Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3138362e3130312e3132382e302f31372d3234203d3e203532323537.roa
File: 3138362e3130312e3132382e302f31372d3234203d3e203532323537.roa (raw, json)
Hash identifier: z8uWFD9sTuKMKu1aB4POXgDwsAIaEa5cjmD9hdDg1lM=
Subject key identifier: DE:A6:04:41:06:8B:95:D2:4B:D2:E6:50:06:25:C2:34:30:15:8C:12
Certificate issuer: /CN=96F6D055361134166E9B66FB555FF27DCEDBF85D
Certificate serial: 616DE8735EF42994B653FC68E439EF8FEADE7629
Authority key identifier: 96:F6:D0:55:36:11:34:16:6E:9B:66:FB:55:5F:F2:7D:CE:DB:F8:5D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3138362e3130312e3132382e302f31372d3234203d3e203532323537.roa
Signing time: Tue 04 Feb 2025 18:11:17 +0000
ROA not before: Tue 04 Feb 2025 18:06:17 +0000
ROA not after: Tue 03 Feb 2026 18:11:17 +0000
asID: 52257
IP address blocks: 186.101.128.0/17 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.crl
rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 17 Apr 2025 18:38:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:6d:e8:73:5e:f4:29:94:b6:53:fc:68:e4:39:ef:8f:ea:de:76:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96F6D055361134166E9B66FB555FF27DCEDBF85D
Validity
Not Before: Feb 4 18:06:17 2025 GMT
Not After : Feb 3 18:11:17 2026 GMT
Subject: CN=DEA60441068B95D24BD2E6500625C23430158C12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:1e:25:12:cf:98:d1:c7:8d:d8:20:8f:67:93:
11:f7:f7:e6:f6:f6:71:39:de:2c:5d:95:18:12:2e:
80:6b:09:d3:f2:76:d2:da:43:74:e5:ba:79:eb:4f:
89:76:c8:03:35:e0:73:81:37:3e:04:5e:64:66:3e:
f6:3b:d0:c0:b5:e9:24:70:93:f3:9a:1b:5e:7b:e8:
de:2a:d7:aa:f4:45:ba:12:6d:ed:2a:86:0f:8a:20:
9b:b6:4c:e7:ae:10:b5:69:fa:f5:8d:16:73:38:9c:
5f:6f:b9:4f:63:1c:45:20:31:ee:97:2c:14:33:f2:
d4:76:ca:45:bb:a8:eb:82:5f:f2:f9:db:c0:a3:1d:
4e:62:4f:6a:c2:e1:b0:1c:30:d4:3c:a8:f7:52:06:
2c:7a:80:25:21:40:11:e7:c7:8c:b9:6d:73:cf:f5:
50:17:1b:5b:bf:8b:bc:30:5a:ea:4f:85:bb:ab:49:
34:65:1d:5f:dd:5f:cf:44:85:78:8f:1c:95:b6:60:
02:89:d4:d9:bf:c7:c1:8f:92:f0:c1:76:b9:ce:35:
ed:b6:63:8d:03:7b:99:0a:2c:06:1b:c7:d2:ec:26:
99:2c:5e:f0:46:a6:3e:2a:f7:9b:86:bd:4f:e9:6e:
e0:52:da:f0:64:ee:39:00:67:3b:d3:bc:43:38:8c:
6e:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:A6:04:41:06:8B:95:D2:4B:D2:E6:50:06:25:C2:34:30:15:8C:12
X509v3 Authority Key Identifier:
keyid:96:F6:D0:55:36:11:34:16:6E:9B:66:FB:55:5F:F2:7D:CE:DB:F8:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3138362e3130312e3132382e302f31372d3234203d3e203532323537.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.101.128.0/17
Signature Algorithm: sha256WithRSAEncryption
3a:62:6e:80:88:c5:81:92:b9:19:ea:e4:fc:21:da:43:dd:92:
f4:31:d5:7c:47:8b:2f:bc:b5:f8:24:ba:ce:59:92:bd:c1:67:
14:23:aa:a5:bd:d0:ec:de:50:4f:46:91:ed:89:0e:aa:52:cf:
52:bb:b5:02:b6:8c:a4:78:02:79:5a:f8:11:ad:de:75:74:3c:
23:47:ac:01:56:cc:90:c5:9c:3b:f9:65:17:f2:db:14:17:51:
15:92:53:2a:fa:65:ee:36:e1:9f:a8:7e:77:6b:09:91:96:90:
90:52:f5:ea:0b:71:61:78:b9:28:fa:7e:64:a9:30:8c:91:68:
33:bd:90:20:12:c7:e7:8b:2d:83:12:45:2a:41:8c:7c:25:2e:
ae:e1:b3:79:d7:97:d0:44:90:fe:b5:a0:4f:92:d8:45:3d:49:
2d:50:85:86:2c:73:9a:1e:50:e9:17:16:f3:bd:64:e1:07:fa:
0d:d6:f5:8f:45:eb:37:60:71:75:0b:dc:b1:da:21:8c:b2:29:
d2:7a:07:84:07:d4:1e:ab:69:c6:40:c1:19:b2:1f:11:11:ed:
87:3c:7d:88:a3:cc:2d:96:32:76:d7:ee:54:ed:3e:9e:11:76:
c4:3e:13:a1:5f:fc:2a:a9:57:29:23:11:a6:19:4b:06:67:aa:
a8:a6:f4:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 02:07:13 2025 by rpki-client