![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/9acd6f0b13d8cab53f2f7979fe21d055484294fa.roa
File: 9acd6f0b13d8cab53f2f7979fe21d055484294fa.roa (raw, json)
Hash identifier: NazT2Q5tybcPUhhoBn6KPDibKbdoMwkIOFCUb0/ciyE=
Subject key identifier: 5C:64:14:E5:F9:23:C5:FA:6F:C4:19:A7:FB:0F:A2:0B:BA:EE:8B:7B
Certificate issuer: /CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Certificate serial: 06200A
Authority key identifier: 84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/9acd6f0b13d8cab53f2f7979fe21d055484294fa.roa
Signing time: Mon 06 Jun 2022 05:03:21 +0000
ROA not before: Mon 06 Jun 2022 03:00:00 +0000
ROA not after: Tue 06 Jun 2023 03:00:00 +0000
asID: 3970
IP address blocks: 201.219.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 401418 (0x6200a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Validity
Not Before: Jun 6 03:00:00 2022 GMT
Not After : Jun 6 03:00:00 2023 GMT
Subject: CN=9acd6f0b13d8cab53f2f7979fe21d055484294fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:22:a2:3e:20:96:40:18:f8:e6:ab:96:ab:49:
55:89:58:97:08:99:0e:4e:35:15:d4:65:ea:d9:2a:
58:2b:f2:13:4f:d8:9a:5e:a9:42:d4:a5:d7:2a:cd:
a7:f5:5f:b3:03:29:73:3c:ae:f4:ae:bb:ec:ae:ea:
b9:ee:d7:7c:77:89:90:f6:b5:27:b5:7a:1e:7f:4b:
f6:98:60:f0:ac:54:8f:cd:9f:83:52:4e:2f:f1:6d:
70:0a:df:0a:cc:ed:89:08:71:d0:35:29:84:46:ec:
d0:ee:11:45:3c:e6:ba:96:0c:b3:9e:f2:15:08:ff:
09:25:05:c7:18:56:1b:d1:76:72:32:a7:e4:00:e1:
5f:9e:d7:8f:73:64:db:47:46:34:3f:76:54:6b:9e:
39:b7:3a:3f:ee:2c:49:19:e5:7a:84:9b:bc:d6:ef:
1c:64:2d:c0:5a:96:fe:28:5f:b6:12:0c:56:ae:42:
c9:9c:13:6f:1f:7e:34:fd:5c:8b:43:33:5d:67:c3:
5d:d1:f4:4d:70:08:47:24:4b:78:8c:60:ac:f0:a2:
e5:94:46:7c:1c:56:82:df:10:fa:f0:81:0b:22:78:
cb:88:d6:f7:c4:87:44:aa:6f:25:a2:cc:df:a2:5a:
05:94:25:33:ec:2a:00:a6:a1:7d:82:10:32:1f:bc:
2f:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:64:14:E5:F9:23:C5:FA:6F:C4:19:A7:FB:0F:A2:0B:BA:EE:8B:7B
X509v3 Authority Key Identifier:
keyid:84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/9acd6f0b13d8cab53f2f7979fe21d055484294fa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.219.253.0/24
Signature Algorithm: sha256WithRSAEncryption
78:0e:0d:fc:b4:4a:5b:58:ad:a7:12:87:a9:fb:40:39:19:f8:
25:af:9d:b8:f6:bd:dc:36:1b:67:27:d7:79:c8:36:2f:e6:03:
2f:fc:c7:21:32:21:bf:34:ae:b9:b2:c5:4b:14:58:eb:89:39:
81:a6:3b:7e:cf:43:bb:de:25:97:24:9f:26:06:05:d9:42:71:
8b:92:83:58:13:0e:5a:8d:77:e7:f6:9d:22:8b:f7:be:e6:a6:
50:18:f9:34:4e:c0:7f:cf:49:de:f0:47:cb:d1:56:3e:2e:4b:
a9:5d:6b:85:3e:2b:06:73:81:79:ed:e3:39:86:2e:bd:78:97:
f1:95:5e:f2:c4:8f:c5:8d:e7:0f:18:e4:e6:e1:b7:e2:ff:c0:
cc:1d:c8:11:2b:30:7f:b4:5c:ef:93:43:6d:2f:cf:62:bc:8b:
42:88:be:fa:bb:35:4d:ed:2f:11:ed:05:7b:05:54:b4:29:54:
81:6d:a1:c8:e4:40:38:9b:ff:ac:68:b7:53:c7:a2:af:f8:8a:
5e:45:ec:81:d4:81:6e:72:ba:a8:3f:24:80:c0:19:27:da:5a:
1e:b2:b5:3f:25:e8:62:1e:15:c8:a7:ca:e1:32:b5:5d:99:81:
ce:94:d4:9d:e4:1e:6f:68:dc:49:50:dd:96:ab:e4:b3:b6:75:
9b:63:fc:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:17 2024 by rpki-client on console-ams.rpki-client.org