![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ba5a158c-27b7-48a6-8e96-bbf902c20408/a8e41ab18aaa60e489e7c55c2fed7946a143bf69.roa
File: a8e41ab18aaa60e489e7c55c2fed7946a143bf69.roa (raw, json)
Hash identifier: km090u4pNAsJP2svCT261FCKLHljmEgQgfMf6QGyAA8=
Subject key identifier: C9:24:4D:E3:E1:21:4C:63:D0:02:A4:77:53:CB:94:73:5C:5D:2E:28
Certificate issuer: /CN=3a642f0f5bf1f426c14ab984a5eec5cc1219f4a8
Certificate serial: 18BA7A
Authority key identifier: C5:95:24:B5:C8:D5:68:1E:4A:E5:E7:6A:72:31:62:8B:87:82:41:88
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3a642f0f5bf1f426c14ab984a5eec5cc1219f4a8.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/ba5a158c-27b7-48a6-8e96-bbf902c20408/a8e41ab18aaa60e489e7c55c2fed7946a143bf69.roa
Signing time: Thu 16 Jun 2022 14:18:30 +0000
ROA not before: Sat 01 Jan 2022 03:00:00 +0000
ROA not after: Sat 15 Jun 2024 03:00:00 +0000
asID: 52363
IP address blocks: 131.0.232.0/22 maxlen: 24
2803:f580::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1620602 (0x18ba7a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a642f0f5bf1f426c14ab984a5eec5cc1219f4a8
Validity
Not Before: Jan 1 03:00:00 2022 GMT
Not After : Jun 15 03:00:00 2024 GMT
Subject: CN=a8e41ab18aaa60e489e7c55c2fed7946a143bf69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:98:8e:4b:75:60:95:b9:41:f2:e0:f2:18:3a:
c7:a6:97:fc:bc:98:b4:c7:9d:c6:17:d0:0b:94:f2:
ac:4e:52:33:7a:36:4d:b2:1b:84:20:6a:bb:5a:91:
bb:22:0d:2c:a4:da:b1:95:c5:2b:70:a5:dc:48:36:
db:10:40:2b:c7:35:79:dc:a5:a5:49:b7:02:4d:34:
32:5b:9f:1d:fc:ae:83:cb:59:3b:d8:73:0b:89:de:
56:d7:11:bc:7b:93:31:c8:44:d5:e0:f2:02:34:50:
c4:71:a6:83:22:36:34:06:96:3d:db:bc:fe:53:78:
bb:96:96:f0:03:a3:a1:e0:33:1a:b7:9c:0b:bf:9c:
46:ff:8f:98:d9:ad:36:24:9e:4c:42:f8:5b:7c:21:
7f:05:01:5e:54:1b:af:66:8b:3a:f8:88:1c:b8:2f:
43:98:3b:15:5a:cd:65:21:7e:d9:cf:ec:b9:b7:6d:
14:1f:9c:a3:56:6e:7b:01:f7:29:02:09:b8:3c:29:
91:96:79:13:3c:86:38:59:4d:3b:33:4b:4d:5b:6a:
75:45:0a:41:76:e4:0d:a0:bd:7d:a8:e2:44:b0:08:
9a:60:f2:e6:49:ee:0a:a8:94:16:4a:22:c4:12:c9:
12:9b:89:18:d9:cb:e3:00:14:35:1a:ad:c5:2e:7a:
99:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:24:4D:E3:E1:21:4C:63:D0:02:A4:77:53:CB:94:73:5C:5D:2E:28
X509v3 Authority Key Identifier:
keyid:C5:95:24:B5:C8:D5:68:1E:4A:E5:E7:6A:72:31:62:8B:87:82:41:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3a642f0f5bf1f426c14ab984a5eec5cc1219f4a8.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ba5a158c-27b7-48a6-8e96-bbf902c20408/a8e41ab18aaa60e489e7c55c2fed7946a143bf69.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/ba5a158c-27b7-48a6-8e96-bbf902c20408/3a642f0f5bf1f426c14ab984a5eec5cc1219f4a8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.0.232.0/22
IPv6:
2803:f580::/32
Signature Algorithm: sha256WithRSAEncryption
5b:ba:44:7f:41:b6:ec:be:c7:9a:4c:7a:6e:a7:25:e7:be:c2:
17:cb:d4:c0:f7:c9:7f:6f:94:ad:b9:92:66:f8:70:44:44:df:
c4:78:79:f2:03:9f:ae:7f:38:74:da:4b:d8:7f:7d:e4:e9:04:
16:e8:35:24:73:03:e9:64:f4:81:61:6e:31:a0:6d:9c:54:4b:
87:ca:a7:03:c0:9c:c8:5f:88:0a:e6:8c:11:b9:65:af:3c:d5:
42:0b:51:cb:c6:71:a8:15:12:13:57:e3:64:1b:ee:17:ae:b7:
e7:6f:fb:58:cf:97:35:79:e4:64:e8:e6:92:62:33:f8:a5:ca:
15:88:81:38:e7:d3:4c:c0:d6:66:32:25:25:39:3d:15:14:8c:
81:43:92:15:d3:0e:43:89:a5:33:0f:94:50:e6:44:c9:8d:4f:
c7:f0:51:2e:6c:77:7b:68:a3:36:15:3b:e9:a2:1f:72:50:29:
3e:dc:ec:28:da:36:fd:2e:61:b3:98:c0:31:50:00:1f:55:ba:
63:64:19:5d:48:f4:5f:07:e7:f6:f7:6d:96:13:4d:ce:04:cf:
31:de:2e:3c:83:27:b1:97:77:64:3a:6c:d4:09:9f:bd:ea:25:
aa:00:1a:2b:d4:1b:81:c0:b6:bd:8e:66:1a:9e:75:eb:04:20:
9e:b6:e5:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:03 2024 by rpki-client on console-fra.rpki-client.org