![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b6d42fc0-a9e9-4ce8-94b2-b4daee8d835f/626e2ae30d206cbf4bc2c3907534f128bf5877bb.roa
File: 626e2ae30d206cbf4bc2c3907534f128bf5877bb.roa (raw, json)
Hash identifier: 7UqNfqhyTc0yG91sgM5BkW1AeswA2vF3SGgJm2o8H6s=
Subject key identifier: 57:BB:F1:F0:B1:04:38:51:95:1A:20:F2:CD:E9:C7:6A:38:08:71:67
Certificate issuer: /CN=d8c0648bb06f57e94b76f4d84acc2529c3bd76aa
Certificate serial: 030D
Authority key identifier: 12:32:C4:C4:C1:72:11:35:41:89:0F:65:7F:3B:DA:CC:02:0F:8B:47
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d8c0648bb06f57e94b76f4d84acc2529c3bd76aa.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/b6d42fc0-a9e9-4ce8-94b2-b4daee8d835f/626e2ae30d206cbf4bc2c3907534f128bf5877bb.roa
Signing time: Tue 02 Nov 2021 15:34:10 +0000
ROA not before: Tue 02 Nov 2021 03:00:00 +0000
ROA not after: Thu 02 Nov 2023 03:00:00 +0000
asID: 266738
IP address blocks: 45.229.151.0/24 maxlen: 24
2803:8b20::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 781 (0x30d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8c0648bb06f57e94b76f4d84acc2529c3bd76aa
Validity
Not Before: Nov 2 03:00:00 2021 GMT
Not After : Nov 2 03:00:00 2023 GMT
Subject: CN=626e2ae30d206cbf4bc2c3907534f128bf5877bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:1f:9c:90:47:36:9c:18:e0:1c:cf:2e:a0:42:
74:00:e2:52:8c:56:07:9f:29:ee:96:46:c8:2f:2f:
ac:5f:67:41:fc:0c:4c:52:de:e3:d6:59:da:f2:05:
eb:30:43:0b:ea:2d:74:33:9b:74:cd:66:38:87:08:
e6:eb:b8:ce:e9:8d:9d:35:7c:21:a2:43:be:bb:11:
d2:d8:24:93:83:92:4d:53:45:57:f7:47:34:9b:f4:
89:e5:1d:90:34:cf:b1:10:dc:50:43:ad:9d:bb:ae:
20:3e:68:f6:f5:9e:84:9a:b5:73:9a:89:d7:68:76:
0d:94:9f:9b:47:30:df:81:4c:1c:e2:8a:86:d6:3c:
b2:4f:5c:5e:cd:27:1b:ca:2e:57:fd:d3:b2:24:62:
1c:34:d2:46:5f:39:ba:7c:38:a2:e9:d5:04:3d:90:
93:ad:f6:a4:48:5c:de:34:23:9d:c7:89:51:2f:28:
1d:6b:af:08:e5:e4:ab:57:e4:35:d5:68:33:3c:31:
8e:c8:c8:cd:0f:a9:27:b8:1f:46:16:2b:27:5a:5a:
71:a5:90:09:aa:95:c9:01:82:a9:f2:cb:28:fb:31:
60:6e:59:b6:39:13:e3:05:b3:30:f5:eb:82:ab:63:
4f:cc:f6:40:7b:8f:fa:99:fa:48:68:44:98:54:7f:
f7:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:BB:F1:F0:B1:04:38:51:95:1A:20:F2:CD:E9:C7:6A:38:08:71:67
X509v3 Authority Key Identifier:
keyid:12:32:C4:C4:C1:72:11:35:41:89:0F:65:7F:3B:DA:CC:02:0F:8B:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d8c0648bb06f57e94b76f4d84acc2529c3bd76aa.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b6d42fc0-a9e9-4ce8-94b2-b4daee8d835f/626e2ae30d206cbf4bc2c3907534f128bf5877bb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/b6d42fc0-a9e9-4ce8-94b2-b4daee8d835f/d8c0648bb06f57e94b76f4d84acc2529c3bd76aa.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.229.151.0/24
IPv6:
2803:8b20::/32
Signature Algorithm: sha256WithRSAEncryption
55:b3:af:ce:fb:ac:52:10:b6:da:42:e7:32:9f:b7:79:fd:8a:
48:69:eb:fe:d0:81:8e:8b:96:df:41:ee:05:29:17:84:d4:63:
a9:dd:62:da:9c:53:81:42:ed:59:ec:68:63:92:0b:a1:38:d4:
a4:ad:20:4a:b3:29:21:07:8a:b2:b0:9e:b9:97:48:37:c6:45:
47:21:7a:dd:4a:e2:bd:7f:55:03:eb:6b:f9:fc:aa:db:76:4f:
50:f9:60:fd:a3:fb:77:fc:f2:42:77:dc:44:ab:62:cf:86:84:
f9:73:fa:8c:0d:87:a9:2d:8c:a1:b8:e8:c4:94:49:62:33:06:
45:ca:9c:b8:1d:fc:2f:46:a2:30:1d:a0:8a:37:ea:4f:af:6f:
14:0d:73:a3:e5:20:5b:d2:12:88:56:81:aa:96:92:69:bb:0b:
0d:17:19:6a:c4:13:e7:9a:dd:d7:f7:dd:33:2b:ce:87:90:7f:
bb:9d:ff:39:3d:be:6f:54:7a:e2:1b:74:82:f6:6d:7c:17:8c:
d3:39:0a:90:5f:e1:d1:98:fd:be:f1:15:63:12:2a:f6:8d:39:
96:55:2d:dc:52:13:64:7c:14:5d:e6:c4:aa:53:32:03:3c:84:
a8:87:13:20:57:01:77:7f:af:79:fa:98:93:3f:df:79:f9:ec:
83:12:cb:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:02 2024 by rpki-client on console-fra.rpki-client.org