Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/e633bb1b006afda1a76956a03625a73178941d05.roa
File: e633bb1b006afda1a76956a03625a73178941d05.roa (raw, json)
Hash identifier: MNyr+ITKX/keOVyhHDdRkqceDTnFq8A6u2ulkbHFfPU=
Subject key identifier: F0:CE:06:E3:7A:8F:BD:38:B3:74:C8:7A:97:F6:6A:E4:6B:FA:37:D3
Certificate issuer: /CN=3300a6efb5b34c79125fce5dc4afa6977a46744f
Certificate serial: 10C4C4
Authority key identifier: 62:AA:07:2A:74:5B:AE:77:82:D2:D9:44:76:20:4C:0C:A5:4E:ED:C2
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3300a6efb5b34c79125fce5dc4afa6977a46744f.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/e633bb1b006afda1a76956a03625a73178941d05.roa
Signing time: Sat 24 Jul 2021 11:12:28 +0000
ROA not before: Tue 11 May 2021 03:00:00 +0000
ROA not after: Thu 11 May 2023 03:00:00 +0000
asID: 262589
IP address blocks: 190.90.0.0/21 maxlen: 21
190.90.8.0/21 maxlen: 21
190.90.17.0/24 maxlen: 24
190.90.21.0/24 maxlen: 24
190.90.22.0/24 maxlen: 24
190.90.24.0/24 maxlen: 24
190.90.252.0/24 maxlen: 24
190.90.240.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1098948 (0x10c4c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3300a6efb5b34c79125fce5dc4afa6977a46744f
Validity
Not Before: May 11 03:00:00 2021 GMT
Not After : May 11 03:00:00 2023 GMT
Subject: CN=e633bb1b006afda1a76956a03625a73178941d05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:67:73:c5:73:a6:c4:e9:55:16:8d:bf:5e:69:
44:6f:a9:64:57:26:8f:f9:85:b3:a6:31:06:5d:87:
28:15:d0:f4:77:29:c9:e4:32:50:90:c1:15:a3:9a:
fc:e0:59:94:e6:0f:48:37:da:cc:5d:3b:21:a0:1d:
35:79:2f:9d:19:3d:b6:bd:4d:c3:a9:55:20:fa:52:
97:50:a9:ab:ab:95:42:6a:ff:af:a9:c2:66:7e:2e:
7b:da:d0:cc:9d:10:33:62:36:66:b4:a4:20:59:61:
f1:70:41:01:d5:12:e4:c5:99:6a:4d:5b:47:ea:54:
d7:c9:34:b6:08:28:b4:8b:af:cc:cd:8f:16:40:be:
9c:04:d4:4d:53:6f:fb:10:2c:a0:c4:ad:25:cc:9b:
cb:3b:32:63:82:1f:44:f9:49:dd:2e:10:c4:b4:58:
fe:c5:33:ee:29:db:b1:9f:bb:84:48:e3:c6:89:f4:
33:e7:59:63:26:80:18:28:16:ef:1c:a8:19:1f:53:
b2:61:95:ae:7e:d0:58:11:6a:89:cb:97:57:b5:65:
66:1a:91:b4:2e:cd:84:5d:96:a4:cf:8d:00:5d:28:
77:c2:ff:c0:b1:f0:bd:46:4f:78:04:37:ac:af:3e:
4b:da:6e:59:b3:a2:4a:6e:c9:d5:8f:0e:46:f4:37:
72:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:CE:06:E3:7A:8F:BD:38:B3:74:C8:7A:97:F6:6A:E4:6B:FA:37:D3
X509v3 Authority Key Identifier:
keyid:62:AA:07:2A:74:5B:AE:77:82:D2:D9:44:76:20:4C:0C:A5:4E:ED:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3300a6efb5b34c79125fce5dc4afa6977a46744f.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/e633bb1b006afda1a76956a03625a73178941d05.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/3300a6efb5b34c79125fce5dc4afa6977a46744f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.90.0.0/20
190.90.17.0/24
190.90.21.0-190.90.22.255
190.90.24.0/24
190.90.240.0/24
190.90.252.0/24
Signature Algorithm: sha256WithRSAEncryption
17:b0:53:88:66:4b:c4:4c:b9:d8:15:f6:87:1d:e8:99:c4:cb:
59:8f:db:bf:3f:83:58:56:eb:af:5d:01:2d:17:5d:8c:a2:75:
90:c2:b9:28:aa:d4:79:0c:35:bb:70:ee:22:1e:af:78:57:9d:
e6:10:0f:84:14:0e:59:e5:28:f1:8b:28:ad:4f:87:d2:13:b4:
1a:18:45:a8:44:26:bb:ad:14:48:48:1f:ee:c2:6f:6b:65:17:
63:f0:9f:56:76:30:4b:2e:54:d6:92:53:01:bf:ef:6b:5a:a6:
d9:b7:f0:e7:cd:d9:87:3a:e6:a0:7c:b7:fa:1c:15:37:77:90:
5c:99:93:e4:7c:e3:b3:ef:a8:de:d7:c9:a7:e2:d7:a3:8a:fc:
98:b7:8e:70:03:e1:bd:4e:39:99:ed:cf:c9:7b:54:a1:76:fe:
8e:e7:36:ce:98:61:22:59:31:37:55:97:60:ac:4c:64:e3:a8:
fc:d3:4c:e6:18:6d:31:97:42:c3:4a:a1:9c:41:2a:e1:71:5f:
20:ef:dd:8a:50:6a:e3:80:7d:b8:18:c5:10:e7:49:19:85:2e:
17:81:83:bc:aa:82:d7:1e:9a:8e:a6:cc:af:0f:47:8d:f4:44:
92:ae:bd:fe:0d:7f:2a:e3:63:1b:24:a1:4c:21:aa:e2:ef:1b:
b5:03:3e:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:22 2024 by rpki-client on console-ams.rpki-client.org