![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2ba95eb8-0fdb-47e5-8722-1670732ca03f/d37509819f5d0aa127c2399b58c436c14465df6e.roa
File: d37509819f5d0aa127c2399b58c436c14465df6e.roa (raw, json)
Hash identifier: MsypQ1kLOFmgMIJt6P1KPcJCKk8/tDffwupC2drAXgw=
Subject key identifier: EE:15:2F:2C:6E:24:5D:44:6A:A3:66:52:FB:5F:8A:66:AE:DF:23:65
Certificate issuer: /CN=904a59874ab57a97e46cd1d939a2312a85fe9c71
Certificate serial: 21FE57
Authority key identifier: 4E:23:5A:F0:59:C4:DE:77:9B:DA:BA:DA:4D:17:2F:37:34:F3:E2:82
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/904a59874ab57a97e46cd1d939a2312a85fe9c71.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/2ba95eb8-0fdb-47e5-8722-1670732ca03f/d37509819f5d0aa127c2399b58c436c14465df6e.roa
Signing time: Wed 05 Jul 2023 01:51:46 +0000
ROA not before: Tue 04 Jul 2023 01:51:46 +0000
ROA not after: Sat 05 Jul 2025 01:51:46 +0000
asID: 52468
IP address blocks: 164.163.48.0/23 maxlen: 23
164.163.50.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2227799 (0x21fe57)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=904a59874ab57a97e46cd1d939a2312a85fe9c71
Validity
Not Before: Jul 4 01:51:46 2023 GMT
Not After : Jul 5 01:51:46 2025 GMT
Subject: CN=d37509819f5d0aa127c2399b58c436c14465df6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:82:0d:a6:48:2b:d5:94:02:0d:98:18:44:c3:
a7:8b:86:0c:b0:8e:ec:32:fd:fe:63:b4:bf:21:a9:
e4:a1:c0:0b:a1:ba:b3:54:82:c2:2f:72:18:c9:10:
65:51:a7:8b:8e:57:3c:3a:be:a8:04:0c:9c:f9:20:
61:58:87:34:33:7e:57:71:49:31:a4:4a:16:cd:b7:
4e:86:66:ed:a3:0a:0b:32:97:73:12:63:91:3d:b2:
7a:4c:89:f0:88:8a:82:f6:55:d1:dc:aa:58:67:7c:
32:ff:b0:b8:5a:c2:b6:04:45:10:be:65:e9:e8:70:
f2:8c:f6:29:13:6f:97:ee:ea:48:46:ec:df:58:35:
f1:a8:f9:84:b1:3c:9b:b3:73:31:1c:07:66:e3:23:
e9:a1:f4:87:97:ff:15:ac:23:34:61:34:66:33:9d:
57:5f:8d:76:46:ca:b9:ce:0a:dc:10:b3:f3:1b:db:
73:c7:5c:1b:18:05:38:c0:e2:00:96:aa:53:1b:7f:
48:a9:5d:33:6a:71:b4:94:ce:02:1f:33:30:8f:a7:
38:58:d6:9a:5f:32:af:03:56:e4:d2:67:f4:f5:3c:
44:25:dd:14:b9:81:8a:b6:94:4b:00:9c:93:f6:61:
73:09:63:bf:43:f6:4d:2f:b3:44:9b:8e:20:f6:ad:
47:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:15:2F:2C:6E:24:5D:44:6A:A3:66:52:FB:5F:8A:66:AE:DF:23:65
X509v3 Authority Key Identifier:
keyid:4E:23:5A:F0:59:C4:DE:77:9B:DA:BA:DA:4D:17:2F:37:34:F3:E2:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/904a59874ab57a97e46cd1d939a2312a85fe9c71.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2ba95eb8-0fdb-47e5-8722-1670732ca03f/d37509819f5d0aa127c2399b58c436c14465df6e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/2ba95eb8-0fdb-47e5-8722-1670732ca03f/904a59874ab57a97e46cd1d939a2312a85fe9c71.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
164.163.48.0/22
Signature Algorithm: sha256WithRSAEncryption
7f:bd:12:75:05:1d:68:21:02:b5:98:b9:dc:b5:b1:40:8a:b1:
49:a2:9a:ac:91:c9:05:42:85:1e:63:be:4a:7e:e7:f2:a8:3e:
de:39:72:bd:c8:ac:5f:68:6e:78:a5:31:5a:ce:31:a3:08:70:
f0:2f:0c:b2:e8:08:4d:d6:23:30:4c:ba:e7:59:c1:de:99:ad:
a4:40:05:e3:7e:1f:9b:1a:29:6f:49:08:4c:51:d6:25:b7:a6:
cd:bd:d6:91:51:ed:7b:52:88:52:19:cd:fe:ad:21:9c:c5:09:
62:d2:11:cd:c3:e0:da:c9:38:ce:3e:93:6a:80:89:26:8c:3c:
e9:ec:7c:e1:64:5b:0c:02:38:ea:5b:38:ff:c9:62:55:65:74:
46:c8:58:ae:98:3b:31:6a:c7:25:1a:b0:85:7a:b7:03:13:f4:
67:23:9f:b5:a4:7e:c6:d3:43:9d:4c:b3:c5:cc:f1:1c:35:e0:
a8:cb:65:0e:9e:3f:68:6c:49:41:02:e4:c5:c3:d3:ab:d8:52:
27:73:51:94:81:3d:22:30:93:dc:6d:5a:b0:ee:a8:7e:0a:ef:
99:d9:aa:8a:a9:d9:e1:36:7b:68:56:85:42:02:5c:76:7f:aa:
e3:cd:22:5e:85:33:24:23:fe:fd:cc:b9:fd:fa:49:a5:2a:eb:
a7:37:b6:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:25 2024 by rpki-client on console-fra.rpki-client.org