Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8gzz5TKKNpn3554Gog6UamkabYLrg8PApTW9ucKind8X/0/34352e3136352e3133312e302f32342d3234203d3e20323632383939.roa
File: 34352e3136352e3133312e302f32342d3234203d3e20323632383939.roa (raw, json)
Hash identifier: JzlW18ndtW34mGtDGobgHyt+KHdH2c1ySiJL+sjnZnQ=
Subject key identifier: F7:3B:B6:79:BF:7A:8E:31:18:F3:17:48:28:17:7C:0E:4C:3D:73:34
Certificate issuer: /CN=3073B425FD21597EA2229B04AED47720BF469CE6
Certificate serial: 537949EA8AD4E6CE1CB779ECCA8E8649EB9F806E
Authority key identifier: 30:73:B4:25:FD:21:59:7E:A2:22:9B:04:AE:D4:77:20:BF:46:9C:E6
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3073B425FD21597EA2229B04AED47720BF469CE6.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8gzz5TKKNpn3554Gog6UamkabYLrg8PApTW9ucKind8X/0/34352e3136352e3133312e302f32342d3234203d3e20323632383939.roa
Signing time: Wed 09 Apr 2025 14:20:54 +0000
ROA not before: Wed 09 Apr 2025 14:15:54 +0000
ROA not after: Wed 08 Apr 2026 14:20:54 +0000
asID: 262899
IP address blocks: 45.165.131.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:79:49:ea:8a:d4:e6:ce:1c:b7:79:ec:ca:8e:86:49:eb:9f:80:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3073B425FD21597EA2229B04AED47720BF469CE6
Validity
Not Before: Apr 9 14:15:54 2025 GMT
Not After : Apr 8 14:20:54 2026 GMT
Subject: CN=F73BB679BF7A8E3118F3174828177C0E4C3D7334
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:91:84:b5:a2:c3:3a:76:3c:e0:ef:f2:d3:ce:
75:37:b3:50:98:27:02:c5:5a:b7:dc:c7:8e:06:27:
d3:e0:93:5b:c1:16:a9:ae:77:0c:9b:c5:27:f6:e9:
29:00:73:26:ad:46:2f:77:2d:9a:95:07:4d:80:27:
e4:02:ca:fa:6f:4a:4d:1e:76:f7:da:7a:95:9a:e1:
00:bb:0a:2d:be:6e:f4:da:3d:3a:50:01:f6:e3:83:
49:1e:0a:88:4d:af:d1:3e:21:dc:d5:19:3d:0f:a7:
cd:59:ba:1a:08:4a:3e:b9:13:a2:cc:41:d2:b6:53:
1c:72:bb:a3:65:c0:f8:60:3a:2b:e7:50:2e:01:c0:
12:53:56:14:00:9e:9b:31:bc:18:99:63:74:90:ef:
d5:bd:c0:1a:a8:f7:50:f9:c1:58:9b:0b:36:35:c6:
9b:88:4d:06:cd:c1:ba:67:3b:6e:3d:46:40:36:d8:
2b:ea:40:64:ba:50:7e:85:5b:d1:19:a1:f6:76:5f:
13:3c:da:b8:4b:24:7c:31:9e:5d:c6:1a:a5:eb:a3:
17:6f:10:c3:57:c4:e6:12:98:40:63:ba:90:c9:a3:
4c:97:ea:6f:85:12:a5:98:e5:f2:ca:89:38:72:30:
42:df:7b:98:d0:80:70:31:fc:5c:75:c4:5e:c9:64:
ed:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:3B:B6:79:BF:7A:8E:31:18:F3:17:48:28:17:7C:0E:4C:3D:73:34
X509v3 Authority Key Identifier:
keyid:30:73:B4:25:FD:21:59:7E:A2:22:9B:04:AE:D4:77:20:BF:46:9C:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8gzz5TKKNpn3554Gog6UamkabYLrg8PApTW9ucKind8X/0/3073B425FD21597EA2229B04AED47720BF469CE6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3073B425FD21597EA2229B04AED47720BF469CE6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8gzz5TKKNpn3554Gog6UamkabYLrg8PApTW9ucKind8X/0/34352e3136352e3133312e302f32342d3234203d3e20323632383939.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.165.131.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:a3:6b:23:42:e3:dd:1f:6e:5d:7e:01:18:37:7b:47:33:30:
aa:26:75:91:3a:f8:53:67:bd:9f:cf:66:7e:9f:f4:dd:7b:a3:
e7:fe:18:76:2b:74:26:9f:ab:22:7e:d2:4c:f3:3a:f4:f4:a5:
c5:aa:fb:50:42:c4:e5:44:12:58:e0:82:53:d9:ed:ca:5c:58:
ba:9c:6f:0f:14:53:9a:4f:f6:ac:3b:88:ff:69:12:0d:5f:50:
d6:b7:24:a4:63:d1:e4:8c:b4:f4:47:a0:43:7b:cd:b5:76:d1:
e7:16:59:8b:20:f4:03:c0:7e:45:eb:44:36:a3:ad:9d:74:2b:
c3:ca:ce:20:95:93:1e:c4:0b:51:d6:b6:e7:6e:e1:4c:b1:eb:
76:84:86:ce:56:42:9d:5f:27:bb:94:61:2a:ce:c4:6b:c4:47:
a2:66:fc:ee:6a:34:40:e9:13:69:25:c9:cf:50:ef:68:e2:73:
b8:8d:95:b8:41:ef:65:21:dc:cc:7d:be:30:6e:e8:c6:ca:1e:
b2:58:9b:3e:8e:60:5f:76:95:aa:c1:dc:1b:03:34:21:a6:df:
80:bf:09:a7:75:97:3a:98:89:d5:03:a6:4b:ca:e8:e5:e5:86:
4c:83:4c:69:2e:f4:6e:20:f5:86:ea:4c:0d:9d:7b:6b:d0:b2:
36:46:0e:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:13:35 2025 by rpki-client on console.sobornost.net