![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b56e3373-e129-4963-ad89-d8203823cdc6/75bb7922d9e57d66437a8e129dcaded43ad75902.roa
File: 75bb7922d9e57d66437a8e129dcaded43ad75902.roa (raw, json)
Hash identifier: zTZ5MQXct99A9QztrEi/rE+m2LzdUP5imm3b3Ux4QPI=
Subject key identifier: C0:85:DF:2D:9D:DD:F4:7A:0B:33:29:09:AC:A1:00:4E:E6:8B:3C:75
Certificate issuer: /CN=3c8bc735a993962fcbd639234bae2ac1d5a1f158
Certificate serial: 0CF300
Authority key identifier: DB:E4:59:72:55:05:B3:41:FB:F5:DD:98:92:70:00:46:1C:A0:70:BE
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3c8bc735a993962fcbd639234bae2ac1d5a1f158.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/b56e3373-e129-4963-ad89-d8203823cdc6/75bb7922d9e57d66437a8e129dcaded43ad75902.roa
Signing time: Wed 24 Mar 2021 14:45:16 +0000
ROA not before: Wed 24 Mar 2021 14:45:16 +0000
ROA not after: Tue 24 Mar 2026 14:45:16 +0000
asID: 28005
IP address blocks: 138.118.124.0/22 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 848640 (0xcf300)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c8bc735a993962fcbd639234bae2ac1d5a1f158
Validity
Not Before: Mar 24 14:45:16 2021 GMT
Not After : Mar 24 14:45:16 2026 GMT
Subject: CN=75bb7922d9e57d66437a8e129dcaded43ad75902
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:6c:45:bd:e7:b3:30:2b:86:79:fe:62:5b:f2:
d5:95:70:73:3c:93:19:c8:a5:4d:be:9d:d2:b4:6a:
43:aa:1b:f3:73:a7:40:f4:68:92:fd:16:bc:bb:f1:
9e:f9:16:0e:7e:99:5f:7c:dc:18:ad:a2:9a:a0:99:
f6:de:e9:ed:5a:b2:c0:81:5d:d9:fe:de:09:d0:f5:
52:64:97:5e:5c:89:dd:9e:83:39:2b:11:f5:c1:7b:
37:57:7d:83:13:ef:5e:01:30:3d:67:aa:5c:b2:bd:
a2:c7:8a:5e:b5:3e:42:5e:40:2c:98:34:55:4c:12:
f7:d8:42:77:49:6d:98:ff:08:02:65:15:34:1e:45:
fc:d5:ee:a5:4c:6e:ba:2d:7c:0b:a5:0e:38:fa:72:
ed:b3:d1:3f:63:8a:b1:b4:23:3d:b8:2c:50:31:df:
da:c7:8a:79:01:d6:d3:a7:99:16:bd:0c:1f:93:bc:
3c:e0:64:4d:9e:78:5f:e2:a2:f9:46:01:bd:26:52:
50:70:1a:e3:65:01:e3:d1:10:d8:0f:8f:c0:f1:d7:
7c:ad:2c:18:59:d6:66:8b:e4:df:0f:77:c4:44:22:
4d:f3:ff:b8:56:0f:2e:78:1a:ca:d1:63:f4:30:a5:
b0:91:5a:60:19:b4:64:8e:48:95:ea:f0:11:c6:3b:
0f:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:85:DF:2D:9D:DD:F4:7A:0B:33:29:09:AC:A1:00:4E:E6:8B:3C:75
X509v3 Authority Key Identifier:
keyid:DB:E4:59:72:55:05:B3:41:FB:F5:DD:98:92:70:00:46:1C:A0:70:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3c8bc735a993962fcbd639234bae2ac1d5a1f158.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b56e3373-e129-4963-ad89-d8203823cdc6/75bb7922d9e57d66437a8e129dcaded43ad75902.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/b56e3373-e129-4963-ad89-d8203823cdc6/3c8bc735a993962fcbd639234bae2ac1d5a1f158.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.118.124.0/22
Signature Algorithm: sha256WithRSAEncryption
2d:fb:3d:40:cd:7b:fb:63:f4:f0:0b:78:01:f4:49:c5:bb:d9:
26:cf:1e:b1:71:53:61:54:fd:de:5c:a7:cb:f9:53:14:36:87:
b7:67:a9:48:9a:dd:91:fc:10:94:6e:b3:dc:47:d7:b0:d3:48:
0a:7d:43:02:5e:81:26:0d:e9:48:16:3e:f9:3d:7a:8d:48:fe:
2d:d0:49:06:ea:a6:f9:16:b6:85:77:8d:fb:14:8e:84:8e:88:
57:7b:64:0c:34:cd:56:a5:2e:11:63:9e:b9:76:b7:8e:91:db:
73:16:84:a3:ed:ab:28:be:15:82:95:77:8e:ad:e3:66:9c:d8:
2e:23:83:45:22:8f:45:a3:31:8f:d2:c6:5c:73:bd:fe:19:8c:
db:ca:33:f9:7c:56:c5:4c:99:37:07:6c:cf:42:b5:2b:60:85:
a5:53:55:42:52:9e:0d:d6:8b:6a:81:83:8e:ec:a0:8f:4a:a9:
c1:3e:14:2c:31:72:15:c7:74:a3:9a:43:9a:71:bb:53:d1:92:
ea:83:5f:0d:5e:fa:a6:b1:2d:d9:10:8d:57:39:92:e1:9f:71:
af:17:45:e7:da:a9:94:b7:ff:29:fa:66:b4:ef:d9:70:58:a3:
e7:98:75:31:61:6b:ba:42:11:c1:3a:3d:61:77:98:83:e3:b0:
8a:2c:94:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:02 2024 by rpki-client on console-fra.rpki-client.org