![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/599d9233-5922-446d-91c2-27acc51ffa1c/5ca80b0a3cb68b2385fe4bd29115d4a160fb8a25.roa
File: 5ca80b0a3cb68b2385fe4bd29115d4a160fb8a25.roa (raw, json)
Hash identifier: 6+ek8ZgOHv1zI/iEtgJR5y8df2VqgUBZx7jTAS74wG4=
Subject key identifier: 49:DC:99:45:8F:48:EA:00:80:75:AF:56:C2:12:38:54:91:AF:D0:3E
Certificate issuer: /CN=b12012502b7ca3b0da125f250315dfe19bfb18d5
Certificate serial: 21CCB6
Authority key identifier: A0:AA:33:C0:E5:EA:9C:31:8A:E1:96:B6:D8:72:02:35:9C:67:12:9A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b12012502b7ca3b0da125f250315dfe19bfb18d5.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/599d9233-5922-446d-91c2-27acc51ffa1c/5ca80b0a3cb68b2385fe4bd29115d4a160fb8a25.roa
Signing time: Wed 14 Jun 2023 20:48:31 +0000
ROA not before: Tue 13 Jun 2023 20:48:29 +0000
ROA not after: Sat 14 Jun 2025 20:48:29 +0000
asID: 26617
IP address blocks: 181.189.132.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2215094 (0x21ccb6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b12012502b7ca3b0da125f250315dfe19bfb18d5
Validity
Not Before: Jun 13 20:48:29 2023 GMT
Not After : Jun 14 20:48:29 2025 GMT
Subject: CN=5ca80b0a3cb68b2385fe4bd29115d4a160fb8a25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:8d:f9:64:29:11:ca:5a:63:3e:89:70:19:08:
c8:49:97:07:2d:62:a8:da:a4:e7:e5:4c:b9:51:a9:
d8:31:dc:4b:9a:13:d7:8b:b3:f6:68:37:d7:ae:ec:
61:17:f7:1b:73:47:d9:23:f8:73:f7:e7:2d:c0:80:
d7:59:21:e8:26:94:94:cc:68:5c:78:8f:51:67:2e:
b8:c8:72:1b:5c:13:96:5d:20:a6:c1:a0:a0:7a:b7:
5e:65:62:74:23:4f:21:6e:80:54:2d:ef:3b:8b:5b:
20:3e:a8:77:9d:f1:5c:ab:43:ef:c3:94:22:62:de:
ff:81:ba:3d:d3:50:9b:31:23:00:b5:a3:ae:fb:84:
5d:17:a0:27:f8:97:35:28:d3:9e:e1:a7:12:2f:a5:
cd:28:f3:a6:e2:c6:e8:13:ea:42:09:56:db:1f:46:
23:89:43:a6:9d:cb:be:4d:2c:f2:53:4d:e3:4f:7f:
1a:76:08:50:50:68:4d:bc:f5:11:4f:c0:58:90:33:
4d:1a:3d:eb:b0:91:2a:fa:ed:33:f5:f2:16:e7:9f:
b3:75:72:62:3c:50:0a:7a:47:03:e0:0a:aa:da:66:
a3:37:45:78:7b:62:47:28:c3:ad:4a:2a:11:27:79:
7a:c7:9e:07:16:45:39:2f:98:c8:ee:2b:37:f1:85:
b6:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:DC:99:45:8F:48:EA:00:80:75:AF:56:C2:12:38:54:91:AF:D0:3E
X509v3 Authority Key Identifier:
keyid:A0:AA:33:C0:E5:EA:9C:31:8A:E1:96:B6:D8:72:02:35:9C:67:12:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b12012502b7ca3b0da125f250315dfe19bfb18d5.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/599d9233-5922-446d-91c2-27acc51ffa1c/5ca80b0a3cb68b2385fe4bd29115d4a160fb8a25.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/599d9233-5922-446d-91c2-27acc51ffa1c/b12012502b7ca3b0da125f250315dfe19bfb18d5.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.189.132.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:c2:d3:33:95:13:57:45:52:5d:29:b9:dc:8d:d2:8d:91:1d:
83:79:f9:42:2d:3d:a1:f4:4c:96:37:7c:2c:df:98:43:cd:7c:
d6:ed:77:86:68:ea:00:50:d6:8a:d6:b7:3a:64:cf:6f:91:e1:
a1:48:e6:b1:a5:d6:8d:2c:c1:52:3e:29:52:be:41:d7:7b:25:
81:9d:15:50:00:b0:5c:c2:1a:a6:e0:cb:ef:7f:36:d9:70:6b:
32:eb:fe:c1:e4:ef:25:72:dc:a5:5e:f2:6b:7a:49:73:26:d0:
b7:a2:97:55:0a:31:a1:7b:35:a3:3b:18:1e:a0:24:c8:8b:47:
06:2e:07:e8:86:d0:47:5a:54:b1:d9:d1:b5:07:18:f0:ae:84:
47:f1:30:35:83:95:75:41:88:77:19:bc:da:e9:52:6f:a5:e3:
8e:0e:8f:00:8c:57:48:3c:08:73:c7:0b:db:26:33:85:24:92:
30:5e:8d:b7:82:56:fe:ab:9f:5a:d3:4f:3d:b5:f4:b7:54:8e:
ae:17:21:05:e3:0f:b6:3b:fb:1a:33:17:d4:7c:4e:f5:1d:1f:
1e:fb:86:19:29:44:69:cf:d8:5c:f3:c6:90:68:38:5c:90:a8:
ff:e4:25:42:fb:6e:7c:55:35:2d:48:1a:b0:02:3b:a1:16:52:
fb:6a:31:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:46 2024 by rpki-client on console-ams.rpki-client.org