![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/57092783-0211-433f-b6ea-15c3ef9a7701/383a08c95ace6a8cff4135e2ad65b267ec55ca4d.roa
File: 383a08c95ace6a8cff4135e2ad65b267ec55ca4d.roa (raw, json)
Hash identifier: zB3dF/TwGWMdrHGIR+aea5Uoz4+i9rc+AFBSvYJeU1w=
Subject key identifier: E8:17:51:D0:0D:24:3D:15:86:34:B6:A8:77:F2:C5:90:9D:FE:DC:01
Certificate issuer: /CN=451e0833b865e00364f8158e841786790d21e50c
Certificate serial: 2441B2
Authority key identifier: 50:B3:30:20:99:86:0E:13:7C:03:05:75:E9:89:7D:C3:C2:BB:83:AA
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/451e0833b865e00364f8158e841786790d21e50c.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/57092783-0211-433f-b6ea-15c3ef9a7701/383a08c95ace6a8cff4135e2ad65b267ec55ca4d.roa
Signing time: Fri 29 Dec 2023 02:47:06 +0000
ROA not before: Fri 29 Dec 2023 02:47:06 +0000
ROA not after: Mon 29 Dec 2025 02:47:06 +0000
asID: 20473
IP address blocks: 45.188.219.0/24 maxlen: 24
2801:1b:4800::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2376114 (0x2441b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=451e0833b865e00364f8158e841786790d21e50c
Validity
Not Before: Dec 29 02:47:06 2023 GMT
Not After : Dec 29 02:47:06 2025 GMT
Subject: CN=383a08c95ace6a8cff4135e2ad65b267ec55ca4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:8d:49:e4:7b:dd:f0:95:d0:17:ee:c2:53:3c:
07:f8:25:14:b7:8b:3f:39:f6:c7:4d:4b:90:56:d2:
1f:80:b6:01:48:8c:fa:30:62:e6:f7:61:0f:4a:00:
67:35:3e:6a:a6:12:0f:16:d8:f9:e7:94:20:9a:36:
2e:7e:90:4e:b8:7f:0e:8c:93:ef:85:cf:a5:16:cc:
7e:73:74:82:f5:40:ca:ce:dd:05:f8:49:74:88:ad:
04:5a:7d:6a:bc:61:d6:b9:84:64:bf:17:e8:dd:9a:
8a:0a:86:35:06:ec:74:e3:dc:32:45:22:46:9d:3b:
fb:05:3a:fe:da:4e:6b:49:6a:a6:92:b9:8a:8f:a3:
f9:49:4f:29:2c:18:f3:62:2e:e1:09:56:8e:28:f4:
2e:b0:57:56:fd:fe:67:e5:a6:2f:7e:28:0d:bf:1b:
76:2c:27:a4:b5:89:fd:70:10:2a:2c:b1:99:64:eb:
1d:8f:c0:73:12:ba:2f:95:db:c4:48:1e:04:5a:a8:
fd:b6:6a:f1:15:20:ff:db:93:0b:2d:2c:ab:6d:89:
ab:ef:c7:bf:47:ca:06:cb:33:6d:3b:61:66:b3:36:
26:8c:7b:23:2b:b5:ae:2b:03:60:3b:e2:84:a8:bb:
ec:1e:18:7c:ef:61:21:13:93:d3:ad:4c:f4:07:18:
93:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:17:51:D0:0D:24:3D:15:86:34:B6:A8:77:F2:C5:90:9D:FE:DC:01
X509v3 Authority Key Identifier:
keyid:50:B3:30:20:99:86:0E:13:7C:03:05:75:E9:89:7D:C3:C2:BB:83:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/451e0833b865e00364f8158e841786790d21e50c.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/57092783-0211-433f-b6ea-15c3ef9a7701/383a08c95ace6a8cff4135e2ad65b267ec55ca4d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/57092783-0211-433f-b6ea-15c3ef9a7701/451e0833b865e00364f8158e841786790d21e50c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.188.219.0/24
IPv6:
2801:1b:4800::/48
Signature Algorithm: sha256WithRSAEncryption
35:0a:5e:a6:c8:9f:72:9a:e2:5e:62:a3:f6:c8:46:4f:9d:13:
a2:d8:2d:55:1e:06:37:6c:8f:8f:43:a8:c4:ea:95:c4:01:d1:
73:4b:1b:9a:32:f0:95:4b:c6:f7:44:ee:80:c8:cc:a7:16:0a:
82:ad:69:73:21:c1:a3:40:67:1a:be:27:3a:eb:e1:1c:a2:ff:
87:6a:c8:0f:64:ea:7c:12:4f:4b:31:f3:44:a7:6a:58:f4:e8:
3a:dc:92:8f:40:6e:b5:05:3f:be:de:83:2f:6e:64:a5:2d:78:
4e:60:bc:b7:96:ec:16:9c:38:dc:a3:a6:d8:d7:37:b8:60:92:
d2:1a:f9:06:96:3b:d8:33:c4:f7:8f:21:68:7b:73:51:0a:69:
39:ad:b9:eb:bd:66:42:fc:2b:80:44:f3:92:47:1e:2e:6e:ab:
16:d9:38:6a:79:a6:d6:7d:24:3a:a7:b6:b0:68:e1:ea:7b:ea:
41:37:c9:b5:e5:e6:ed:bc:6b:22:f2:9b:fd:ef:e5:62:30:c4:
94:36:a6:8f:7d:a7:c3:a3:bc:e3:bd:6c:0f:3e:07:0a:95:f1:
65:66:2f:3d:51:a3:d5:9d:c8:8f:fd:60:af:c5:0d:da:31:21:
6a:43:e0:ec:8c:f6:e4:b8:a7:71:7d:b7:19:c9:f3:77:fa:55:
20:8e:57:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:43 2024 by rpki-client on console-ams.rpki-client.org