![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e7f5cd14-add7-4b70-9c3a-4371633f55da/36f04478a83bf2078f3b6d645dfd172fc7084755.roa
File: 36f04478a83bf2078f3b6d645dfd172fc7084755.roa (raw, json)
Hash identifier: v8yP31PzTs+OfeJXxzCASodejx97K78/CckYW9u5vpI=
Subject key identifier: 4A:29:28:D9:DF:EA:C1:58:E4:73:AC:AE:29:16:AA:E2:5B:81:C3:89
Certificate issuer: /CN=4213629bff1656b039692adab742735c1703764c
Certificate serial: 28D7DA
Authority key identifier: 14:35:AB:5E:E9:34:F0:72:C1:F0:92:5A:5A:53:DC:6F:8E:75:A4:DD
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4213629bff1656b039692adab742735c1703764c.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/e7f5cd14-add7-4b70-9c3a-4371633f55da/36f04478a83bf2078f3b6d645dfd172fc7084755.roa
Signing time: Mon 19 Feb 2024 17:00:42 +0000
ROA not before: Mon 19 Feb 2024 17:00:37 +0000
ROA not after: Mon 19 Feb 2029 17:00:37 +0000
asID: 64124
IP address blocks: 200.25.80.0/24 maxlen: 24
2800:1e0:2430::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2676698 (0x28d7da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4213629bff1656b039692adab742735c1703764c
Validity
Not Before: Feb 19 17:00:37 2024 GMT
Not After : Feb 19 17:00:37 2029 GMT
Subject: CN=36f04478a83bf2078f3b6d645dfd172fc7084755
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:be:ba:e8:80:1d:67:e9:c9:57:c1:48:8b:52:
3f:df:49:7b:c2:06:a0:ba:99:15:b3:fc:b5:a7:a8:
31:e9:34:07:30:d1:d8:63:52:05:81:35:4b:6b:d6:
01:ad:e7:ab:95:af:13:77:19:4f:45:97:7c:c4:47:
ba:3d:53:16:26:23:0b:f0:7c:f0:e0:93:0c:a5:05:
e0:33:c2:98:ed:5f:9e:7e:da:a8:c2:75:17:36:a6:
4e:c1:3b:07:f2:e9:e4:47:a9:25:29:24:67:47:52:
38:1d:5d:f5:71:0c:89:66:f4:e6:11:5d:c0:b7:ef:
91:b1:82:05:b6:77:d6:b8:6e:ff:c9:9b:42:12:34:
5e:fe:80:8d:4f:87:08:9a:0e:84:96:4f:96:37:21:
8c:21:3b:94:26:c6:70:97:11:fb:6b:f0:c3:59:00:
60:0a:dd:b3:2f:d2:e1:25:14:90:e4:13:0f:9b:79:
29:58:9a:d4:bd:af:6e:44:7e:0b:52:11:cc:de:3c:
54:a0:b9:e6:c2:77:86:64:57:b0:1d:83:70:8d:1c:
07:31:bd:94:04:9f:54:71:8f:36:8c:fa:6b:2d:f1:
e8:df:ae:26:26:40:a0:d0:b3:9b:43:d2:86:4b:ee:
be:ba:a9:dd:54:e0:a3:3b:a9:9e:13:7e:d9:06:fb:
e4:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:29:28:D9:DF:EA:C1:58:E4:73:AC:AE:29:16:AA:E2:5B:81:C3:89
X509v3 Authority Key Identifier:
keyid:14:35:AB:5E:E9:34:F0:72:C1:F0:92:5A:5A:53:DC:6F:8E:75:A4:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4213629bff1656b039692adab742735c1703764c.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e7f5cd14-add7-4b70-9c3a-4371633f55da/36f04478a83bf2078f3b6d645dfd172fc7084755.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/e7f5cd14-add7-4b70-9c3a-4371633f55da/4213629bff1656b039692adab742735c1703764c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.25.80.0/24
IPv6:
2800:1e0:2430::/44
Signature Algorithm: sha256WithRSAEncryption
6e:52:4c:41:6c:c6:7b:c1:69:1b:77:f9:0d:83:b2:bd:ec:fd:
8b:01:86:c8:9c:11:8e:38:a2:f5:81:89:6e:ae:4c:77:d6:a8:
f6:ff:da:c8:bc:25:75:19:ef:92:bd:1a:25:54:47:63:ae:ca:
e1:89:3b:8c:47:11:97:24:4c:72:05:1a:bc:c4:31:0e:89:48:
28:87:49:2c:f5:c3:46:78:4b:d8:47:c1:75:a2:15:ba:94:6e:
e3:e0:b0:64:7b:88:50:dc:7b:12:03:d1:22:95:f2:67:25:61:
e0:b6:7f:18:bd:11:4d:70:c6:ca:da:23:b6:4d:2f:0d:d7:73:
f3:1b:5e:33:34:77:f3:e7:6a:6d:9a:f5:89:0e:c9:24:ee:05:
60:1e:57:2a:1b:43:ac:6a:b6:e8:f6:37:e6:bf:78:27:1e:c8:
e8:29:27:c2:2e:e9:8f:4c:9a:6a:4d:cd:0d:82:bc:36:12:20:
4c:39:c0:db:f1:e3:50:eb:f0:1a:9d:b8:99:3c:91:f1:3e:29:
4e:d3:87:a6:ed:ca:d1:6d:7b:43:00:14:68:f9:09:2e:de:3b:
ef:85:f7:23:2b:1c:50:40:85:3f:b8:c3:d1:7a:52:74:c9:7a:
02:f2:2b:a0:0b:1f:60:61:31:48:24:78:f2:09:97:6a:ea:c6:
e8:2e:57:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:10 2024 by rpki-client on console-fra.rpki-client.org