![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0cee299d-f822-4f9d-8f19-5687c20027bd/22ab1ca9316f1de8ed8568effa8f33a39659a2e7.roa
File: 22ab1ca9316f1de8ed8568effa8f33a39659a2e7.roa (raw, json)
Hash identifier: QJvZRl9R8aCK7NCKYxi+j2e3GeEuM1ubePWd96RsZw4=
Subject key identifier: A7:F7:41:B3:F2:6D:B3:92:73:75:08:EC:27:3C:02:8F:57:DB:F9:ED
Certificate issuer: /CN=1248882eb1c8e66ab5c23f667362567e6d7db671
Certificate serial: 123DBE
Authority key identifier: 5E:BD:EC:8C:B5:BB:EC:06:16:5E:8C:39:DD:BC:7A:E2:61:91:8A:7F
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1248882eb1c8e66ab5c23f667362567e6d7db671.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0cee299d-f822-4f9d-8f19-5687c20027bd/22ab1ca9316f1de8ed8568effa8f33a39659a2e7.roa
Signing time: Fri 08 Oct 2021 16:22:04 +0000
ROA not before: Fri 08 Oct 2021 03:00:00 +0000
ROA not after: Sun 08 Oct 2023 03:00:00 +0000
asID: 263781
IP address blocks: 138.118.106.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1195454 (0x123dbe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1248882eb1c8e66ab5c23f667362567e6d7db671
Validity
Not Before: Oct 8 03:00:00 2021 GMT
Not After : Oct 8 03:00:00 2023 GMT
Subject: CN=22ab1ca9316f1de8ed8568effa8f33a39659a2e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:17:73:3d:4f:93:35:40:e4:e6:8c:48:97:eb:
3f:52:6c:ec:0f:d3:45:98:15:ee:3f:b7:51:d1:bd:
16:58:1d:97:c7:d3:b2:7c:2e:4d:49:ba:ac:e7:7a:
d0:a6:8e:29:06:07:0d:6b:df:fb:eb:b3:35:11:58:
88:a4:2b:b9:5b:04:21:34:ad:62:0c:3d:14:7d:8b:
55:66:59:24:36:48:23:2f:27:98:c4:51:ae:1b:40:
ce:06:fa:ba:89:30:87:cd:af:25:ad:87:d8:10:5f:
47:5d:8e:ee:51:06:ec:99:cd:81:0e:9b:b8:5a:c8:
07:a9:ea:b1:a6:ab:86:6a:52:b9:86:ea:8c:53:3a:
27:18:49:1b:ba:ba:f3:1e:ce:f9:d2:e4:cf:85:5c:
35:55:ae:56:cf:a2:a9:6c:ae:98:d1:90:6a:00:6e:
78:88:11:d2:0a:25:7d:0b:4d:0b:3e:97:c2:d2:55:
79:fd:c2:a5:14:16:aa:6a:7a:ff:0f:92:7f:ad:94:
89:30:b3:26:71:b6:01:ae:8e:47:dc:79:ee:be:d3:
ef:78:b0:a1:71:72:67:4b:7c:89:d0:9e:49:f4:5c:
5e:5f:eb:bb:5e:c5:46:99:69:b7:76:2f:bd:51:29:
e0:4d:c2:60:9e:f8:d7:70:24:a4:27:56:80:d2:97:
61:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:F7:41:B3:F2:6D:B3:92:73:75:08:EC:27:3C:02:8F:57:DB:F9:ED
X509v3 Authority Key Identifier:
keyid:5E:BD:EC:8C:B5:BB:EC:06:16:5E:8C:39:DD:BC:7A:E2:61:91:8A:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1248882eb1c8e66ab5c23f667362567e6d7db671.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0cee299d-f822-4f9d-8f19-5687c20027bd/22ab1ca9316f1de8ed8568effa8f33a39659a2e7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/0cee299d-f822-4f9d-8f19-5687c20027bd/1248882eb1c8e66ab5c23f667362567e6d7db671.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.118.106.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:6f:ad:f3:87:09:7a:ba:97:15:9c:ca:d5:4d:0b:3c:c3:1a:
76:f2:bb:e2:93:21:ce:30:04:a1:2e:bf:8d:b0:1c:60:6d:d6:
76:a9:a6:4c:81:d0:0e:46:1f:d8:ad:c5:7c:c7:d5:67:66:77:
a6:13:45:87:d2:17:fe:c8:1d:ce:cb:c6:e7:89:bd:7c:4f:83:
12:ae:38:a8:18:04:f6:a4:b8:18:6b:14:13:80:e8:03:d8:42:
1a:ed:45:10:5d:df:3f:98:af:3a:51:72:cd:33:b7:e6:bc:7d:
22:d7:f6:2f:04:09:c4:9c:0b:67:d6:b7:2b:9a:40:06:33:ec:
6f:7f:f3:ad:03:4f:5b:39:28:74:1a:54:f7:6e:65:7c:8d:88:
1d:f6:13:9f:63:0d:d6:9e:51:e1:48:70:9c:dd:5a:b3:36:1b:
6d:8c:87:4f:8b:98:12:ec:02:40:82:90:52:b9:b0:5c:c6:87:
0e:0b:b7:25:bd:c8:e6:20:17:f6:9f:44:4b:3c:20:f0:30:a0:
af:fc:c7:1b:e6:f0:af:0a:22:86:d4:ba:db:a9:d0:89:92:67:
43:f6:54:cb:8f:92:b3:26:55:64:fb:09:00:70:08:d4:c7:b2:
ec:cd:c5:c4:b4:d8:be:5b:fc:08:36:e3:84:3b:a9:bd:8a:e3:
e8:d4:cb:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:59 2024 by rpki-client on console-ams.rpki-client.org