Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/234g6oofZKcTSUoW4jL1CxxGWrjVhbYCW716M9h7Kww3/0/3137302e37382e3132332e302f32342d3234203d3e20323634303039.roa
File: 3137302e37382e3132332e302f32342d3234203d3e20323634303039.roa (raw, json)
Hash identifier: /D0j/AYWwz4d3w2r6w0EgUQxfdxfoSxWpzBWzRcye4U=
Subject key identifier: C4:BE:BB:35:83:F6:25:8E:32:27:72:E2:74:C8:F3:CD:E5:E6:41:C5
Certificate issuer: /CN=173975B1E10A2DF9D0D5CE2BD4DCF54EA9BE45E7
Certificate serial: 21C0783FD941E7B65E4DA79AF453140157564780
Authority key identifier: 17:39:75:B1:E1:0A:2D:F9:D0:D5:CE:2B:D4:DC:F5:4E:A9:BE:45:E7
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/173975B1E10A2DF9D0D5CE2BD4DCF54EA9BE45E7.cer
Subject info access: rsync://rpki-repo.registro.br/repo/234g6oofZKcTSUoW4jL1CxxGWrjVhbYCW716M9h7Kww3/0/3137302e37382e3132332e302f32342d3234203d3e20323634303039.roa
Signing time: Wed 07 Aug 2024 17:24:04 +0000
ROA not before: Wed 07 Aug 2024 17:19:04 +0000
ROA not after: Wed 06 Aug 2025 17:24:04 +0000
asID: 264009
IP address blocks: 170.78.123.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:c0:78:3f:d9:41:e7:b6:5e:4d:a7:9a:f4:53:14:01:57:56:47:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=173975B1E10A2DF9D0D5CE2BD4DCF54EA9BE45E7
Validity
Not Before: Aug 7 17:19:04 2024 GMT
Not After : Aug 6 17:24:04 2025 GMT
Subject: CN=C4BEBB3583F6258E322772E274C8F3CDE5E641C5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:1c:85:5e:f9:de:48:46:bb:da:58:dc:89:4b:
61:47:44:72:60:50:d1:f1:78:64:96:61:51:80:03:
fb:61:48:02:6b:13:9e:bf:1a:f8:70:5c:41:71:6e:
e2:b4:48:ef:19:e2:8d:57:a5:94:b0:12:0a:d8:a0:
ef:99:0a:f6:52:0c:7f:ab:24:72:fb:8e:68:a4:ce:
8f:9a:f6:ab:f2:ba:79:8b:51:68:2b:d4:4c:e2:3a:
82:ad:c5:1c:60:9f:bb:19:80:ae:fc:7f:7d:be:de:
f7:a5:e6:41:74:fb:b7:b8:90:aa:bd:7c:ef:07:6d:
5c:01:ce:8a:23:a0:4e:a7:ec:76:5a:df:a7:33:a1:
71:2e:32:fa:ae:40:11:73:cd:04:06:93:c3:38:d7:
54:02:fa:93:08:bd:0f:26:05:01:2b:76:1a:31:13:
2f:fc:45:d5:3a:db:2e:2e:80:29:d1:f9:39:aa:fc:
d2:1e:ef:f9:be:83:ae:02:4a:5a:90:6c:92:a6:2b:
e4:ce:ca:77:e8:01:5e:5d:83:31:8c:e6:96:3a:87:
5b:1e:13:d0:3e:36:b4:30:86:16:b3:05:6e:48:c0:
26:03:a9:80:1f:03:2b:ea:ac:ef:20:e4:10:42:ce:
f1:2a:c2:23:74:d9:fe:60:98:03:e7:5b:13:22:2b:
eb:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:BE:BB:35:83:F6:25:8E:32:27:72:E2:74:C8:F3:CD:E5:E6:41:C5
X509v3 Authority Key Identifier:
keyid:17:39:75:B1:E1:0A:2D:F9:D0:D5:CE:2B:D4:DC:F5:4E:A9:BE:45:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/234g6oofZKcTSUoW4jL1CxxGWrjVhbYCW716M9h7Kww3/0/173975B1E10A2DF9D0D5CE2BD4DCF54EA9BE45E7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/173975B1E10A2DF9D0D5CE2BD4DCF54EA9BE45E7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/234g6oofZKcTSUoW4jL1CxxGWrjVhbYCW716M9h7Kww3/0/3137302e37382e3132332e302f32342d3234203d3e20323634303039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.78.123.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:aa:17:3e:9d:76:63:5e:71:0b:7b:f2:55:05:5b:f4:ff:61:
c4:05:81:d6:7c:49:a1:f8:8a:4d:25:6d:78:3c:f9:9c:18:e7:
4c:aa:37:06:8c:b3:ea:88:26:bd:76:58:cc:4e:2f:69:99:02:
27:14:50:35:94:ab:3c:28:07:4b:35:10:36:29:4f:67:61:e9:
18:d6:49:63:a4:a7:d7:da:5c:d9:de:68:8f:9e:22:dd:a4:de:
36:65:2f:dc:93:93:aa:9c:12:22:e5:ee:32:21:1b:53:dd:64:
30:ce:d1:40:57:f0:36:e7:3b:be:bf:40:c1:be:a1:ff:e9:b9:
8e:cf:93:cb:0a:98:80:00:ae:1c:b0:3b:4d:85:76:43:cf:70:
38:5b:ef:37:37:31:81:ee:80:49:45:08:be:bb:ed:9a:b9:23:
92:ba:e5:88:dc:d3:02:78:c1:b1:af:78:91:cf:41:24:34:52:
98:bf:0d:37:ef:6e:81:0c:5f:f7:e0:b3:03:25:b2:07:8a:63:
18:ee:a6:22:39:2c:da:e1:12:37:fd:d4:38:bd:ec:43:75:a6:
d4:34:ac:e2:b4:34:58:02:d3:48:9d:3d:b0:ee:66:74:a0:df:
1a:c5:ce:97:e4:56:41:14:db:21:37:15:a2:74:40:9c:fd:66:
c4:88:de:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 31 08:48:38 2024 by rpki-client on console.sobornost.net