![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/03ce8bd7ae38bf7b59c1429e1c8532dcd69f7d30.roa
File: 03ce8bd7ae38bf7b59c1429e1c8532dcd69f7d30.roa (raw, json)
Hash identifier: rTCn5M3Kv4x0Gnh+0ca9W9lKL7+XHcVytn1kMRoBx5Q=
Subject key identifier: 3C:8B:46:67:64:31:78:C9:7A:83:47:CD:09:84:43:25:77:4F:C0:B9
Certificate issuer: /CN=b3580078f4f897fcfdbaa0d90c2ec6f460e33222
Certificate serial: 0DD599
Authority key identifier: DF:C6:CA:8D:51:39:32:97:96:38:74:4C:37:8C:B3:A0:43:0E:95:B5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/03ce8bd7ae38bf7b59c1429e1c8532dcd69f7d30.roa
Signing time: Wed 24 Mar 2021 14:34:58 +0000
ROA not before: Wed 24 Mar 2021 14:34:57 +0000
ROA not after: Tue 24 Mar 2026 14:34:57 +0000
asID: 21578
IP address blocks: 190.68.254.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 906649 (0xdd599)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3580078f4f897fcfdbaa0d90c2ec6f460e33222
Validity
Not Before: Mar 24 14:34:57 2021 GMT
Not After : Mar 24 14:34:57 2026 GMT
Subject: CN=03ce8bd7ae38bf7b59c1429e1c8532dcd69f7d30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:84:0f:ca:2e:12:d9:2d:17:37:22:1d:3a:91:
b8:3c:95:db:cb:c2:e1:b3:7c:93:53:ba:ec:84:31:
01:1d:db:fa:95:a3:d5:11:6a:55:27:77:3c:30:3d:
97:e2:8d:73:06:79:f6:6f:30:98:d4:8e:2d:b7:6e:
c3:22:dc:b9:7e:45:23:9d:04:23:02:62:53:5e:da:
8d:4c:01:16:c1:71:44:15:dc:57:66:6b:24:53:60:
6c:d3:04:75:95:cd:2d:97:0f:78:aa:b9:f7:3e:02:
67:1e:f9:45:6b:7a:6d:e7:b8:4a:73:20:aa:d1:69:
a2:19:f5:39:e4:8e:bf:aa:5a:fe:fa:a0:f0:c5:bb:
22:60:cc:f5:58:3b:52:25:f2:fb:90:a3:79:03:0e:
12:15:65:50:3c:97:2d:68:f5:45:ee:f1:52:92:ce:
cd:ee:2d:1e:29:16:48:07:fa:25:e8:a3:f1:a7:5e:
de:77:01:af:d1:08:61:b6:cf:a6:a3:d6:da:0a:2d:
fb:fc:ed:28:89:f3:a1:df:ee:bc:b4:5b:0a:97:4c:
eb:3f:f6:9a:0e:3f:30:12:4a:b7:83:27:51:e0:2d:
5e:ab:99:0c:24:f3:07:cf:34:d3:d6:7a:b1:b0:11:
92:a4:aa:e3:fc:e8:df:4f:7e:51:ee:17:f7:53:b8:
18:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:8B:46:67:64:31:78:C9:7A:83:47:CD:09:84:43:25:77:4F:C0:B9
X509v3 Authority Key Identifier:
keyid:DF:C6:CA:8D:51:39:32:97:96:38:74:4C:37:8C:B3:A0:43:0E:95:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/03ce8bd7ae38bf7b59c1429e1c8532dcd69f7d30.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.68.254.0/24
Signature Algorithm: sha256WithRSAEncryption
05:56:2b:da:e9:47:6b:17:25:c7:c6:50:82:6d:c5:1c:80:ef:
93:c1:30:25:ee:41:b9:f2:0b:b9:2c:76:37:42:f1:4e:79:9e:
a2:fe:17:61:86:2d:a9:53:fe:48:77:dc:a8:e6:46:46:f5:0c:
42:02:b6:d6:a3:83:76:2b:59:1e:a3:72:ba:a5:bf:59:23:6e:
b6:94:2a:42:e6:56:a3:7f:05:79:ae:b4:2c:54:18:34:64:ea:
3d:23:e5:2d:cd:90:19:21:6e:b0:55:55:f5:1d:7a:21:03:4e:
f9:8a:10:f0:54:8f:4a:ae:00:71:63:f3:21:0d:fe:03:13:28:
e1:8a:7a:d6:a5:00:97:6c:18:86:c8:21:8e:db:da:92:e7:67:
ad:21:27:3a:5f:e8:d8:75:73:2e:2c:37:f9:00:48:87:36:da:
2e:07:05:0e:20:ab:9d:dd:2e:78:e2:be:86:ca:7c:7c:03:5f:
c6:10:a7:af:9c:60:f7:67:a4:a0:1e:a9:3c:c4:84:f0:33:d7:
57:fc:f6:d7:b1:a5:84:22:2d:80:94:67:16:4c:de:61:fd:98:
3d:43:77:ac:31:a6:44:d3:04:11:1f:7e:50:5a:af:cf:35:6b:
3d:25:a2:9f:43:d5:92:9e:31:d1:b0:6a:4b:7c:cc:bd:ae:53:
c4:7f:1e:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:32 2024 by rpki-client on console-ams.rpki-client.org