![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/9db4b49dd8983393c717294a7345376f83cec039.roa
File: 9db4b49dd8983393c717294a7345376f83cec039.roa (raw, json)
Hash identifier: sB9OvlXyG/hQbYeBG9cGC4AI4ZfgS+x2zOHv13Mfx2c=
Subject key identifier: 97:9B:DA:A7:01:97:07:98:10:42:E1:6C:FF:79:FF:01:B9:46:45:95
Certificate issuer: /CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Certificate serial: 06461B
Authority key identifier: 84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/9db4b49dd8983393c717294a7345376f83cec039.roa
Signing time: Thu 09 Jun 2022 01:43:04 +0000
ROA not before: Thu 09 Jun 2022 03:00:00 +0000
ROA not after: Fri 09 Jun 2023 03:00:00 +0000
asID: 3970
IP address blocks: 201.219.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 411163 (0x6461b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Validity
Not Before: Jun 9 03:00:00 2022 GMT
Not After : Jun 9 03:00:00 2023 GMT
Subject: CN=9db4b49dd8983393c717294a7345376f83cec039
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:91:90:cf:86:b8:57:9b:50:e1:d5:2e:b9:89:
7e:15:98:4f:fb:2d:19:21:d6:80:d7:7d:25:95:df:
e5:90:20:42:19:8c:88:f2:b8:72:08:ef:60:9e:9a:
27:d6:e7:99:38:0d:27:19:fe:0f:f5:e1:bf:98:59:
5b:da:2c:0d:74:bd:4d:ef:8c:fa:57:a3:a0:1b:36:
55:16:57:a9:cb:30:ae:09:3f:6c:0e:db:e6:47:79:
be:aa:cf:92:ca:58:2b:c4:56:15:ec:86:2f:8f:83:
a9:6d:00:c3:3e:81:2f:97:bd:72:bd:f4:d9:fc:fa:
37:83:05:2b:e4:7c:56:e4:ac:99:8e:d7:1c:69:51:
d7:a2:d5:71:cc:c0:39:ff:80:7e:1a:c0:8b:56:48:
5a:c2:01:65:49:b2:f9:e8:84:76:1d:c1:97:03:eb:
9e:ee:2a:75:81:a8:e7:12:7b:83:38:bf:16:07:7b:
f3:c5:78:c2:67:d7:7a:5e:28:b9:92:6d:c9:4c:60:
7f:62:9b:71:41:0f:9f:09:b1:a6:73:a7:f6:75:11:
46:40:3b:01:01:74:ea:c4:0d:b4:56:2a:be:42:23:
b5:ee:53:2d:e5:9d:06:2d:b3:dd:76:35:b6:77:8c:
51:53:9f:82:3d:d6:6f:73:b8:4e:46:66:38:44:8b:
f5:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:9B:DA:A7:01:97:07:98:10:42:E1:6C:FF:79:FF:01:B9:46:45:95
X509v3 Authority Key Identifier:
keyid:84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/9db4b49dd8983393c717294a7345376f83cec039.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.219.253.0/24
Signature Algorithm: sha256WithRSAEncryption
55:8a:ce:53:62:98:db:e5:8a:c1:04:f5:ce:6f:99:d8:8a:b8:
8e:91:c4:cc:1a:05:bd:ee:db:70:55:48:e6:36:28:60:d0:ff:
2c:40:1a:dd:04:7f:39:cf:68:08:43:c1:ba:8f:f3:f3:cc:8f:
73:8a:eb:55:b7:6d:7e:ea:28:a1:8d:69:42:41:f0:87:f4:5f:
a7:df:a2:60:bd:eb:a5:67:8c:cf:31:b2:20:44:d4:46:66:d1:
0e:4e:de:e6:5e:8a:1c:55:7b:4f:2e:ac:47:a0:3a:83:0f:2b:
f4:53:99:20:95:bc:54:9b:86:52:fa:2d:32:48:67:74:ea:61:
a5:83:57:45:d4:5f:39:05:7c:44:e0:e7:2e:ea:a1:fd:09:16:
de:ef:aa:d6:00:74:e5:d8:9d:e5:bd:45:27:b2:c1:e0:bb:67:
6f:fc:2f:8a:ed:fb:8a:e6:05:af:35:82:b6:3a:fb:41:46:91:
e7:a7:72:6f:93:a0:29:c2:08:0c:ba:e0:f3:d1:28:10:23:f3:
01:55:d2:a6:8d:25:7a:70:e4:39:cd:5f:9d:a6:df:f6:ab:f2:
06:80:df:c8:6d:81:b0:03:b4:ad:cf:5e:f2:11:33:75:29:03:
cb:b7:b1:1d:97:b8:ce:22:d9:42:76:1d:28:34:af:36:74:78:
04:b4:ed:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:17 2024 by rpki-client on console-ams.rpki-client.org