![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/506f2045-77c2-435d-8e2a-d6576b507dbe/aefa7a9306503d0a7ed20daab13ddcba2c5f3ef4.roa
File: aefa7a9306503d0a7ed20daab13ddcba2c5f3ef4.roa (raw, json)
Hash identifier: ClZUSQDImpkEZ/bKB6a44I4i8NGzDSpS08TiANek15M=
Subject key identifier: FD:81:62:61:73:8E:63:CA:C1:88:EE:7E:5B:A5:C0:56:03:FD:EE:6F
Certificate issuer: /CN=a207cb2f14582ea28aa604734d5ad48d807bd643
Certificate serial: 0B5DC2
Authority key identifier: C0:6A:C0:F0:C7:04:DC:7E:24:D1:CB:D4:12:8A:2C:E2:26:64:37:11
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a207cb2f14582ea28aa604734d5ad48d807bd643.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/506f2045-77c2-435d-8e2a-d6576b507dbe/aefa7a9306503d0a7ed20daab13ddcba2c5f3ef4.roa
Signing time: Wed 24 Mar 2021 14:45:22 +0000
ROA not before: Wed 24 Mar 2021 14:45:22 +0000
ROA not after: Tue 24 Mar 2026 14:45:22 +0000
asID: 269736
IP address blocks: 45.181.68.0/22 maxlen: 22
2803:8960::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 744898 (0xb5dc2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a207cb2f14582ea28aa604734d5ad48d807bd643
Validity
Not Before: Mar 24 14:45:22 2021 GMT
Not After : Mar 24 14:45:22 2026 GMT
Subject: CN=aefa7a9306503d0a7ed20daab13ddcba2c5f3ef4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:fa:9f:09:f5:81:8e:55:4c:a3:a6:06:e6:99:
88:71:ff:e7:d8:d1:82:45:0e:15:b5:a6:13:c3:47:
5b:96:c8:a5:71:fe:2f:79:fa:b4:74:f3:f3:3b:e9:
e6:2f:4b:85:8a:94:e2:3b:e8:fa:a4:cf:0d:ea:d0:
d5:49:e7:87:20:3d:37:ad:62:cc:42:cf:cb:bb:2c:
42:e5:f5:ed:33:23:10:3e:95:68:22:91:16:e1:f0:
44:5a:d3:b0:7a:3b:a7:17:ac:4c:e2:1d:80:2f:3d:
0f:88:aa:18:0a:f0:26:d9:63:c1:ba:06:53:69:04:
8a:3d:56:2f:d7:da:c4:68:e2:97:e5:63:98:fb:0d:
41:5b:05:04:ab:4c:04:3a:b9:07:7c:81:83:ee:90:
a0:d3:61:35:20:6a:f0:f2:69:8a:36:ec:cf:74:0c:
fc:74:3a:45:01:73:29:a9:97:89:f9:0c:1f:2d:3d:
fa:6c:b8:91:df:e9:23:45:2e:2a:22:dc:7d:11:30:
f7:39:e0:a9:dd:4c:c0:bf:8e:23:ce:d9:89:28:20:
9f:8d:9c:56:55:d5:e6:7a:2e:6c:8f:23:0a:be:02:
37:b4:f8:5a:c3:06:af:7f:9e:0f:3b:5a:68:04:41:
8d:8d:ae:10:14:40:32:58:22:e3:70:ac:db:64:4b:
a8:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:81:62:61:73:8E:63:CA:C1:88:EE:7E:5B:A5:C0:56:03:FD:EE:6F
X509v3 Authority Key Identifier:
keyid:C0:6A:C0:F0:C7:04:DC:7E:24:D1:CB:D4:12:8A:2C:E2:26:64:37:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a207cb2f14582ea28aa604734d5ad48d807bd643.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/506f2045-77c2-435d-8e2a-d6576b507dbe/aefa7a9306503d0a7ed20daab13ddcba2c5f3ef4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/506f2045-77c2-435d-8e2a-d6576b507dbe/a207cb2f14582ea28aa604734d5ad48d807bd643.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.181.68.0/22
IPv6:
2803:8960::/32
Signature Algorithm: sha256WithRSAEncryption
13:7e:db:ed:5a:d2:49:e1:69:71:b2:bb:64:31:8c:1d:ad:d6:
29:77:0e:45:7a:8d:c3:f4:1e:25:e5:c0:04:56:1d:8a:e5:28:
2a:6c:0d:6d:59:87:b0:2b:8b:9f:64:39:3d:22:9c:ec:23:d8:
ca:2f:d7:dd:fa:3b:e2:de:be:de:47:c8:15:15:3f:a0:2e:e5:
0e:b6:d8:3d:8e:40:ac:2b:d3:e4:7c:b2:d3:ad:27:d6:49:40:
e9:59:8a:df:64:80:2d:2c:4c:f3:75:2f:ae:43:4e:5d:1a:e5:
b0:01:1f:e6:ce:03:74:3d:62:fb:12:0e:6c:92:1e:cf:ad:8c:
4a:5c:9b:61:08:95:db:cf:d2:ed:9e:bc:cd:37:aa:66:8d:cf:
d0:5a:9d:e3:19:29:47:c2:bf:e2:2e:ee:86:9c:3c:5b:43:57:
2d:05:1f:95:bf:57:06:5a:3e:03:22:f1:f5:6c:ee:ae:29:8f:
fc:6b:2e:54:39:33:18:5f:26:b6:4e:0a:99:ea:a1:03:f5:db:
24:79:25:5e:90:e5:91:67:2d:62:45:0f:41:42:67:85:14:cc:
0d:7e:49:bd:aa:f6:1f:de:e1:bc:1f:5d:75:7c:78:99:69:fb:
f7:59:11:c5:b9:91:37:a5:15:07:83:7d:ba:ff:e3:f4:1a:a8:
e8:a6:a2:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:42 2024 by rpki-client on console-fra.rpki-client.org