![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c15f9374-b719-490a-87cd-0fb0a47df1e9/242cb1c03837f2351c9a6351a53530d293c96f28.roa
File: 242cb1c03837f2351c9a6351a53530d293c96f28.roa (raw, json)
Hash identifier: ZLknk5GeKuvmp+kKETTOReX1m7V0Hw2519wt1O4VpOM=
Subject key identifier: B8:33:0E:20:68:21:F8:86:3D:CE:1B:C1:1E:D9:37:3D:E7:22:AA:DA
Certificate issuer: /CN=4ff1f04d5b5082854b1edbfb1e9cf4ec12001ef7
Certificate serial: 073D30
Authority key identifier: 49:0B:5B:D4:3B:34:52:BD:5F:D7:81:15:34:A4:B1:9B:31:DB:18:80
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4ff1f04d5b5082854b1edbfb1e9cf4ec12001ef7.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/c15f9374-b719-490a-87cd-0fb0a47df1e9/242cb1c03837f2351c9a6351a53530d293c96f28.roa
Signing time: Fri 05 Nov 2021 13:00:32 +0000
ROA not before: Fri 05 Nov 2021 03:00:00 +0000
ROA not after: Sun 05 Nov 2023 03:00:00 +0000
asID: 270044
IP address blocks: 179.0.180.0/24 maxlen: 24
179.0.181.0/24 maxlen: 24
179.0.182.0/24 maxlen: 24
179.0.183.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 474416 (0x73d30)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ff1f04d5b5082854b1edbfb1e9cf4ec12001ef7
Validity
Not Before: Nov 5 03:00:00 2021 GMT
Not After : Nov 5 03:00:00 2023 GMT
Subject: CN=242cb1c03837f2351c9a6351a53530d293c96f28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:e3:72:1c:93:ec:a6:a8:c3:e0:df:5f:4d:32:
fe:30:49:05:ed:16:7f:a0:41:80:a2:50:72:05:b2:
cd:84:55:68:8c:81:cb:9d:fb:34:38:b7:b6:9a:b7:
15:71:24:2e:aa:42:a3:f5:98:6a:66:2e:08:a4:57:
f8:87:bc:a7:3c:f3:fb:a2:1b:90:ad:0b:66:be:47:
6f:04:c2:65:16:10:30:28:66:27:a4:10:06:b5:b0:
2d:a0:71:38:fc:ed:5b:d9:67:f0:73:8b:e0:8d:23:
d1:25:e2:85:31:b4:6b:b9:52:66:44:c6:1e:39:70:
4e:b0:4a:33:6b:70:a2:af:1c:df:62:0d:c7:a3:4e:
32:ac:a0:29:ed:e9:44:f1:66:ce:0e:cf:ed:6f:04:
a2:f7:50:92:fa:2f:3c:f6:24:05:3f:2b:a9:d2:d2:
77:97:71:c5:58:37:79:21:f0:f4:cb:40:5d:3d:0c:
be:55:46:cb:d0:69:03:df:a3:95:d1:37:c1:45:8d:
e4:74:f4:e0:42:75:83:42:7d:8c:e8:b5:a0:21:e5:
ed:d1:63:62:21:a2:07:5d:9f:03:e0:0c:7c:58:98:
75:a1:d9:68:fe:14:0a:7f:3f:8f:17:26:7d:f2:8b:
6e:55:4c:ba:2e:ad:af:30:d2:ac:57:22:22:85:09:
8a:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:33:0E:20:68:21:F8:86:3D:CE:1B:C1:1E:D9:37:3D:E7:22:AA:DA
X509v3 Authority Key Identifier:
keyid:49:0B:5B:D4:3B:34:52:BD:5F:D7:81:15:34:A4:B1:9B:31:DB:18:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4ff1f04d5b5082854b1edbfb1e9cf4ec12001ef7.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c15f9374-b719-490a-87cd-0fb0a47df1e9/242cb1c03837f2351c9a6351a53530d293c96f28.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/c15f9374-b719-490a-87cd-0fb0a47df1e9/4ff1f04d5b5082854b1edbfb1e9cf4ec12001ef7.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.0.180.0/22
Signature Algorithm: sha256WithRSAEncryption
75:b6:cd:5a:87:de:e6:c0:7b:e5:8a:7f:25:23:aa:9d:e4:64:
a0:09:d6:47:c3:fd:e9:3a:9f:94:ea:89:b8:e4:d7:f2:62:54:
90:20:73:c2:9e:2a:39:e5:5b:7f:91:65:ac:64:89:25:27:db:
0e:bc:04:8a:f4:c0:d1:ec:4a:5d:f4:cf:56:92:a3:ac:a8:f6:
59:00:9f:73:98:de:c0:83:3b:45:7b:ca:52:bc:46:5c:74:81:
f3:81:71:35:5c:e2:b9:c8:7f:e5:aa:6c:b3:ee:b6:b0:e6:ab:
eb:46:c1:0b:d7:37:c0:f2:ab:67:65:22:ed:be:7f:f5:a4:5c:
79:d3:c6:79:c7:0f:88:ff:8f:23:8c:f5:8f:1d:5f:55:4d:ec:
d7:e2:e3:36:24:64:e6:32:ae:bc:b5:46:81:d5:f2:aa:e0:5a:
d2:f2:1e:bb:aa:1b:fe:4e:4e:1d:1e:41:4a:49:c0:d5:5a:ea:
a0:e7:7e:be:da:1b:5c:01:3e:5d:50:84:9c:b6:6e:ad:36:ef:
1b:ef:c8:99:5e:76:f8:d3:c9:fb:d0:dd:af:61:cd:66:69:4d:
a6:24:bc:06:7c:e7:d7:fd:d4:f1:23:e5:31:10:58:58:6f:e7:
ad:7b:48:b9:45:8d:36:ce:0f:35:71:c4:22:73:ce:94:86:3c:
34:26:fe:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:32 2024 by rpki-client on console-ams.rpki-client.org