Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FF2D4DC420C4C39790BC2C03D51255D0A1C01933F37C28DC074059858B00573E/0/3138312e3139312e32362e302f32342d3234203d3e20323633383039.roa
File: 3138312e3139312e32362e302f32342d3234203d3e20323633383039.roa (raw, json)
Hash identifier: rWNZM86mlMvFeBPwiLhtW6J0yDbT9/rGpu9muLIHB4A=
Subject key identifier: D3:3D:00:63:24:3F:73:C6:D3:19:6B:D8:9B:A9:17:A7:B1:DD:83:B2
Certificate issuer: /CN=3D06F0A5D3F0CFD84CF1A81F12D5E3C7623ECD76
Certificate serial: 6B387D87D9E64E1813434F9D9B193F1ADA31C0CC
Authority key identifier: 3D:06:F0:A5:D3:F0:CF:D8:4C:F1:A8:1F:12:D5:E3:C7:62:3E:CD:76
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D06F0A5D3F0CFD84CF1A81F12D5E3C7623ECD76.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/FF2D4DC420C4C39790BC2C03D51255D0A1C01933F37C28DC074059858B00573E/0/3138312e3139312e32362e302f32342d3234203d3e20323633383039.roa
Signing time: Tue 04 Feb 2025 18:37:03 +0000
ROA not before: Tue 04 Feb 2025 18:32:03 +0000
ROA not after: Tue 03 Feb 2026 18:37:03 +0000
asID: 263809
IP address blocks: 181.191.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/FF2D4DC420C4C39790BC2C03D51255D0A1C01933F37C28DC074059858B00573E/0/3D06F0A5D3F0CFD84CF1A81F12D5E3C7623ECD76.crl
rsync://repository.lacnic.net/rpki/lacnic/FF2D4DC420C4C39790BC2C03D51255D0A1C01933F37C28DC074059858B00573E/0/3D06F0A5D3F0CFD84CF1A81F12D5E3C7623ECD76.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D06F0A5D3F0CFD84CF1A81F12D5E3C7623ECD76.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 18 Apr 2025 17:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:38:7d:87:d9:e6:4e:18:13:43:4f:9d:9b:19:3f:1a:da:31:c0:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3D06F0A5D3F0CFD84CF1A81F12D5E3C7623ECD76
Validity
Not Before: Feb 4 18:32:03 2025 GMT
Not After : Feb 3 18:37:03 2026 GMT
Subject: CN=D33D0063243F73C6D3196BD89BA917A7B1DD83B2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:4b:08:e1:c6:9b:f1:13:75:4e:fd:4a:d3:08:
fc:e5:3d:10:84:a0:bb:a6:89:ea:43:5e:4a:16:09:
3e:30:5e:ad:30:72:88:a3:19:ae:ee:63:50:b0:34:
8b:6d:a2:88:9a:cd:8d:2d:0d:ef:18:eb:14:c6:11:
0c:bd:11:7e:49:ae:47:bf:0b:9b:ae:b1:dd:07:e1:
69:50:be:7e:1a:27:29:d2:10:42:f7:14:b9:9b:a4:
80:bd:fa:32:13:77:f3:a6:30:7d:d8:a3:78:18:98:
23:e9:3c:bb:c9:49:eb:c1:5b:cd:f9:11:d8:56:dd:
84:15:db:42:3a:e6:c4:b3:a0:f8:11:99:9f:e7:f1:
22:16:13:98:82:ce:1f:ce:cb:04:89:14:40:c8:93:
15:95:90:7c:5c:85:6a:7e:18:24:a4:56:9f:5b:02:
e4:59:7e:5b:d5:d4:c8:b8:49:80:47:cf:b2:31:5d:
3d:a5:20:90:e5:fa:a7:61:ee:7b:87:89:98:09:95:
3d:fc:af:74:17:27:71:1f:a0:87:17:30:48:3a:dc:
44:07:a8:ce:6b:3e:99:1a:78:cd:f4:78:66:47:2f:
2a:8a:cc:d2:af:33:43:ba:ad:a1:6f:0a:63:98:b6:
54:b6:b8:34:11:e7:a4:31:85:ae:f0:2c:18:77:94:
41:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:3D:00:63:24:3F:73:C6:D3:19:6B:D8:9B:A9:17:A7:B1:DD:83:B2
X509v3 Authority Key Identifier:
keyid:3D:06:F0:A5:D3:F0:CF:D8:4C:F1:A8:1F:12:D5:E3:C7:62:3E:CD:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/FF2D4DC420C4C39790BC2C03D51255D0A1C01933F37C28DC074059858B00573E/0/3D06F0A5D3F0CFD84CF1A81F12D5E3C7623ECD76.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D06F0A5D3F0CFD84CF1A81F12D5E3C7623ECD76.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FF2D4DC420C4C39790BC2C03D51255D0A1C01933F37C28DC074059858B00573E/0/3138312e3139312e32362e302f32342d3234203d3e20323633383039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.191.26.0/24
Signature Algorithm: sha256WithRSAEncryption
00:a6:bb:b1:5a:25:4e:35:cd:6d:ae:4f:ee:6a:b1:72:fb:e5:
36:e0:9a:f5:7a:39:a5:fe:e5:fb:9e:f5:3c:13:92:e7:f7:d8:
79:39:8e:8d:a1:35:b3:75:d3:aa:84:90:b8:3d:c8:70:e9:4d:
d2:28:4d:06:51:23:54:c9:79:80:a4:20:d1:37:66:41:51:ad:
da:77:e9:36:9f:4f:3b:84:0d:f5:d9:d1:54:5c:da:d2:56:56:
81:aa:de:56:29:33:3d:1c:18:ac:32:0a:75:82:e8:8b:ed:8c:
47:ab:0f:3f:64:a9:1d:af:37:da:2b:f5:13:46:d6:94:c6:f4:
c5:0a:af:cf:f4:c9:e1:90:d0:0e:96:fe:b8:e9:0a:26:1a:64:
34:71:71:56:ad:15:5a:0f:73:21:e0:fb:ec:72:ab:00:84:f2:
27:59:5c:f2:48:63:12:ec:11:4a:83:12:7c:14:76:24:88:80:
c6:15:37:79:62:52:06:64:db:4e:a1:b4:3e:51:27:ad:d8:1f:
f6:bc:56:39:75:7c:76:47:8c:25:e6:c6:10:ae:0a:41:ed:33:
b9:b7:8c:da:8e:8c:7a:71:e3:ac:78:bc:1f:ff:64:50:8e:a1:
c4:07:f3:ae:d9:0b:bb:05:d3:1c:ef:ab:ec:30:10:4f:27:a4:
41:0c:f1:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 16:35:53 2025 by rpki-client