Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5CxmhFZmNy6pMkdvacHdjcMUy6tzePd4QzeqwmoVeomw/0/34352e3232382e3130392e302f32342d3234203d3e20323637303539.roa
File: 34352e3232382e3130392e302f32342d3234203d3e20323637303539.roa (raw, json)
Hash identifier: 1oCDFAyxroKbMU7FxMDJcWk/ILTfwMT0I5Z4vBmcQxc=
Subject key identifier: 2B:B3:0B:81:19:A9:74:DC:AF:8E:38:13:F2:7B:B7:5B:3E:24:96:52
Certificate issuer: /CN=3E86FE3FF2EA13AFB3B8C6711DD8F4731DC4884C
Certificate serial: 026796D27504EA9D4907D4BD97D631FFE61CDF65
Authority key identifier: 3E:86:FE:3F:F2:EA:13:AF:B3:B8:C6:71:1D:D8:F4:73:1D:C4:88:4C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E86FE3FF2EA13AFB3B8C6711DD8F4731DC4884C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5CxmhFZmNy6pMkdvacHdjcMUy6tzePd4QzeqwmoVeomw/0/34352e3232382e3130392e302f32342d3234203d3e20323637303539.roa
Signing time: Mon 06 Jan 2025 18:53:58 +0000
ROA not before: Mon 06 Jan 2025 18:48:58 +0000
ROA not after: Mon 05 Jan 2026 18:53:58 +0000
asID: 267059
IP address blocks: 45.228.109.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:67:96:d2:75:04:ea:9d:49:07:d4:bd:97:d6:31:ff:e6:1c:df:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E86FE3FF2EA13AFB3B8C6711DD8F4731DC4884C
Validity
Not Before: Jan 6 18:48:58 2025 GMT
Not After : Jan 5 18:53:58 2026 GMT
Subject: CN=2BB30B8119A974DCAF8E3813F27BB75B3E249652
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:31:9f:2f:4b:26:08:56:b7:6e:4e:7b:e7:94:
cc:5d:3e:1f:c4:3a:ed:f2:14:f9:14:61:ec:e5:a5:
2d:3b:08:7a:7e:00:da:c4:26:64:2b:6a:3e:57:b4:
85:1d:62:34:02:a0:84:76:43:69:15:97:33:46:f8:
24:3c:85:a0:bb:67:67:7e:28:9e:b1:e6:f9:e7:36:
87:52:1f:1c:c5:45:01:86:a8:67:52:a2:df:6e:03:
c4:21:eb:8d:44:19:60:ff:86:ca:3c:d3:46:8e:03:
f0:a6:bf:a0:63:d2:a3:a2:be:a6:f0:92:d5:f8:a9:
f8:07:8a:9a:60:2a:7c:da:39:48:b1:37:50:a0:1c:
70:00:bf:0c:83:b9:38:e2:3d:bc:af:52:92:6c:78:
61:bd:78:7e:dd:8d:8c:88:d5:71:d8:3c:49:11:0d:
f4:ab:73:18:ec:30:51:0a:34:7c:db:5e:60:a0:eb:
23:88:92:0b:46:27:49:4e:b6:83:2c:9b:0b:5c:1a:
c1:ad:2c:c1:74:48:80:2d:58:9d:48:f8:08:80:fe:
b2:72:f2:b2:5a:72:af:9b:c7:ca:26:d0:f6:5c:44:
93:ed:bd:6c:11:d4:f2:b6:f5:f8:fe:0e:ed:86:9e:
6b:65:9f:94:53:e2:ab:0e:0f:b2:09:5e:e6:0e:46:
0e:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:B3:0B:81:19:A9:74:DC:AF:8E:38:13:F2:7B:B7:5B:3E:24:96:52
X509v3 Authority Key Identifier:
keyid:3E:86:FE:3F:F2:EA:13:AF:B3:B8:C6:71:1D:D8:F4:73:1D:C4:88:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5CxmhFZmNy6pMkdvacHdjcMUy6tzePd4QzeqwmoVeomw/0/3E86FE3FF2EA13AFB3B8C6711DD8F4731DC4884C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E86FE3FF2EA13AFB3B8C6711DD8F4731DC4884C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5CxmhFZmNy6pMkdvacHdjcMUy6tzePd4QzeqwmoVeomw/0/34352e3232382e3130392e302f32342d3234203d3e20323637303539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.228.109.0/24
Signature Algorithm: sha256WithRSAEncryption
38:3a:70:3f:d3:b4:68:8d:a7:68:65:73:05:6c:c2:54:d5:46:
e4:9d:f9:3a:61:67:be:39:2d:17:00:66:af:9a:92:62:1e:35:
f9:9d:0f:e2:56:68:2f:0b:90:91:f7:f4:ef:d8:d3:8c:be:30:
5d:fc:c9:4e:e5:a3:0b:e1:2b:87:f1:e1:7e:2a:51:2d:43:ae:
e5:74:1f:09:f6:9e:c9:b2:80:7a:dc:4e:f1:bd:6e:2a:95:56:
c3:d7:fe:50:cb:86:6d:df:af:a8:8e:44:ac:f3:72:0c:21:b2:
2f:13:39:95:fa:37:3d:e6:de:4a:6c:7f:15:06:bc:6e:d4:96:
33:8b:84:53:eb:24:1e:d3:1d:0d:88:da:5d:72:b3:d0:e9:37:
9f:25:8a:ca:55:9a:19:c3:05:d0:6f:71:d2:e6:be:c3:8d:a1:
00:04:d4:8a:78:2f:c6:b0:1a:33:70:29:0d:46:4c:e3:c0:b7:
49:e1:5e:0a:af:cc:f1:05:fb:07:3c:c4:80:c4:61:8a:b9:fe:
d5:db:de:9b:d2:52:53:4a:7b:73:cc:b1:75:23:cc:0e:3e:af:
0a:75:8e:ac:99:e4:8f:d2:0f:c6:9b:af:53:ef:19:c4:ee:41:
da:92:4b:65:aa:be:51:64:5f:e0:57:b2:64:cc:62:2a:c5:e9:
4f:a7:34:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 9 06:55:53 2025 by rpki-client on console.sobornost.net