![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/fad740b9-e90e-46d5-aade-a05c983ba195/0b53bc3404be7be5235873c7ab15c36125e84e99.roa
File: 0b53bc3404be7be5235873c7ab15c36125e84e99.roa (raw, json)
Hash identifier: G5NWHyorZAlZlQDmzKphNTRajzC2P4Z+lpbCzvJbGFA=
Subject key identifier: 5E:A8:A9:E3:76:79:7B:9D:9E:CB:3D:77:08:24:FA:4E:48:5D:9B:6D
Certificate issuer: /CN=2dc2f56aba4f2885de86b98a40999ce82d8d0cef
Certificate serial: 01CD36
Authority key identifier: 09:F1:6E:C4:91:A3:4A:BB:1B:1D:2F:74:BD:23:8C:18:98:D8:2A:1B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2dc2f56aba4f2885de86b98a40999ce82d8d0cef.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/fad740b9-e90e-46d5-aade-a05c983ba195/0b53bc3404be7be5235873c7ab15c36125e84e99.roa
Signing time: Mon 29 Jan 2024 17:13:03 +0000
ROA not before: Mon 29 Jan 2024 17:13:03 +0000
ROA not after: Thu 29 Jan 2026 17:13:03 +0000
asID: 273131
IP address blocks: 2803:e450::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118070 (0x1cd36)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dc2f56aba4f2885de86b98a40999ce82d8d0cef
Validity
Not Before: Jan 29 17:13:03 2024 GMT
Not After : Jan 29 17:13:03 2026 GMT
Subject: CN=0b53bc3404be7be5235873c7ab15c36125e84e99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:43:b9:91:5f:e8:4b:4c:63:46:66:1d:e6:c2:
48:90:e0:e3:60:fa:a8:4f:9d:dd:b2:9e:89:9e:b0:
ea:6d:b8:1c:3a:de:ad:1b:69:0e:a7:b4:1f:d1:24:
5a:66:56:00:c5:30:1c:c3:9a:48:85:56:3f:ff:49:
79:6a:ea:75:31:78:e9:ef:73:33:92:c0:16:d2:34:
6e:0d:5b:8d:3e:db:f0:0d:37:15:2f:09:7a:51:8c:
9f:bf:69:be:07:4e:3a:b2:f4:bf:b7:cd:ac:d2:32:
d0:40:69:27:97:b1:a9:b7:ee:79:23:8d:69:bc:6b:
0d:b0:70:9d:24:9a:96:7d:02:79:4e:4c:f5:3a:cd:
83:91:bc:96:81:26:80:06:6b:f7:5a:5c:2e:64:b8:
29:2e:ac:17:4f:0d:2d:c4:b2:02:d3:be:9d:52:20:
b8:62:6d:23:f0:2c:ef:ff:bf:47:e0:e1:88:21:d7:
ae:a2:d2:07:99:6c:52:2f:d9:bf:f0:7c:a4:5d:63:
00:91:45:37:37:66:63:c5:82:74:dc:1a:a7:ac:fb:
ec:df:bf:ba:6b:46:c6:48:14:58:91:98:ae:d7:a2:
25:a7:cb:8a:72:4e:44:03:75:75:6d:6c:20:22:b1:
d8:c6:9c:0f:e2:01:78:19:16:1d:1e:e8:f6:d4:bb:
bf:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:A8:A9:E3:76:79:7B:9D:9E:CB:3D:77:08:24:FA:4E:48:5D:9B:6D
X509v3 Authority Key Identifier:
keyid:09:F1:6E:C4:91:A3:4A:BB:1B:1D:2F:74:BD:23:8C:18:98:D8:2A:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2dc2f56aba4f2885de86b98a40999ce82d8d0cef.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/fad740b9-e90e-46d5-aade-a05c983ba195/0b53bc3404be7be5235873c7ab15c36125e84e99.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/fad740b9-e90e-46d5-aade-a05c983ba195/2dc2f56aba4f2885de86b98a40999ce82d8d0cef.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:e450::/32
Signature Algorithm: sha256WithRSAEncryption
73:f2:43:38:e7:88:4a:31:c1:fe:7d:d8:f6:3c:24:39:c4:18:
7c:e2:6d:f7:d5:13:e0:50:29:7e:6c:8b:dd:fc:bc:00:4e:98:
11:1a:93:14:99:4d:87:b7:35:1e:87:ca:a1:b8:f4:ab:f9:92:
6d:c4:f2:55:8d:49:6c:dc:8a:67:b3:31:9e:1b:26:d0:3b:1f:
14:e8:5a:44:71:26:91:59:e6:01:14:02:52:36:f9:1d:c0:01:
a8:f4:2c:22:a2:46:c7:1b:a6:a9:60:96:42:a1:72:be:1f:ac:
f8:4e:f0:f7:3c:5a:eb:68:12:d8:a6:71:8c:b5:3e:ad:32:82:
0e:2d:3a:1e:a7:ff:53:df:9e:54:72:2e:3d:42:5f:d3:5d:64:
0f:9e:fb:70:23:06:1c:66:33:95:db:83:c2:a6:3b:e8:9d:55:
ac:c8:ae:be:df:4e:09:eb:46:9a:d1:32:74:5e:91:47:ae:2b:
9b:20:7a:d1:3e:52:8f:c2:70:4b:8b:b9:95:4b:90:ff:96:16:
a1:be:f8:1b:a6:e5:60:bb:52:47:62:d4:56:39:12:33:56:14:
a2:ec:2b:a4:04:49:96:46:d1:56:1c:7d:73:da:6f:65:b3:47:
e5:d4:e7:b5:4f:c2:60:ea:a5:a3:33:ce:de:19:79:4c:a9:09:
91:e7:ea:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:13:36 2025 by rpki-client