![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a6bb0c94-a239-4f7a-aff2-4a4a352eed49/aeed2be8cabdb74fa70a08fb4a3c701251f20d58.roa
File: aeed2be8cabdb74fa70a08fb4a3c701251f20d58.roa (raw, json)
Hash identifier: YdATDEx7n42u/lF8Ydl7P5ahIFnnct841+4Vltarh8Q=
Subject key identifier: E1:86:08:F3:BF:E6:5F:54:A7:9E:AF:7B:9C:7B:D1:99:E6:41:F1:92
Certificate issuer: /CN=5a0945c72ff878d76abd9c449f2d3e64afb61ba1
Certificate serial: 107AEC
Authority key identifier: BA:F4:C5:18:0C:1F:B9:B3:86:C0:F6:59:C4:AB:77:58:B5:3D:52:9A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5a0945c72ff878d76abd9c449f2d3e64afb61ba1.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/a6bb0c94-a239-4f7a-aff2-4a4a352eed49/aeed2be8cabdb74fa70a08fb4a3c701251f20d58.roa
Signing time: Thu 01 Jul 2021 06:07:50 +0000
ROA not before: Thu 01 Jul 2021 03:00:00 +0000
ROA not after: Wed 01 Jul 2026 03:00:00 +0000
asID: 14754
IP address blocks: 181.209.128.0/17 maxlen: 24
186.151.0.0/18 maxlen: 24
186.151.64.0/20 maxlen: 24
186.151.80.0/21 maxlen: 24
186.151.88.0/22 maxlen: 24
186.151.92.0/23 maxlen: 24
186.151.95.0/24 maxlen: 24
186.151.96.0/19 maxlen: 24
186.151.128.0/17 maxlen: 24
190.56.0.0/17 maxlen: 24
190.56.128.0/17 maxlen: 24
190.143.128.0/18 maxlen: 24
190.143.192.0/19 maxlen: 24
190.143.224.0/20 maxlen: 24
190.148.0.0/18 maxlen: 24
190.148.64.0/20 maxlen: 24
190.148.80.0/22 maxlen: 24
190.148.84.0/24 maxlen: 24
190.148.86.0/23 maxlen: 24
190.148.88.0/21 maxlen: 24
190.148.96.0/19 maxlen: 24
190.148.128.0/17 maxlen: 24
190.149.0.0/17 maxlen: 24
190.149.128.0/22 maxlen: 24
190.149.132.0/23 maxlen: 24
190.149.135.0/24 maxlen: 24
190.149.136.0/21 maxlen: 24
190.149.144.0/21 maxlen: 24
190.149.153.0/24 maxlen: 24
190.149.154.0/23 maxlen: 24
190.149.156.0/22 maxlen: 24
190.149.160.0/19 maxlen: 24
190.149.192.0/18 maxlen: 24
200.6.192.0/19 maxlen: 24
200.6.224.0/19 maxlen: 24
200.119.128.0/20 maxlen: 24
200.119.144.0/22 maxlen: 24
200.119.148.0/23 maxlen: 24
200.119.150.0/24 maxlen: 24
200.119.154.0/23 maxlen: 24
200.119.156.0/22 maxlen: 24
200.119.160.0/20 maxlen: 24
200.119.176.0/21 maxlen: 24
201.216.128.0/19 maxlen: 24
201.216.160.0/19 maxlen: 24
216.230.128.0/19 maxlen: 24
2800:98::/32 maxlen: 48
2800:890::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1080044 (0x107aec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a0945c72ff878d76abd9c449f2d3e64afb61ba1
Validity
Not Before: Jul 1 03:00:00 2021 GMT
Not After : Jul 1 03:00:00 2026 GMT
Subject: CN=aeed2be8cabdb74fa70a08fb4a3c701251f20d58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:88:a9:22:d0:de:5d:5e:db:0f:d6:42:30:f1:
72:82:2b:d8:55:5e:05:fb:53:f9:1f:fa:2b:c1:bb:
