Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ECDB73FCF1E6BD002DCB06BD6052691D622ED0910A7F2F051AEC692DDE984AEF/0/34352e3233392e33342e302f32332d3233203d3e20323636373235.roa
File: 34352e3233392e33342e302f32332d3233203d3e20323636373235.roa (raw, json)
Hash identifier: pPu9cxoOvKkZlB0jon81D8uoLqZ+C5LihyKJ+cQGHlM=
Subject key identifier: F0:47:35:AB:F8:EE:47:84:FE:81:36:0D:B8:7A:C7:D4:25:A0:79:41
Certificate issuer: /CN=9BE1895C8F64AEC52209EA2FDE7D308AED2DA640
Certificate serial: 17397E719A467E2EFDFF6897D89D3468B823B4F5
Authority key identifier: 9B:E1:89:5C:8F:64:AE:C5:22:09:EA:2F:DE:7D:30:8A:ED:2D:A6:40
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BE1895C8F64AEC52209EA2FDE7D308AED2DA640.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/ECDB73FCF1E6BD002DCB06BD6052691D622ED0910A7F2F051AEC692DDE984AEF/0/34352e3233392e33342e302f32332d3233203d3e20323636373235.roa
Signing time: Tue 18 Mar 2025 19:10:00 +0000
ROA not before: Tue 18 Mar 2025 19:05:00 +0000
ROA not after: Tue 17 Mar 2026 19:10:00 +0000
asID: 266725
IP address blocks: 45.239.34.0/23 maxlen: 23
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/ECDB73FCF1E6BD002DCB06BD6052691D622ED0910A7F2F051AEC692DDE984AEF/0/9BE1895C8F64AEC52209EA2FDE7D308AED2DA640.crl
rsync://repository.lacnic.net/rpki/lacnic/ECDB73FCF1E6BD002DCB06BD6052691D622ED0910A7F2F051AEC692DDE984AEF/0/9BE1895C8F64AEC52209EA2FDE7D308AED2DA640.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BE1895C8F64AEC52209EA2FDE7D308AED2DA640.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 17 Apr 2025 22:50:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:39:7e:71:9a:46:7e:2e:fd:ff:68:97:d8:9d:34:68:b8:23:b4:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9BE1895C8F64AEC52209EA2FDE7D308AED2DA640
Validity
Not Before: Mar 18 19:05:00 2025 GMT
Not After : Mar 17 19:10:00 2026 GMT
Subject: CN=F04735ABF8EE4784FE81360DB87AC7D425A07941
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f3:fb:f1:85:ac:c5:6f:ff:6d:76:f2:80:2d:
76:29:e3:8b:11:6b:39:a8:f6:60:8e:b4:19:67:08:
55:90:4f:28:97:ea:e4:ae:48:03:ca:f1:57:6d:4e:
6c:88:ab:b4:38:02:cd:f9:bb:5e:20:82:84:1e:65:
88:7e:1b:82:ef:d1:7f:9e:f9:21:5c:df:2b:45:b1:
31:62:43:fe:0e:05:5b:41:4d:99:24:f1:79:d3:08:
9a:3b:7a:ed:a0:33:e6:83:8a:29:e3:a5:c3:7b:40:
a8:f2:c2:df:21:ba:3e:93:23:7d:e6:2a:d3:40:dd:
ad:fc:84:39:8b:cb:97:d6:b3:10:f5:b7:45:c1:2e:
18:e5:ad:8a:24:a4:45:7f:7a:17:52:72:77:08:9d:
19:73:25:5f:31:ae:8b:70:33:96:44:b9:dd:9a:b4:
99:b0:38:09:d1:29:9d:3f:ed:6a:55:a6:22:9b:d3:
01:bb:6c:2d:45:7d:b9:e4:03:3a:88:be:46:12:81:
32:b3:a5:8c:77:26:3a:57:18:20:5d:97:f6:f9:2e:
fb:6c:ad:6c:29:d9:64:58:2a:92:1d:8f:cc:05:95:
f2:57:15:fa:bf:6f:56:31:ae:84:a5:a5:b5:d2:cf:
08:1d:e3:0b:53:b0:38:57:9a:bd:30:16:ec:14:e3:
1e:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:47:35:AB:F8:EE:47:84:FE:81:36:0D:B8:7A:C7:D4:25:A0:79:41
X509v3 Authority Key Identifier:
keyid:9B:E1:89:5C:8F:64:AE:C5:22:09:EA:2F:DE:7D:30:8A:ED:2D:A6:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/ECDB73FCF1E6BD002DCB06BD6052691D622ED0910A7F2F051AEC692DDE984AEF/0/9BE1895C8F64AEC52209EA2FDE7D308AED2DA640.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BE1895C8F64AEC52209EA2FDE7D308AED2DA640.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ECDB73FCF1E6BD002DCB06BD6052691D622ED0910A7F2F051AEC692DDE984AEF/0/34352e3233392e33342e302f32332d3233203d3e20323636373235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.239.34.0/23
Signature Algorithm: sha256WithRSAEncryption
5c:9b:e3:7b:67:98:16:a4:da:4b:24:40:5a:ff:09:67:ef:56:
8c:34:57:1a:7d:1f:49:7a:4d:d7:51:26:0c:bc:99:28:3f:46:
79:32:e4:55:f4:8c:ed:2c:f4:c1:d6:b7:da:15:42:bd:e9:ce:
ea:95:e1:da:31:3b:c0:56:f3:d3:95:3b:cf:97:b8:60:76:e7:
5e:d4:fd:e4:60:2d:ee:61:54:d2:88:0a:79:49:98:93:a3:23:
9c:b1:0b:4e:64:65:3d:13:88:59:25:16:5f:ed:41:e8:a6:5a:
86:59:5c:86:e9:53:3d:c5:b7:68:bf:08:50:6e:b2:11:35:bf:
7a:a6:0e:5e:1c:16:f6:f3:7a:a0:28:8c:34:06:43:2b:ce:28:
d7:1c:c7:68:42:d5:c2:f8:f8:59:92:df:dc:4b:cf:b7:d0:5b:
b7:20:79:2b:ae:a2:24:f5:e6:bc:3e:85:30:d8:c7:b5:17:e6:
c9:db:58:46:99:7b:4d:05:5a:67:43:34:86:2b:51:79:ad:47:
41:c5:32:72:0f:e0:69:ff:7b:3e:de:8c:a8:a3:81:67:a0:ee:
c0:66:0c:92:8e:2a:c9:6c:22:69:05:f9:ca:a7:c4:a8:a2:26:
8f:2f:ba:e7:34:24:a1:cc:c5:31:c1:7f:17:94:68:83:14:58:
77:df:89:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 10:28:50 2025 by rpki-client