Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/90934775-c878-4439-a184-f55526519fdc/90e8317526072c50e0944670cb44ebef42aa4835.roa
File: 90e8317526072c50e0944670cb44ebef42aa4835.roa (raw, json)
Hash identifier: 0fr+dD3ALLVW7vdTR5ZNEZJIF6tFLMShZ5AukNgjp9w=
Subject key identifier: 24:C8:F4:C5:FA:28:20:10:B9:C3:E9:C8:98:F6:90:77:F9:3C:2D:6D
Certificate issuer: /CN=817a536b86ea7256ab7c344eee7cb72670fc8a1e
Certificate serial: 185741
Authority key identifier: D7:C9:E7:54:2F:28:E6:C6:8B:5F:40:C0:AB:34:59:AA:3F:38:6C:FC
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/817a536b86ea7256ab7c344eee7cb72670fc8a1e.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/90934775-c878-4439-a184-f55526519fdc/90e8317526072c50e0944670cb44ebef42aa4835.roa
Signing time: Wed 31 Jan 2024 13:17:35 +0000
ROA not before: Wed 31 Jan 2024 13:17:35 +0000
ROA not after: Sat 31 Jan 2026 13:17:35 +0000
asID: 52493
IP address blocks: 179.60.228.0/22 maxlen: 22
168.90.72.0/22 maxlen: 22
179.60.228.0/23 maxlen: 23
179.60.230.0/23 maxlen: 23
179.60.228.0/24 maxlen: 24
179.60.229.0/24 maxlen: 24
179.60.230.0/24 maxlen: 24
179.60.231.0/24 maxlen: 24
168.90.72.0/23 maxlen: 23
168.90.74.0/23 maxlen: 23
168.90.72.0/24 maxlen: 24
168.90.73.0/24 maxlen: 24
168.90.74.0/24 maxlen: 24
168.90.75.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1595201 (0x185741)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=817a536b86ea7256ab7c344eee7cb72670fc8a1e
Validity
Not Before: Jan 31 13:17:35 2024 GMT
Not After : Jan 31 13:17:35 2026 GMT
Subject: CN=90e8317526072c50e0944670cb44ebef42aa4835
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:aa:6d:43:b0:a7:e5:5c:a8:e5:12:f9:a4:2a:
1c:6c:48:d1:64:7f:50:dd:b0:19:55:32:4f:18:40:
b8:a4:0e:31:82:0e:78:2b:cd:1f:fe:b9:a6:3c:82:
d6:6d:a0:e9:35:6b:3f:76:5a:68:b8:aa:42:72:49:
e6:17:0f:c0:ae:36:46:91:a6:71:79:4f:08:5d:71:
3e:0e:8f:4e:1a:f6:65:22:02:00:47:b8:7c:63:69:
a6:b4:ad:34:f3:1c:95:d1:3d:bf:9e:a7:e6:c1:c4:
e1:98:29:c5:c6:35:c9:d8:4e:02:e8:40:e3:e0:cd:
77:e3:c4:5b:78:2c:81:85:74:af:fe:1b:e5:6b:32:
da:fc:35:91:a5:ed:ab:5c:9d:4a:ca:dd:90:c3:e6:
f2:67:d9:f1:22:da:9c:e4:bf:9e:94:47:a3:1a:dd:
bc:ea:c7:fe:f4:98:a5:77:6b:f0:27:db:a4:a5:86:
5f:44:f5:7a:fa:ce:c3:45:d3:f8:8c:73:35:f4:e1:
c0:b2:3e:b4:f1:a6:06:3e:65:36:9d:9a:91:f7:2b:
63:cd:e9:11:03:b1:49:0a:9b:21:74:7a:95:43:fa:
ee:1e:27:01:b9:21:10:58:74:2c:5d:cc:39:c6:44:
61:2e:fd:26:4e:09:60:c1:79:87:67:32:4c:fd:46:
60:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:C8:F4:C5:FA:28:20:10:B9:C3:E9:C8:98:F6:90:77:F9:3C:2D:6D
X509v3 Authority Key Identifier:
keyid:D7:C9:E7:54:2F:28:E6:C6:8B:5F:40:C0:AB:34:59:AA:3F:38:6C:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/817a536b86ea7256ab7c344eee7cb72670fc8a1e.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/90934775-c878-4439-a184-f55526519fdc/90e8317526072c50e0944670cb44ebef42aa4835.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/90934775-c878-4439-a184-f55526519fdc/817a536b86ea7256ab7c344eee7cb72670fc8a1e.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.90.72.0/22
179.60.228.0/22
Signature Algorithm: sha256WithRSAEncryption
80:28:f0:e1:04:9a:4b:61:7d:33:21:dc:13:f9:88:33:8d:6a:
9a:71:8c:ad:b0:f7:e3:d0:4a:a6:25:cc:33:8c:10:cd:6c:39:
58:35:c5:5f:1c:87:95:23:ff:a6:bf:8b:fb:0b:7d:04:0e:56:
61:6e:71:b3:c3:ae:d0:3e:ab:39:15:19:77:5d:02:00:4a:51:
0c:90:1d:eb:24:09:43:7e:be:fd:b7:9a:1d:d1:86:8b:2f:08:
48:b4:60:c4:1c:05:71:83:e3:60:be:cd:21:7c:5c:35:50:7d:
59:d3:3c:72:2c:09:45:3a:1c:e3:73:79:80:c8:3e:86:e8:46:
80:a8:8d:d7:b2:23:b9:55:4d:7f:f8:f7:b4:12:f8:ec:1c:40:
71:8c:3e:8c:28:45:02:b3:03:7e:2c:1e:74:17:45:8e:41:c0:
4a:4d:e9:e8:68:05:61:65:da:c0:93:35:20:c9:e3:f2:06:c7:
45:ab:22:e9:f0:16:65:1f:81:19:87:ae:4f:af:46:63:56:ae:
ac:19:07:c1:a0:8f:f1:75:dd:e4:ca:a8:d0:2e:26:b4:b2:fe:
34:3f:6b:cc:68:74:77:3a:6a:f9:6a:77:31:c4:6a:81:ac:56:
a6:31:94:ac:f0:96:fd:f0:60:0a:e0:44:6d:a0:f7:7f:11:fc:
cd:bb:39:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:54 2024 by rpki-client on console-fra.rpki-client.org