![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/78a46017-c255-4869-bb4d-256e3ba6be23/d15668412fe8268baa62d7bec9973406e308bde0.roa
File: d15668412fe8268baa62d7bec9973406e308bde0.roa (raw, json)
Hash identifier: 9/z7PgV5S18OF5Ijqfst/ZUtVECQfNsP/+4PseWnbrg=
Subject key identifier: A3:25:A4:03:A6:42:A7:E9:09:0C:C7:F7:A2:E3:21:CA:08:AE:1C:AC
Certificate issuer: /CN=ee16626b2effff95f451b4227e9e67721082c9aa
Certificate serial: 1B099C
Authority key identifier: 8F:8F:4B:D8:2E:E7:50:77:B1:32:62:F0:18:79:41:9A:CF:13:10:28
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ee16626b2effff95f451b4227e9e67721082c9aa.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/78a46017-c255-4869-bb4d-256e3ba6be23/d15668412fe8268baa62d7bec9973406e308bde0.roa
Signing time: Fri 02 Jun 2023 08:30:00 +0000
ROA not before: Thu 01 Jun 2023 08:30:00 +0000
ROA not after: Sat 31 May 2025 08:30:00 +0000
asID: 28100
IP address blocks: 45.71.204.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1771932 (0x1b099c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee16626b2effff95f451b4227e9e67721082c9aa
Validity
Not Before: Jun 1 08:30:00 2023 GMT
Not After : May 31 08:30:00 2025 GMT
Subject: CN=d15668412fe8268baa62d7bec9973406e308bde0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:a7:4a:19:e0:14:9c:9a:59:8a:03:81:3f:83:
b4:b6:27:d9:d2:69:90:8c:a9:56:ed:ed:4c:86:05:
36:58:40:e7:d0:a0:1a:bd:e4:d6:5d:1b:ea:ee:69:
36:a8:97:e8:d5:fb:c4:07:91:e4:45:05:ed:79:61:
8d:fa:b9:bb:93:87:62:60:68:97:bb:b4:01:7e:11:
a8:82:cf:a0:1a:cd:66:d0:59:1f:b2:32:d7:c5:75:
f8:fb:57:4d:c9:10:5b:03:33:7d:92:6e:c3:6b:cf:
42:09:85:c2:e5:fa:77:ce:25:73:f4:a2:ee:35:60:
8b:ec:07:7d:ba:7b:e7:ca:ce:92:0b:cf:3c:86:c7:
4c:d5:b7:b2:80:4a:79:e7:c4:42:11:20:79:42:c5:
7d:9c:96:27:0c:f6:27:32:51:f8:d7:73:d1:b7:bd:
98:af:b5:1f:d5:71:e8:45:d8:6f:e7:66:e9:36:f0:
dd:37:b0:b9:20:6e:42:d1:e6:36:f9:1b:5d:ba:ae:
f5:df:e5:27:bc:60:4e:38:c5:2f:a1:8a:75:ac:4e:
64:40:cc:91:5f:39:e8:ea:17:f7:36:03:0a:2d:6b:
22:a4:b9:43:34:3b:1c:65:7b:05:64:c1:36:ca:4e:
fe:10:c7:1d:0d:fe:02:4e:33:c4:cc:fc:3d:4a:67:
66:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:25:A4:03:A6:42:A7:E9:09:0C:C7:F7:A2:E3:21:CA:08:AE:1C:AC
X509v3 Authority Key Identifier:
keyid:8F:8F:4B:D8:2E:E7:50:77:B1:32:62:F0:18:79:41:9A:CF:13:10:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ee16626b2effff95f451b4227e9e67721082c9aa.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/78a46017-c255-4869-bb4d-256e3ba6be23/d15668412fe8268baa62d7bec9973406e308bde0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/78a46017-c255-4869-bb4d-256e3ba6be23/ee16626b2effff95f451b4227e9e67721082c9aa.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.71.204.0/22
Signature Algorithm: sha256WithRSAEncryption
71:1b:1e:7c:44:b0:39:65:9e:6e:2d:95:5a:ba:9c:ee:24:dc:
f2:f4:95:47:8f:9d:10:a1:8d:3f:7a:ac:b9:58:a9:59:8c:3f:
be:be:32:f6:6c:28:00:ed:a8:d5:12:77:df:51:e2:80:63:2f:
e6:12:ba:9e:92:3d:a6:b5:52:cc:60:50:44:5d:16:94:34:5e:
9a:24:79:56:80:b9:65:75:41:87:17:d7:ec:ca:76:37:2e:fa:
8f:e0:b7:2e:86:0b:71:12:f5:bd:c6:61:a4:b3:b4:ff:9a:b4:
69:53:4c:33:f7:f8:82:36:69:99:85:e2:e0:d5:3b:46:c3:65:
ba:62:59:b9:e1:ec:1b:7c:45:66:5c:e8:01:ab:96:f9:6d:22:
98:54:d5:c9:4d:e8:da:24:8e:bf:eb:3c:3e:03:4b:73:3a:2a:
2c:63:f2:89:0c:da:10:c5:09:36:c8:14:b7:a7:b1:bf:0a:67:
33:ab:8f:da:74:e8:8e:79:04:60:06:dd:d7:3c:ee:0a:6e:4b:
2f:da:94:8d:29:48:70:76:18:58:35:2d:a9:47:b7:90:de:91:
32:8f:0c:02:20:cc:38:0b:97:a5:cb:e1:b6:91:28:97:bd:fb:
8a:03:3c:0b:52:22:25:be:db:bf:4f:fd:59:ec:4a:b6:da:65:
7c:f3:bd:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:51 2024 by rpki-client on console-fra.rpki-client.org