65:ad:35:3a:c1:8c:81:57:65:5f:5b:ba:d4:5f:a6:
7d:68:eb:8e:a1:5c:b7:ad:33:c1:ee:31:a5:9d:dc:
d5:69:a5:d8:19:20:d9:73:8d:13:72:06:1d:68:da:
df:0a:86:29:e2:70:0a:f7:4a:06:bf:0c:f8:0d:ca:
93:5e:60:5c:57:1d:03:5d:b4:e2:80:5c:d2:28:7f:
0c:05:07:b4:30:14:5b:54:63:2d:3e:e1:ee:4e:3b:
93:48:b8:fc:95:0f:90:a1:c4:eb:b4:f4:38:85:71:
b0:0a:b8:bd:e0:86:d7:55:fe:93:b6:d6:f1:73:a0:
d5:f1:5a:8c:a9:c0:5b:81:ae:e1:51:c5:14:6f:16:
56:71:47:a7:7f:d2:78:65:13:18:73:fe:67:69:4e:
6c:6c:d0:5d:0f:14:0f:ca:ca:b4:b6:e5:0c:fb:8e:
7e:1c:d4:13:a5:59:a2:1d:2b:e2:3c:0a:b8:dc:66:
3a:eb:4d:66:65:0c:be:ba:7d:75:9b:22:f2:d9:d2:
d2:62:06:67:3d:7f:be:ce:ca:ce:39:67:3e:bb:b9:
e2:b7:ce:a8:dd:fd:8f:b3:5f:db:46:86:af:f6:c4:
cd:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:86:08:F3:BF:E6:5F:54:A7:9E:AF:7B:9C:7B:D1:99:E6:41:F1:92
X509v3 Authority Key Identifier:
keyid:BA:F4:C5:18:0C:1F:B9:B3:86:C0:F6:59:C4:AB:77:58:B5:3D:52:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5a0945c72ff878d76abd9c449f2d3e64afb61ba1.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a6bb0c94-a239-4f7a-aff2-4a4a352eed49/aeed2be8cabdb74fa70a08fb4a3c701251f20d58.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/a6bb0c94-a239-4f7a-aff2-4a4a352eed49/5a0945c72ff878d76abd9c449f2d3e64afb61ba1.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.209.128.0/17
186.151.0.0-186.151.93.255
186.151.95.0-186.151.255.255
190.56.0.0/16
190.143.128.0-190.143.239.255
190.148.0.0-190.148.84.255
190.148.86.0-190.149.133.255
190.149.135.0-190.149.151.255
190.149.153.0-190.149.255.255
200.6.192.0/18
200.119.128.0-200.119.150.255
200.119.154.0-200.119.183.255
201.216.128.0/18
216.230.128.0/19
IPv6:
2800:98::/32
2800:890::/32
Signature Algorithm: sha256WithRSAEncryption
81:62:28:9f:34:89:11:1c:14:11:9f:17:05:8a:2c:66:da:81:
86:ec:52:58:43:63:24:95:47:44:c5:c9:f0:ac:c0:d3:03:2c:
76:38:51:8c:30:23:39:76:49:9f:b5:07:b3:5d:ca:15:77:12:
53:bd:5d:fd:16:88:9e:ba:1c:00:40:3d:3c:ce:24:4e:40:5f:
57:9a:8e:57:da:a7:8d:56:41:41:72:09:b0:eb:e0:56:6e:dd:
3e:9c:75:4f:b9:bd:7c:de:9b:ef:57:c8:8c:9b:4e:9c:62:77:
a9:2c:cf:d7:ee:a0:96:90:5a:8c:81:00:f1:1e:10:b3:87:28:
23:af:ef:d3:bc:e1:62:1a:61:14:45:4d:07:aa:84:8f:fa:de:
68:80:d4:0d:c9:1d:66:db:4b:f4:ce:c5:0d:d0:b9:31:d1:f8:
8a:0f:39:3e:59:f4:b1:63:f0:f2:9e:9a:13:82:d0:19:e9:2c:
7d:b2:d8:57:e0:51:c7:93:21:3f:d3:7b:08:c7:f6:90:cf:f2:
e6:0b:cf:b6:7f:70:05:98:69:42:de:92:49:04:7a:ea:d0:00:
89:f7:90:b9:8a:f0:01:71:88:2b:06:d4:94:43:e7:e2:e0:91:
1b:05:a2:72:82:13:47:7f:19:ef:a0:06:85:18:df:af:db:33:
d5:98:26:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:21 2024 by rpki-client on console-ams.rpki-client.org