![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a263dc57-e11c-4608-9af2-bdfb16e216dc/bf17e1d381aad71c9d7eadb1e8a0b2af8e9a6158.roa
File: bf17e1d381aad71c9d7eadb1e8a0b2af8e9a6158.roa (raw, json)
Hash identifier: Yu+eRLfmRZz9OSQiYN4rU1b6k7yQ54Cl2SrBJekU5Mk=
Subject key identifier: F7:C8:FD:C1:3E:E2:49:FA:27:17:82:F6:0A:23:B5:04:5E:36:B5:78
Certificate issuer: /CN=9b3d6002276e2295200c85a66129c42e4d483c34
Certificate serial: 21CEA8
Authority key identifier: 30:21:FB:0B:72:5D:F2:BC:EB:41:C8:0F:BA:80:CB:82:38:60:F9:0A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9b3d6002276e2295200c85a66129c42e4d483c34.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/a263dc57-e11c-4608-9af2-bdfb16e216dc/bf17e1d381aad71c9d7eadb1e8a0b2af8e9a6158.roa
Signing time: Mon 29 May 2023 22:22:18 +0000
ROA not before: Sun 28 May 2023 22:22:18 +0000
ROA not after: Thu 29 May 2025 22:22:18 +0000
asID: 272954
IP address blocks: 177.234.211.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2215592 (0x21cea8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b3d6002276e2295200c85a66129c42e4d483c34
Validity
Not Before: May 28 22:22:18 2023 GMT
Not After : May 29 22:22:18 2025 GMT
Subject: CN=bf17e1d381aad71c9d7eadb1e8a0b2af8e9a6158
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:8e:66:ce:52:8b:7f:3f:ec:b2:5e:a6:70:26:
20:1a:e8:2d:00:0a:27:6d:66:7f:1b:31:a3:8b:31:
74:79:18:cf:60:df:3b:af:2b:9b:70:62:f3:8a:bc:
9d:a4:bb:7a:30:8e:40:45:f0:17:cb:41:88:f7:26:
92:ac:7b:26:10:d4:79:91:01:e0:a5:55:7f:4d:2e:
0e:2f:43:68:0e:25:54:0b:43:68:70:0d:37:22:ac:
91:5d:75:d3:8c:76:93:ff:ec:e2:01:97:5f:12:91:
87:aa:57:90:29:82:0c:a5:bb:63:15:9f:12:42:f9:
e7:86:33:2f:1a:9f:1c:f3:f4:92:05:67:5a:04:67:
dc:36:01:0a:0f:7f:0e:86:d4:b7:0d:0e:44:4c:69:
62:b1:f1:06:3c:18:13:b5:91:65:85:a5:a6:fc:f7:
f7:c3:19:9d:9a:44:54:d3:2a:14:0b:86:f9:c0:1c:
5a:b4:85:4d:b3:62:16:68:67:6d:b2:2d:7d:53:8d:
ad:6f:f5:55:c7:fd:1b:dc:27:04:67:15:f0:11:05:
c5:ba:e6:a3:eb:93:fa:d8:34:ee:e5:4b:31:69:e0:
2f:bb:2a:f7:79:36:00:25:ad:94:28:f3:03:6a:bc:
40:2c:60:09:f6:f8:4a:81:b2:c7:46:78:cd:98:be:
c2:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:C8:FD:C1:3E:E2:49:FA:27:17:82:F6:0A:23:B5:04:5E:36:B5:78
X509v3 Authority Key Identifier:
keyid:30:21:FB:0B:72:5D:F2:BC:EB:41:C8:0F:BA:80:CB:82:38:60:F9:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9b3d6002276e2295200c85a66129c42e4d483c34.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a263dc57-e11c-4608-9af2-bdfb16e216dc/bf17e1d381aad71c9d7eadb1e8a0b2af8e9a6158.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/a263dc57-e11c-4608-9af2-bdfb16e216dc/9b3d6002276e2295200c85a66129c42e4d483c34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.234.211.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:a6:00:2c:e1:3b:f9:fa:03:6c:6d:3f:8d:99:8e:6e:3f:1a:
d6:41:24:2c:72:a2:56:47:e3:a2:b7:4a:d7:4a:70:09:df:c8:
4c:20:ad:b3:92:00:10:be:e2:ea:a0:84:df:31:cd:9b:1a:2f:
01:8f:d5:92:31:cf:5b:5d:57:2d:82:8e:47:f9:e5:05:bd:24:
e4:92:46:2e:8f:35:e5:00:98:93:2f:56:4d:9a:2e:1f:7a:80:
40:22:fe:b9:b1:c7:2f:f4:0b:7b:f9:d2:35:af:e3:fc:ad:0c:
75:f2:a2:2a:5f:74:c1:7d:34:07:1a:98:80:9b:fb:ff:ff:9d:
19:e0:c4:19:bd:18:3a:71:04:be:f0:65:8a:bf:e2:8f:f4:04:
a6:54:8d:de:a6:99:fb:8c:5c:e0:63:96:65:ec:1a:14:cb:d8:
08:ed:bc:0e:15:c7:5f:c0:73:f9:3e:6b:4c:24:c4:48:ad:1b:
80:ba:62:1f:5b:b9:79:f4:75:b9:eb:c1:0b:66:f5:ae:f9:d4:
6f:9f:f2:13:0f:e8:27:81:b2:32:58:fe:08:fc:23:69:3d:64:
88:ac:3f:8c:4b:77:6c:37:f8:74:64:40:88:64:a2:30:d5:27:
10:c3:ff:c1:d9:17:72:f9:42:60:a5:79:4c:3e:c2:39:0b:36:
b2:79:6a:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:20 2024 by rpki-client on console-ams.rpki-client.org