Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/4/AS26506.roa
File: AS26506.roa (raw, json)
Hash identifier: hA33Hwx9Zs2Y2U5Ydfx/haUwaKBUUZBstFs5KW6oiMQ=
Subject key identifier: 07:97:A0:85:33:01:65:57:65:E4:A8:7F:0D:15:2F:2B:FB:64:0F:75
Certificate issuer: /CN=8DA5B4B4770B5C8D6D21414A6E2C80B7237E0706
Certificate serial: 653E79B350C53C6A59F04F9A7818C51F2DE8FC50
Authority key identifier: 8D:A5:B4:B4:77:0B:5C:8D:6D:21:41:4A:6E:2C:80:B7:23:7E:07:06
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8DA5B4B4770B5C8D6D21414A6E2C80B7237E0706.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/4/AS26506.roa
Signing time: Thu 09 Jan 2025 16:24:51 +0000
ROA not before: Thu 09 Jan 2025 16:19:51 +0000
ROA not after: Thu 08 Jan 2026 16:24:51 +0000
asID: 26506
IP address blocks: 191.53.52.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:3e:79:b3:50:c5:3c:6a:59:f0:4f:9a:78:18:c5:1f:2d:e8:fc:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8DA5B4B4770B5C8D6D21414A6E2C80B7237E0706
Validity
Not Before: Jan 9 16:19:51 2025 GMT
Not After : Jan 8 16:24:51 2026 GMT
Subject: CN=0797A0853301655765E4A87F0D152F2BFB640F75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:ba:98:29:75:4d:b2:66:1e:ed:95:9f:e9:c7:
17:a7:54:20:18:83:8c:3e:7e:02:fa:1d:9d:43:83:
57:c7:50:b1:5b:43:b8:29:76:32:92:d5:07:ea:9f:
72:20:71:67:e2:e8:60:09:06:57:a7:21:10:68:4c:
f6:3c:8b:0e:33:33:b4:b4:d4:b4:ea:0c:8f:fb:57:
98:df:69:29:5b:96:25:a8:00:2a:63:b4:4d:c2:04:
dd:4f:95:05:8c:40:64:be:7e:16:55:67:76:8b:01:
31:7b:5b:8f:08:02:d8:3c:4b:e8:b1:86:64:9b:24:
d9:3e:ff:b6:f9:10:92:30:ac:8f:d9:59:36:20:49:
63:25:90:2c:fb:90:10:42:0d:39:e2:ad:99:65:7d:
88:5d:ff:7e:1f:ca:90:8b:8c:97:ca:25:45:b6:d3:
38:79:52:99:b8:3b:f1:4d:cf:33:fd:30:65:5e:58:
17:e3:94:9e:27:cb:fd:5b:73:99:9b:28:e2:de:ca:
11:d0:da:20:cb:2f:56:f4:79:c1:c6:c7:73:66:22:
f9:a7:38:6e:21:72:2b:97:22:52:43:d6:26:41:3d:
af:b0:4d:30:83:b7:1d:33:69:36:d2:32:94:31:ee:
61:31:40:06:22:86:2c:ca:0b:0c:93:45:bc:41:3e:
e1:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:97:A0:85:33:01:65:57:65:E4:A8:7F:0D:15:2F:2B:FB:64:0F:75
X509v3 Authority Key Identifier:
keyid:8D:A5:B4:B4:77:0B:5C:8D:6D:21:41:4A:6E:2C:80:B7:23:7E:07:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/4/8DA5B4B4770B5C8D6D21414A6E2C80B7237E0706.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8DA5B4B4770B5C8D6D21414A6E2C80B7237E0706.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/4/AS26506.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.53.52.0/24
Signature Algorithm: sha256WithRSAEncryption
91:9f:e0:74:bb:50:53:bd:7d:07:31:e7:3f:8c:f1:49:34:b5:
f3:c1:fa:bf:d6:8a:bc:87:25:33:14:48:98:94:29:f3:54:2f:
7f:83:a2:30:a8:a8:06:aa:d0:da:b6:9e:4d:ec:3f:34:16:22:
07:a9:2c:4b:a5:03:f8:19:59:96:c1:f1:47:fc:27:a4:8d:3d:
c0:79:0f:b2:da:12:92:4b:e3:3a:aa:be:08:5e:56:d0:a4:51:
14:a0:83:69:46:31:63:07:1b:13:e5:a8:d8:b4:d9:12:51:3f:
0e:33:e9:b9:e4:b5:b3:f2:22:a8:dc:f8:0e:3b:b4:95:35:ef:
d9:c9:40:e3:a1:c7:15:5e:33:0c:c6:3a:76:fa:1a:05:26:bb:
31:33:32:63:12:6c:40:e4:48:37:43:de:61:ea:d4:68:a1:f2:
98:60:e0:c7:6e:ef:49:7f:c7:e2:51:99:75:ae:75:b1:15:bf:
87:2f:40:69:cb:fe:34:73:17:e0:44:26:e3:93:82:71:65:fe:
d6:34:53:ca:81:bb:fc:4b:ae:22:39:27:2d:aa:95:58:85:ae:
be:0d:15:0c:61:e7:2a:6b:30:ae:ef:81:7c:c8:3d:58:d6:10:
27:37:dd:c6:bb:1c:82:c2:e0:19:74:4f:85:e7:4a:d0:15:de:
fc:8a:8d:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 9 19:51:57 2025 by rpki-client on console.sobornost.net