![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/b4dd8590f6bb392826e7295493f6d60d2dd005ca.roa
File: b4dd8590f6bb392826e7295493f6d60d2dd005ca.roa (raw, json)
Hash identifier: ye+4r/psZXIOc6kwJNfbiAvPKva+M+JsaaZBcBK6fus=
Subject key identifier: 4E:DC:90:5C:7A:6B:CD:F3:9C:7E:1F:C8:12:5B:16:E4:BB:39:E7:19
Certificate issuer: /CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Certificate serial: 08F37D
Authority key identifier: 84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/b4dd8590f6bb392826e7295493f6d60d2dd005ca.roa
Signing time: Tue 09 Aug 2022 00:08:18 +0000
ROA not before: Tue 09 Aug 2022 03:00:00 +0000
ROA not after: Wed 09 Aug 2023 03:00:00 +0000
asID: 3970
IP address blocks: 201.219.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 586621 (0x8f37d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Validity
Not Before: Aug 9 03:00:00 2022 GMT
Not After : Aug 9 03:00:00 2023 GMT
Subject: CN=b4dd8590f6bb392826e7295493f6d60d2dd005ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:fa:dc:04:ac:d0:9f:3e:b0:e5:55:5d:41:26:
f9:7e:aa:cb:b9:41:8d:bf:d8:04:cb:12:1f:79:47:
f7:36:a7:66:39:bb:11:42:d7:26:93:50:cb:6f:90:
90:78:f1:02:d0:56:f8:f2:b0:9b:a7:68:cc:37:fe:
03:eb:73:75:dc:62:77:35:d2:2b:e7:e8:16:95:24:
29:a4:98:a1:35:df:d1:d9:05:98:ec:d1:37:17:6d:
cc:79:29:c2:60:bf:48:6f:13:d2:6a:1a:93:08:40:
b9:00:e7:7f:93:53:5f:94:7f:1a:e2:2f:83:2c:d1:
68:88:0d:0c:44:75:89:35:b2:66:f9:d0:45:49:a5:
4c:d6:a3:78:3f:d7:14:60:9c:19:af:9e:7f:55:03:
9b:38:37:cd:28:67:9f:1e:55:0f:24:54:b0:15:31:
63:3d:1d:20:79:ad:14:16:e2:09:43:97:3a:b8:b4:
cc:54:19:ee:9d:cb:f9:de:98:b2:b8:59:0b:5b:35:
38:66:0a:f2:57:e1:ea:42:a7:38:87:57:63:e4:28:
a3:cb:89:cf:85:2f:11:66:72:58:ab:30:59:84:fa:
0f:9b:06:96:a6:fc:0c:e5:58:cd:ff:2b:f8:c7:b1:
c0:90:13:3d:b7:25:83:fd:62:d3:d0:f2:5a:20:70:
c0:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:DC:90:5C:7A:6B:CD:F3:9C:7E:1F:C8:12:5B:16:E4:BB:39:E7:19
X509v3 Authority Key Identifier:
keyid:84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/b4dd8590f6bb392826e7295493f6d60d2dd005ca.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.219.253.0/24
Signature Algorithm: sha256WithRSAEncryption
15:2b:2e:37:1e:7c:c5:76:68:82:80:b7:1a:36:cd:50:a0:89:
d8:f6:79:0f:bb:ac:29:fb:61:a7:84:55:c6:78:1b:e2:64:3b:
7e:94:0a:94:ec:9e:df:26:d9:f1:c8:64:c1:b1:81:19:69:2d:
98:a7:6c:46:b7:ad:e3:fd:4e:9c:24:90:03:49:f0:6b:41:13:
af:2d:bf:b8:96:e8:b2:76:59:96:dc:1c:ce:56:8f:cd:f9:77:
30:02:ce:e5:1f:aa:17:88:32:a9:3f:1f:a9:ab:e0:17:bd:fe:
a4:e3:eb:fc:e6:ae:b2:b7:ac:48:0a:fe:13:e3:99:59:3a:94:
5a:14:d5:a8:5a:63:f9:7c:57:6f:1c:09:84:78:cf:06:f7:0a:
b6:7b:8d:94:6a:ab:72:28:98:79:a8:8a:39:c3:5b:a8:04:b0:
d2:62:da:0b:d7:a3:ab:ca:4f:41:5e:5b:0b:de:a7:e9:bc:33:
b0:31:dc:6d:bf:2f:50:a2:02:e8:a7:2f:4b:47:72:33:9e:92:
b4:ab:9d:a1:19:0c:8a:1b:2e:a1:03:b4:19:ba:93:4c:78:94:
d4:5d:38:7f:1b:29:45:b3:a6:30:2c:b7:de:9e:43:85:9f:d4:
67:00:31:b6:ca:66:19:58:b5:7c:86:1d:2b:28:22:9c:27:f2:
54:86:ce:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:58 2024 by rpki-client on console-fra.rpki-client.org