![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/4137908cf894d9678c6c4f4d10d0fd39c9d907f3.roa
File: 4137908cf894d9678c6c4f4d10d0fd39c9d907f3.roa (raw, json)
Hash identifier: OlXGx1ZFvhQ/I1oMdKhg0b0YRmXuf5SRDTbGysuqvYs=
Subject key identifier: A5:99:51:27:6F:17:30:73:14:11:85:89:29:5B:9A:0F:8A:48:C2:DA
Certificate issuer: /CN=43a1dd4035b8d29ba7566c64529634ff64783a4f
Certificate serial: 29E15C
Authority key identifier: 10:C0:5B:66:2A:57:45:36:50:20:F1:D6:FA:8F:59:EF:4D:94:FE:DC
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/43a1dd4035b8d29ba7566c64529634ff64783a4f.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/4137908cf894d9678c6c4f4d10d0fd39c9d907f3.roa
Signing time: Tue 06 Feb 2024 15:37:30 +0000
ROA not before: Tue 06 Feb 2024 15:36:47 +0000
ROA not after: Tue 06 Feb 2029 15:36:47 +0000
asID: 19114
IP address blocks: 200.7.218.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2744668 (0x29e15c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43a1dd4035b8d29ba7566c64529634ff64783a4f
Validity
Not Before: Feb 6 15:36:47 2024 GMT
Not After : Feb 6 15:36:47 2029 GMT
Subject: CN=4137908cf894d9678c6c4f4d10d0fd39c9d907f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:47:4f:e3:9b:4a:d6:58:c8:bf:88:36:59:ed:
fa:1e:58:b9:12:84:b4:6d:ec:7f:26:df:c7:99:9f:
02:44:2d:e8:08:10:ee:03:f0:e7:5f:24:9e:d0:c4:
ef:74:a0:8f:5b:7c:19:69:79:3f:4f:22:a1:6e:2b:
bc:ef:06:f5:b0:0e:8c:7e:e9:b3:6a:7a:3d:c7:81:
0b:55:95:44:11:0a:72:53:90:5a:34:f4:1f:d9:65:
1f:95:c1:20:ea:b0:20:26:70:4f:30:69:d1:5f:17:
0d:2c:3a:e6:c4:fb:ea:69:a0:aa:fe:ce:ef:f6:38:
28:bf:e1:90:c5:73:46:2e:e4:83:75:86:44:6b:95:
1a:12:bd:54:2d:ef:09:b1:b1:07:8a:a1:c9:cf:62:
4a:58:3e:eb:70:4d:c1:a0:37:b3:c5:2e:03:04:47:
8e:70:31:6a:0d:13:de:b5:54:cd:1f:76:74:d4:41:
22:24:e8:35:bd:5e:93:f8:ed:79:ad:e4:55:79:da:
33:55:a5:17:53:6f:77:7d:e3:b0:ce:1a:51:32:dc:
17:c2:d2:33:d8:08:b1:88:a4:bb:ae:b5:5d:cd:44:
ac:a9:d2:5b:ea:46:e9:98:7c:b3:ba:35:3f:e1:94:
2a:57:00:3d:a8:d4:98:7b:b1:a7:65:34:58:71:12:
02:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:99:51:27:6F:17:30:73:14:11:85:89:29:5B:9A:0F:8A:48:C2:DA
X509v3 Authority Key Identifier:
keyid:10:C0:5B:66:2A:57:45:36:50:20:F1:D6:FA:8F:59:EF:4D:94:FE:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/43a1dd4035b8d29ba7566c64529634ff64783a4f.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/4137908cf894d9678c6c4f4d10d0fd39c9d907f3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/43a1dd4035b8d29ba7566c64529634ff64783a4f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.7.218.0/24
Signature Algorithm: sha256WithRSAEncryption
31:60:32:bc:ef:f0:3c:2b:eb:02:5c:1c:03:07:1f:40:02:61:
1f:2f:a6:b7:43:ba:47:37:90:b1:74:9a:2e:ec:11:59:18:18:
f9:d6:b6:47:1c:3f:55:c9:ca:2c:a6:c3:f2:16:7d:e8:ff:26:
7d:f7:b2:bb:3e:c7:d6:3f:e5:c2:f7:a4:b3:ff:19:6b:24:d6:
0e:e2:f8:7c:6d:02:44:77:e6:d7:bf:7c:8e:b6:b4:7a:08:8f:
e0:4f:e0:1d:44:2b:f7:6a:04:b5:6d:26:8f:19:85:c7:29:88:
a1:b6:6c:c8:e3:20:8b:bb:9a:08:89:d3:bf:38:e0:59:65:98:
18:f4:8b:8e:cf:b0:cf:db:0a:e5:bc:8d:e1:4a:4a:d8:07:57:
48:0a:12:d9:b7:19:22:c4:07:ec:2c:40:dd:59:c3:32:f2:70:
50:8a:01:42:01:73:ab:ff:ed:a5:24:86:52:40:45:df:0c:af:
1d:e7:ce:42:4e:5e:b9:8a:88:99:26:ec:35:f7:dc:0b:ef:60:
e2:e0:0e:5c:db:0c:40:9f:a2:49:14:38:87:57:86:ab:8c:5a:
79:cf:af:12:c9:79:70:36:f4:a2:c5:b5:ff:14:9c:6e:a2:16:
ac:7a:d0:f1:71:a4:b8:0a:cb:44:03:86:89:d2:fb:e7:8b:8a:
20:72:21:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:44 2024 by rpki-client on console-ams.rpki-client.org