![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/194a143a-facd-448a-998b-5a306ab784bc/a045afbeba889c6ac3a905b607ef7542f0d9b8d9.roa
File: a045afbeba889c6ac3a905b607ef7542f0d9b8d9.roa (raw, json)
Hash identifier: n/pc+r1CInUl4vGk0zTGUplwqCmH3Ptj432u2lPzNBQ=
Subject key identifier: 20:8C:D1:BD:A0:D9:41:F0:9F:32:FD:9D:E0:29:D2:58:EB:25:13:88
Certificate issuer: /CN=7ad45033c78c4f66de023e56ff03e177bf1bcb19
Certificate serial: 03E74F
Authority key identifier: EC:20:E0:2E:BB:B3:A7:8D:AE:DB:78:95:96:E5:28:C9:63:B1:6A:B1
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7ad45033c78c4f66de023e56ff03e177bf1bcb19.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/194a143a-facd-448a-998b-5a306ab784bc/a045afbeba889c6ac3a905b607ef7542f0d9b8d9.roa
Signing time: Wed 24 Mar 2021 14:47:12 +0000
ROA not before: Wed 24 Mar 2021 14:47:12 +0000
ROA not after: Tue 24 Mar 2026 14:47:12 +0000
asID: 61447
IP address blocks: 200.93.247.0/24 maxlen: 24
2801:1b:2000::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 255823 (0x3e74f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ad45033c78c4f66de023e56ff03e177bf1bcb19
Validity
Not Before: Mar 24 14:47:12 2021 GMT
Not After : Mar 24 14:47:12 2026 GMT
Subject: CN=a045afbeba889c6ac3a905b607ef7542f0d9b8d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:43:48:14:46:62:e9:4f:9e:df:9d:5f:89:ac:
0d:21:3a:bf:43:56:2e:2d:2b:84:cc:e1:85:be:12:
e5:89:cb:64:54:57:5b:ce:42:3d:1b:a0:e0:bb:5a:
94:bb:25:f7:6c:af:08:9d:16:89:a7:6b:4a:95:36:
b6:0f:69:b4:f1:55:33:cf:e7:5e:17:cb:ca:f8:f2:
0c:11:92:94:ff:04:f1:e5:f4:2c:87:e1:42:aa:f2:
3b:73:08:27:8a:18:dd:91:47:f9:e4:7d:c6:2a:94:
f2:27:6d:5d:e5:1a:0c:8c:8a:c2:f7:cb:0c:f7:9c:
65:7d:27:31:75:6f:f4:e1:d7:09:eb:8f:db:bb:fd:
0f:98:e8:74:f5:00:ff:00:5e:05:34:f4:87:40:13:
16:87:f0:b8:ae:e8:f1:48:2e:ba:b5:8d:8d:54:3d:
ff:a9:cd:6d:a3:15:f1:29:72:31:41:03:cb:fc:ce:
b7:c8:54:a9:95:27:1d:c4:69:6a:ff:e7:76:b9:08:
88:de:c1:74:3e:04:4b:50:e5:bf:7c:93:60:cf:ea:
5c:b6:3c:12:23:fd:62:b0:c4:d0:6e:d0:c4:2d:4e:
af:f1:db:77:54:ec:db:02:ef:d2:1d:53:fc:b3:86:
9f:15:b7:12:4c:8c:79:03:ef:a7:d0:8a:e2:98:8d:
17:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:8C:D1:BD:A0:D9:41:F0:9F:32:FD:9D:E0:29:D2:58:EB:25:13:88
X509v3 Authority Key Identifier:
keyid:EC:20:E0:2E:BB:B3:A7:8D:AE:DB:78:95:96:E5:28:C9:63:B1:6A:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7ad45033c78c4f66de023e56ff03e177bf1bcb19.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/194a143a-facd-448a-998b-5a306ab784bc/a045afbeba889c6ac3a905b607ef7542f0d9b8d9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/194a143a-facd-448a-998b-5a306ab784bc/7ad45033c78c4f66de023e56ff03e177bf1bcb19.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.93.247.0/24
IPv6:
2801:1b:2000::/48
Signature Algorithm: sha256WithRSAEncryption
26:22:0d:0f:0a:e5:e5:81:f4:ad:2c:28:96:67:05:71:48:95:
47:96:fb:88:e8:12:22:7d:18:27:85:3a:6b:0b:06:62:63:9b:
85:f5:58:90:08:71:7f:78:0a:6c:da:f6:99:09:a4:90:4e:ba:
c2:32:96:ad:e2:56:8c:30:b5:5d:2f:02:a7:60:39:7c:fa:07:
05:da:6e:07:e9:5e:dd:ef:2f:36:8c:3b:7d:90:41:a8:a0:cc:
7a:f1:bc:64:26:6c:84:18:2b:d2:e1:f6:09:8b:3b:02:3d:b7:
02:ff:89:d0:8d:89:31:bd:64:a0:27:0b:c8:3d:38:ba:1d:55:
91:86:72:c3:b0:b1:97:a5:ba:e2:91:7e:f2:13:d1:46:fc:8d:
d5:52:e6:b3:2b:bc:bb:9a:39:e7:14:c8:c5:0d:e4:a9:2c:ef:
d5:72:13:da:8b:19:6b:aa:1a:e6:f9:55:04:b8:23:50:cc:21:
3a:ea:94:5b:49:91:41:65:b9:ce:74:c3:9f:ec:aa:82:21:85:
f6:17:f8:f5:62:18:4f:83:91:56:13:35:80:cd:6c:06:1e:e8:
f4:4b:c6:3a:21:39:78:62:11:5c:b6:e1:db:6c:b8:08:92:2f:
d7:90:77:d7:a7:80:31:d2:69:9f:9c:e2:f1:a6:f8:6e:f6:c0:
93:a7:e8:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:01 2024 by rpki-client on console-ams.rpki-client.org