![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e22c3773-9773-4eb6-983f-4bc0ea8c932b/0017b3616482c7262834bb0e37aede7f1018f618.roa
File: 0017b3616482c7262834bb0e37aede7f1018f618.roa (raw, json)
Hash identifier: j/R3SnTftF/HSAocpECB28yU8IAoOK5x1KRfO81nlaU=
Subject key identifier: 4A:96:77:53:D9:95:39:6E:7C:EE:DB:C0:7F:80:BB:AB:07:57:BB:68
Certificate issuer: /CN=77235f66b6c5d5c31869066c4d405d67062012cf
Certificate serial: 177888
Authority key identifier: 0A:4A:B9:05:85:69:40:10:64:D0:F6:94:9F:37:33:29:72:06:DD:32
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/77235f66b6c5d5c31869066c4d405d67062012cf.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/e22c3773-9773-4eb6-983f-4bc0ea8c932b/0017b3616482c7262834bb0e37aede7f1018f618.roa
Signing time: Tue 10 May 2022 19:26:29 +0000
ROA not before: Thu 28 Apr 2022 03:00:00 +0000
ROA not after: Sun 28 Apr 2024 03:00:00 +0000
asID: 16509
IP address blocks: 200.12.197.0/24 maxlen: 24
2801:0:60::/48 maxlen: 48
2801:0:62::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1538184 (0x177888)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77235f66b6c5d5c31869066c4d405d67062012cf
Validity
Not Before: Apr 28 03:00:00 2022 GMT
Not After : Apr 28 03:00:00 2024 GMT
Subject: CN=0017b3616482c7262834bb0e37aede7f1018f618
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:2e:46:77:40:f5:b5:62:d0:da:01:1c:95:ab:
72:9e:24:f5:a3:5c:b5:13:69:7f:63:8d:59:12:0e:
0d:33:d6:dd:30:5d:8e:d2:e0:01:9a:3b:19:b6:a6:
1d:58:2e:a7:27:b7:59:43:11:86:61:57:69:63:e6:
66:62:fe:14:c6:2c:7d:a7:da:bd:d3:7b:32:ef:43:
eb:58:02:5f:2f:ce:83:24:8f:48:03:66:93:81:f7:
d9:46:62:94:45:27:91:f5:c9:57:e1:90:04:7f:90:
fc:b8:15:48:73:75:67:ba:04:46:7a:46:53:84:c0:
78:58:ac:00:71:61:a9:a5:4a:83:4f:ec:39:c3:ce:
47:84:96:0f:58:f0:27:74:71:d9:da:43:db:de:c4:
e0:ed:ff:80:91:8e:08:88:ad:0b:75:ce:42:f4:27:
08:58:8a:d7:da:58:14:7c:fe:39:88:be:e9:c4:ed:
88:29:a2:f2:8a:c0:34:b5:4c:00:45:e6:c1:17:22:
a1:01:c0:d2:10:7f:bb:9c:d1:be:03:b4:c7:87:d5:
bd:af:75:b8:ba:f2:be:1c:b8:f7:bb:33:02:67:9c:
f2:4f:28:c5:55:45:c4:d5:71:f9:e9:36:11:f5:38:
15:d9:87:60:74:a3:79:c8:85:ed:01:b7:51:cf:f2:
d3:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:96:77:53:D9:95:39:6E:7C:EE:DB:C0:7F:80:BB:AB:07:57:BB:68
X509v3 Authority Key Identifier:
keyid:0A:4A:B9:05:85:69:40:10:64:D0:F6:94:9F:37:33:29:72:06:DD:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/77235f66b6c5d5c31869066c4d405d67062012cf.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e22c3773-9773-4eb6-983f-4bc0ea8c932b/0017b3616482c7262834bb0e37aede7f1018f618.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/e22c3773-9773-4eb6-983f-4bc0ea8c932b/77235f66b6c5d5c31869066c4d405d67062012cf.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.12.197.0/24
IPv6:
2801:0:60::/48
2801:0:62::/48
Signature Algorithm: sha256WithRSAEncryption
8a:47:84:f3:ba:15:dd:9c:17:a8:3f:01:5f:8e:7f:ae:f5:8e:
25:ae:35:eb:ff:6e:0b:47:81:ac:6c:64:07:a7:af:94:e0:6d:
48:d2:7b:fc:dd:31:e1:27:9d:07:2c:c7:f3:9e:ec:31:5f:3c:
14:22:4d:8c:d4:7b:e1:ad:c9:e6:ef:a4:48:49:86:9e:35:54:
da:ed:4c:cb:2d:05:0a:c6:b8:d6:00:fb:19:3f:ac:69:ef:44:
f5:96:79:ec:32:34:c1:42:a4:93:55:0e:9a:49:bd:d9:e3:38:
fe:af:ba:ac:20:ef:41:27:66:00:42:e1:a5:9f:a9:f1:b7:fe:
ac:6f:68:1e:15:51:c8:1b:a1:e1:ba:ef:91:0e:9e:7d:61:8a:
49:d8:c5:5c:6e:51:83:08:fa:91:2c:69:86:2c:78:7c:55:c4:
bd:c9:6a:88:76:36:d1:45:dd:0f:fc:c3:d5:e8:ca:fd:7c:b4:
1e:eb:4d:d9:9a:f1:cc:c8:2a:b6:c3:29:02:19:b5:55:b8:9f:
69:50:2c:3f:79:3e:f6:5d:31:c9:f8:0c:53:a9:81:86:26:29:
3b:7e:dd:08:68:0b:4a:bf:80:87:81:0c:6b:be:3d:a4:0a:73:
42:c8:57:24:34:2f:7d:24:8d:97:04:a1:1c:b2:4b:94:4a:55:
cc:0e:15:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:09 2024 by rpki-client on console-fra.rpki-client.org