Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5CxmhFZmNy6pMkdvacHdjcMUy6tzePd4QzeqwmoVeomw/0/34352e3232382e3130382e302f32322d3232203d3e20323637303539.roa
File: 34352e3232382e3130382e302f32322d3232203d3e20323637303539.roa (raw, json)
Hash identifier: zyWkh7S0KkT6NHrKQqIJHw4yyxqu3dKzNrQSptWqqR8=
Subject key identifier: 55:DD:68:C6:DF:66:70:20:51:67:E6:CF:95:8C:6B:BD:20:F3:89:17
Certificate issuer: /CN=3E86FE3FF2EA13AFB3B8C6711DD8F4731DC4884C
Certificate serial: 1CC9524C033D1C0B9D3F853C151408718386192D
Authority key identifier: 3E:86:FE:3F:F2:EA:13:AF:B3:B8:C6:71:1D:D8:F4:73:1D:C4:88:4C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E86FE3FF2EA13AFB3B8C6711DD8F4731DC4884C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5CxmhFZmNy6pMkdvacHdjcMUy6tzePd4QzeqwmoVeomw/0/34352e3232382e3130382e302f32322d3232203d3e20323637303539.roa
Signing time: Mon 06 Jan 2025 18:53:59 +0000
ROA not before: Mon 06 Jan 2025 18:48:59 +0000
ROA not after: Mon 05 Jan 2026 18:53:59 +0000
asID: 267059
IP address blocks: 45.228.108.0/22 maxlen: 22
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:c9:52:4c:03:3d:1c:0b:9d:3f:85:3c:15:14:08:71:83:86:19:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E86FE3FF2EA13AFB3B8C6711DD8F4731DC4884C
Validity
Not Before: Jan 6 18:48:59 2025 GMT
Not After : Jan 5 18:53:59 2026 GMT
Subject: CN=55DD68C6DF6670205167E6CF958C6BBD20F38917
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:1c:3a:9b:30:c3:9e:5c:10:3e:29:82:5b:78:
f6:f4:d6:08:22:d5:da:b4:7f:9d:9c:cf:94:3a:26:
95:91:11:c5:5a:14:34:2a:95:a1:b0:ab:1c:4d:e0:
0c:59:67:8a:9a:b3:69:25:12:28:b7:af:1b:39:e1:
b7:3e:81:ff:f9:12:e0:0f:b3:08:c3:be:82:d4:12:
5f:7a:a4:7b:b7:8c:05:9f:b7:49:4f:f1:b8:e7:87:
52:c0:2b:32:2c:f9:39:da:38:56:d7:d5:5d:0d:26:
68:22:44:3c:7f:28:b0:97:8c:e2:82:87:0a:f5:52:
af:63:ab:9a:d3:cc:c3:a7:a8:72:4d:38:3c:2f:b3:
a1:77:0e:63:a0:a8:aa:91:6a:d9:f2:22:6a:3c:f1:
02:5b:50:25:79:0e:6d:6e:e4:c9:60:10:5c:84:38:
98:95:63:45:0c:fd:df:ff:66:55:f2:3b:de:15:dd:
a9:ee:a3:2f:69:1d:a5:5f:60:ea:38:f6:ce:02:00:
fe:06:34:61:47:e5:2f:43:50:eb:44:f8:06:03:99:
2f:ab:7e:9f:62:57:f3:2c:2f:ed:2e:62:49:69:13:
fd:42:a7:47:ae:ea:68:ad:30:34:65:54:d6:16:0d:
cf:51:35:0a:ed:5b:e2:59:a6:0b:b8:b8:4a:02:7f:
24:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:DD:68:C6:DF:66:70:20:51:67:E6:CF:95:8C:6B:BD:20:F3:89:17
X509v3 Authority Key Identifier:
keyid:3E:86:FE:3F:F2:EA:13:AF:B3:B8:C6:71:1D:D8:F4:73:1D:C4:88:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5CxmhFZmNy6pMkdvacHdjcMUy6tzePd4QzeqwmoVeomw/0/3E86FE3FF2EA13AFB3B8C6711DD8F4731DC4884C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E86FE3FF2EA13AFB3B8C6711DD8F4731DC4884C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5CxmhFZmNy6pMkdvacHdjcMUy6tzePd4QzeqwmoVeomw/0/34352e3232382e3130382e302f32322d3232203d3e20323637303539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.228.108.0/22
Signature Algorithm: sha256WithRSAEncryption
99:fd:97:4f:8c:24:f4:40:ef:03:bc:f3:5f:3d:f0:47:33:29:
81:68:3a:06:8f:e5:33:87:e6:f3:de:d0:59:5d:0e:1a:23:83:
b4:2f:2d:6d:08:25:b6:9a:6e:ff:65:3a:02:26:37:84:e9:47:
aa:49:5b:7e:ee:cd:1b:ba:f4:67:08:d5:e8:05:f2:2b:c9:66:
23:1c:8a:9b:e3:2d:31:18:56:a8:70:7d:94:65:26:d1:ce:e0:
34:9a:82:ad:21:b5:e9:bf:19:56:ec:ac:64:e5:74:a1:49:2f:
2e:a4:9a:10:45:1c:2c:19:42:d2:8d:29:38:3c:72:57:ba:bd:
bb:08:f5:85:e2:bf:bd:56:bd:e6:b1:ce:f5:65:16:e0:00:12:
d5:86:48:ff:c9:88:3a:f4:8a:5e:b2:9c:03:ac:0d:51:b3:84:
39:86:c4:dc:d9:20:76:ae:a1:5f:fe:ab:41:6c:f8:8f:78:c3:
18:52:c4:f8:2b:06:83:87:66:ee:de:f4:8c:c3:29:57:90:e8:
d7:e9:95:dd:5f:5d:78:f8:57:fd:13:76:88:5e:72:07:72:f6:
db:b2:06:4d:2c:aa:e1:f3:c1:92:a4:ef:40:1c:16:70:a1:61:
7d:bf:39:eb:44:e0:2a:96:0e:68:70:32:3b:38:82:f5:21:aa:
e6:50:7c:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 9 06:55:53 2025 by rpki-client on console.sobornost.net