Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5HEYRL8ykWxA5aM2vjn7jY25Xv3bqvmy9tigFBNqRkN8/0/3133382e3132312e3231362e302f32322d3332203d3e20323633343234.roa
File: 3133382e3132312e3231362e302f32322d3332203d3e20323633343234.roa (raw, json)
Hash identifier: ah9r9bJPVH1BRKt0LKOkFb4+TYXueKLYkM/kBJjC0Eg=
Subject key identifier: 23:96:53:10:84:06:87:B8:B6:ED:8D:89:81:4D:E4:0E:C2:23:3F:D5
Certificate issuer: /CN=A9E570DF80A25DDF3E53E6327D440529EF9EA523
Certificate serial: 3507B2C1E1BE92EACB60C93C3EC4F74DB13EBCFC
Authority key identifier: A9:E5:70:DF:80:A2:5D:DF:3E:53:E6:32:7D:44:05:29:EF:9E:A5:23
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9E570DF80A25DDF3E53E6327D440529EF9EA523.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5HEYRL8ykWxA5aM2vjn7jY25Xv3bqvmy9tigFBNqRkN8/0/3133382e3132312e3231362e302f32322d3332203d3e20323633343234.roa
Signing time: Sun 28 Jul 2024 21:04:44 +0000
ROA not before: Sun 28 Jul 2024 20:59:44 +0000
ROA not after: Sun 27 Jul 2025 21:04:44 +0000
asID: 263424
IP address blocks: 138.121.216.0/22 maxlen: 32
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:07:b2:c1:e1:be:92:ea:cb:60:c9:3c:3e:c4:f7:4d:b1:3e:bc:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9E570DF80A25DDF3E53E6327D440529EF9EA523
Validity
Not Before: Jul 28 20:59:44 2024 GMT
Not After : Jul 27 21:04:44 2025 GMT
Subject: CN=23965310840687B8B6ED8D89814DE40EC2233FD5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ae:34:6b:ee:72:7d:a8:1a:44:56:56:09:22:
08:b5:f6:01:6d:62:1c:42:86:b8:01:82:d8:64:ca:
84:32:94:5f:c6:62:cc:89:3c:d5:79:7a:7f:85:e2:
44:1f:8b:d6:53:2a:27:f1:db:ae:b2:6f:de:0c:bd:
08:92:5b:08:74:50:5d:30:8b:a0:7e:cb:2c:51:f9:
ca:59:6c:26:34:d5:4f:cd:c1:ee:cb:0d:a3:b0:24:
b3:5c:30:dc:47:89:f3:91:bf:ed:25:ad:66:5f:75:
2e:43:cc:ad:d2:71:54:89:09:d6:56:0e:ff:bc:4b:
da:a9:d6:e0:ba:91:ba:43:45:b3:7c:e2:cd:08:3b:
3f:28:58:90:1c:28:2b:bc:ca:e9:1a:23:b0:07:9a:
ac:e9:31:82:97:45:c2:d4:74:2d:a7:ee:c5:a4:36:
66:b2:89:78:d6:c4:f5:9a:53:83:c4:ce:ce:e8:67:
73:15:7b:55:11:75:f9:a4:51:c3:dd:31:0f:94:10:
1d:92:14:ef:d1:70:8c:35:94:a6:41:87:47:5d:38:
28:ca:99:fb:1b:ef:46:d9:c8:50:41:01:49:2b:30:
ee:cf:84:d3:7d:a1:6f:e4:8e:0d:57:86:ea:23:de:
f9:e5:35:fe:d6:cc:68:f5:18:1a:f5:af:53:c5:fb:
93:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:96:53:10:84:06:87:B8:B6:ED:8D:89:81:4D:E4:0E:C2:23:3F:D5
X509v3 Authority Key Identifier:
keyid:A9:E5:70:DF:80:A2:5D:DF:3E:53:E6:32:7D:44:05:29:EF:9E:A5:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5HEYRL8ykWxA5aM2vjn7jY25Xv3bqvmy9tigFBNqRkN8/0/A9E570DF80A25DDF3E53E6327D440529EF9EA523.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9E570DF80A25DDF3E53E6327D440529EF9EA523.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5HEYRL8ykWxA5aM2vjn7jY25Xv3bqvmy9tigFBNqRkN8/0/3133382e3132312e3231362e302f32322d3332203d3e20323633343234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.121.216.0/22
Signature Algorithm: sha256WithRSAEncryption
56:cd:a6:c9:ed:4b:a6:99:98:eb:eb:16:6d:8f:fe:a6:db:85:
87:3d:21:cf:c9:5e:18:3e:e7:c6:ae:e4:1d:b3:b3:74:f0:08:
a8:fc:af:d5:c5:ac:d3:c2:8f:ce:b7:cc:e6:42:a6:dd:45:69:
cc:f4:cd:6d:ad:0d:08:da:25:e3:fa:24:ec:14:77:5e:36:91:
2d:4d:2c:3a:04:f5:48:4b:8b:76:b8:bc:63:14:89:05:4d:5d:
85:d3:58:7b:cb:95:31:c6:ce:39:b8:22:dc:71:71:e9:71:c4:
16:5d:04:29:9a:c3:5a:55:68:72:c5:09:2a:b0:90:9b:28:12:
be:ba:7b:8c:6d:ec:26:4e:f2:73:72:1c:eb:42:20:b0:2b:fb:
e2:86:55:27:7d:99:3b:30:32:6f:0b:b4:0e:5a:ea:15:5f:57:
30:ae:b5:57:29:e1:6f:df:ea:02:ea:1a:d2:68:ee:70:53:c0:
fc:e5:fb:75:38:fe:4f:e1:0c:9a:46:46:fd:7a:b8:70:d8:78:
c0:69:50:e3:fe:88:85:c5:75:3d:11:36:a5:f5:eb:88:80:6f:
9c:33:3f:48:80:d8:e0:11:84:a1:c6:af:4b:ab:02:ec:19:a4:
d9:6d:8d:16:4a:88:91:f2:9d:47:af:25:de:3c:32:15:89:93:
41:de:8b:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 21 15:02:10 2025 by rpki-client on console.sobornost.net