: E3:5D:D2:93:E1:C3:BC:5F:4D:E1:53:18:FA:C5:96:7E:7D:55:BF:15
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/3230302e39342e3130362e302f32342d3234203d3e20323635353034.roa
Signing time: Tue 04 Feb 2025 18:52:49 +0000
ROA not before: Tue 04 Feb 2025 18:47:49 +0000
ROA not after: Tue 03 Feb 2026 18:52:49 +0000
asID: 265504
IP address blocks: 200.94.106.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.crl
rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 17 Apr 2025 22:59:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:e9:1d:df:f9:33:8a:36:6c:70:9d:7f:8b:ee:ac:fa:53:3a:f6:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15
Validity
Not Before: Feb 4 18:47:49 2025 GMT
Not After : Feb 3 18:52:49 2026 GMT
Subject: CN=1983E59D693B6FAEFFD30FCE0AF432F6DCFB0619
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:db:7e:07:26:3f:75:a4:73:9c:b5:f7:24:c4:
52:df:f9:93:80:61:d5:c8:2f:54:9a:f5:66:96:91:
97:63:4f:52:ed:3a:e5:d4:3a:4c:07:ba:37:1b:58:
9d:09:12:82:1f:e1:41:42:08:34:b3:a4:4c:e5:7e:
84:43:9a:9e:a5:e6:6c:b9:6a:94:ac:69:f2:0d:1c:
a5:27:dd:ae:0e:af:2f:b4:8f:73:ed:2c:c6:a2:b3:
9f:33:0a:bb:68:7b:f2:94:88:ef:74:7c:e6:87:e9:
24:5d:a8:2d:3e:fc:84:d2:90:d3:f5:93:17:7f:47:
16:85:4d:b5:59:47:8e:3d:ba:6e:58:25:8e:63:54:
e7:c4:e5:f5:bb:a1:5b:b9:db:5b:5a:e5:86:7a:e6:
d0:7f:ff:2a:d0:84:da:92:db:26:07:45:38:35:18:
6f:de:60:16:29:26:c2:7d:fc:14:23:9a:12:d7:4a:
9f:0e:b0:db:68:a4:d2:ce:ef:8c:3c:f8:40:27:be:
88:88:f3:29:7f:94:91:ea:72:04:ef:10:fb:49:10:
3d:e4:24:20:04:73:2b:82:f9:11:7e:c0:18:34:d9:
21:9e:65:0f:40:ca:10:c2:3e:90:4c:fb:ad:1d:41:
39:2e:9b:a3:af:a3:69:4a:45:ba:7d:9f:f3:8d:6c:
16:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:83:E5:9D:69:3B:6F:AE:FF:D3:0F:CE:0A:F4:32:F6:DC:FB:06:19
X509v3 Authority Key Identifier:
keyid:E3:5D:D2:93:E1:C3:BC:5F:4D:E1:53:18:FA:C5:96:7E:7D:55:BF:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/3230302e39342e3130362e302f32342d3234203d3e20323635353034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.94.106.0/24
Signature Algorithm: sha256WithRSAEncryption
96:94:2a:5f:83:99:28:c5:10:40:1b:8c:b3:6f:a3:bb:54:19:
4e:51:a6:38:99:a9:93:25:04:e5:72:2f:cb:7f:fd:0d:84:ce:
98:f1:b2:6f:43:82:18:35:f0:6c:52:78:25:5f:30:ac:2d:92:
21:0d:fc:2f:f4:17:37:d5:a1:40:a2:65:14:71:aa:72:d8:24:
e7:99:81:ac:57:cf:d5:24:08:42:db:b3:49:f5:d0:ec:6a:78:
46:67:2c:8e:fd:12:b5:3e:aa:4d:d4:eb:b5:e3:8a:46:59:fa:
49:c6:d4:3c:02:6c:5f:da:3e:11:27:df:8c:79:d5:b0:9e:d6:
05:57:bc:00:f0:ce:46:67:21:40:6a:f8:b3:f7:18:36:15:45:
92:9c:0d:44:b8:f7:e5:61:8a:fd:9d:06:d9:8b:71:3e:bc:54:
e9:43:c2:87:b8:41:bb:d8:e5:ae:17:1b:07:30:de:31:a7:29:
bc:51:35:25:38:88:c2:c7:8d:42:c4:d1:59:b9:ed:a5:07:15:
f5:11:d9:46:9c:9b:f1:af:0e:77:63:02:10:73:66:06:02:91:
c8:e0:fa:63:1a:54:e8:57:bd:dc:08:bf:e1:16:df:f6:ff:12:
4f:04:8d:02:fa:ba:39:64:02:9f:e1:88:6e:37:2b:87:ae:21:
bd:2d:0e:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 16:58:34 2025 by rpki-client