![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/897dca2d-c59c-42f3-b81b-2d88c0b0b0d1/5d88260110c87d6976f57cdc186fb59416941ebd.roa
File: 5d88260110c87d6976f57cdc186fb59416941ebd.roa (raw, json)
Hash identifier: Cd/fBlTFrxVE7rXWBHkTQllLNssSDJMJ9jrRyxvkvKQ=
Subject key identifier: C3:F7:4F:D3:E7:2B:BC:CD:73:70:AF:75:BB:3A:03:09:49:D9:DD:3A
Certificate issuer: /CN=978e7d88424415725f3aaf2277c4a6e9a5313d10
Certificate serial: 209A2A
Authority key identifier: BB:67:34:7A:28:A3:06:DC:6A:46:9A:2A:1B:BC:80:5B:A8:94:90:BC
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/978e7d88424415725f3aaf2277c4a6e9a5313d10.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/897dca2d-c59c-42f3-b81b-2d88c0b0b0d1/5d88260110c87d6976f57cdc186fb59416941ebd.roa
Signing time: Wed 19 Apr 2023 15:20:07 +0000
ROA not before: Tue 18 Apr 2023 15:20:07 +0000
ROA not after: Sat 19 Apr 2025 15:20:07 +0000
asID: 263170
IP address blocks: 181.114.56.0/22 maxlen: 24
2803:2080::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2136618 (0x209a2a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=978e7d88424415725f3aaf2277c4a6e9a5313d10
Validity
Not Before: Apr 18 15:20:07 2023 GMT
Not After : Apr 19 15:20:07 2025 GMT
Subject: CN=5d88260110c87d6976f57cdc186fb59416941ebd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:ed:cf:56:40:4c:af:b0:8e:62:46:ae:b7:95:
61:ad:20:c3:ef:ba:0b:7a:cb:7f:ff:97:f6:a0:13:
0a:5c:55:24:8c:40:e2:f3:47:87:04:f4:6a:82:5f:
20:0f:ce:2a:c3:54:91:9f:46:2e:74:ec:27:27:ab:
c2:7d:25:39:ce:fa:98:11:a7:3e:95:e7:54:f4:3f:
3a:cb:63:8a:d8:95:2e:d0:62:79:2f:50:d4:9a:e5:
66:0d:bd:b1:26:39:6a:f5:b3:76:d6:e5:f0:e6:1b:
ab:45:8d:d7:ae:87:e2:1a:40:00:05:90:f7:58:5a:
e3:bd:cc:cc:ab:ba:97:66:bc:8a:32:cb:72:8d:14:
09:c6:3a:d3:26:be:cf:a4:9c:5b:27:4c:9a:36:ca:
c3:aa:26:c2:db:3a:8d:10:64:23:39:ae:6e:46:6e:
cb:62:e6:66:bd:a0:ed:a7:52:40:e5:0b:15:b7:c4:
a2:6c:da:d3:c4:51:32:5c:4c:27:88:cb:8b:21:b6:
7d:3c:2d:9e:c8:03:2f:f8:2e:19:87:22:a3:02:48:
cc:e5:f5:83:ef:27:6d:b1:39:3e:a3:99:e9:f4:f7:
34:ec:16:d4:92:08:de:c2:73:db:4f:fc:dc:ec:49:
92:89:bb:5b:0e:3b:02:d8:6d:23:d2:5f:a6:69:6f:
ea:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:F7:4F:D3:E7:2B:BC:CD:73:70:AF:75:BB:3A:03:09:49:D9:DD:3A
X509v3 Authority Key Identifier:
keyid:BB:67:34:7A:28:A3:06:DC:6A:46:9A:2A:1B:BC:80:5B:A8:94:90:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/978e7d88424415725f3aaf2277c4a6e9a5313d10.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/897dca2d-c59c-42f3-b81b-2d88c0b0b0d1/5d88260110c87d6976f57cdc186fb59416941ebd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/897dca2d-c59c-42f3-b81b-2d88c0b0b0d1/978e7d88424415725f3aaf2277c4a6e9a5313d10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.114.56.0/22
IPv6:
2803:2080::/32
Signature Algorithm: sha256WithRSAEncryption
25:31:e0:9d:a5:f0:91:fe:31:66:e1:00:f9:c7:b9:93:1f:35:
be:bf:67:9c:67:55:46:4e:f4:0d:4c:86:d0:b0:da:b8:02:cf:
c0:5d:c6:a0:b2:b1:a3:82:ae:48:ec:36:83:e9:a9:32:61:31:
e1:8f:18:dc:c7:fa:fe:e9:a4:af:52:02:01:b1:70:ec:35:02:
18:0f:eb:74:17:b6:8a:d9:db:30:42:39:bb:b4:86:6c:26:af:
8d:64:9a:5d:ea:42:27:f9:54:dd:fa:87:d0:cf:46:db:12:d4:
d1:c5:3f:07:a0:e1:8f:97:9e:d9:51:f7:41:0f:f1:ec:6d:8b:
bc:c7:71:61:dc:86:ad:e0:ef:09:63:0b:1a:34:4e:77:f6:a1:
74:b1:8c:e5:df:cf:cd:2a:f8:2e:f2:21:30:9a:0d:05:75:b2:
83:3e:59:fa:e0:d6:0f:5f:88:80:4f:50:d0:ea:e0:de:7d:0d:
b3:d3:19:91:a5:3e:45:db:78:22:b3:6e:8f:37:d9:7a:e9:9e:
b4:e5:5c:45:28:25:f7:89:53:f7:11:a1:eb:a9:9b:a6:00:b7:
be:50:a3:d3:3e:1e:96:71:3c:80:04:d9:cc:c1:63:88:40:e5:
7b:ce:71:0d:0f:be:e4:fd:ee:05:4d:c0:cf:ca:d0:4c:6b:b3:
1f:b8:17:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:07 2024 by rpki-client on console-ams.rpki-client.org