Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8wLZUK7waTZjCjSnZbvwjJGP1yLk8ifWoi31HJqj1u74/0/34352e3139312e32322e302f32342d3234203d3e20323639363634.roa
File: 34352e3139312e32322e302f32342d3234203d3e20323639363634.roa (raw, json)
Hash identifier: w+UPj7Gl9Ps2t9wFi9jsxJtMk+G2Ea/sN5qbJMQB7XM=
Subject key identifier: 54:A8:A0:7D:08:25:34:85:3B:7A:98:F1:7E:25:2A:C2:60:6B:30:AB
Certificate issuer: /CN=4F366058E8C8DCE8E24C1CBB8D8F8A282A6FE59D
Certificate serial: 5B09FCC6339B51EC56D9D7B7E6F34C2372BEAE66
Authority key identifier: 4F:36:60:58:E8:C8:DC:E8:E2:4C:1C:BB:8D:8F:8A:28:2A:6F:E5:9D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F366058E8C8DCE8E24C1CBB8D8F8A282A6FE59D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8wLZUK7waTZjCjSnZbvwjJGP1yLk8ifWoi31HJqj1u74/0/34352e3139312e32322e302f32342d3234203d3e20323639363634.roa
Signing time: Mon 07 Apr 2025 19:56:49 +0000
ROA not before: Mon 07 Apr 2025 19:51:49 +0000
ROA not after: Mon 06 Apr 2026 19:56:49 +0000
asID: 269664
IP address blocks: 45.191.22.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:09:fc:c6:33:9b:51:ec:56:d9:d7:b7:e6:f3:4c:23:72:be:ae:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4F366058E8C8DCE8E24C1CBB8D8F8A282A6FE59D
Validity
Not Before: Apr 7 19:51:49 2025 GMT
Not After : Apr 6 19:56:49 2026 GMT
Subject: CN=54A8A07D082534853B7A98F17E252AC2606B30AB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:5d:71:74:db:df:c5:33:00:8e:b7:ff:5f:d3:
52:65:cc:6e:1e:73:51:b5:60:ef:73:87:9f:36:a4:
5c:af:a0:5e:0d:a2:e6:d5:7e:c3:c2:36:f1:b0:c1:
c8:64:91:ac:7e:d9:60:11:6c:85:0e:bb:b3:6a:fc:
cd:79:40:64:e4:bb:7e:f2:3a:0d:98:b7:ed:7f:6b:
11:5a:0f:cc:61:a4:1e:b0:e5:be:1d:43:ff:5a:e7:
cd:8b:87:41:4e:3b:ac:ac:b0:d5:41:14:40:24:de:
48:b4:ae:67:ed:cf:24:21:7f:a6:a7:37:f4:6f:7b:
33:3b:bf:33:6c:38:40:15:85:a1:36:52:01:13:39:
5b:4b:85:a4:00:d9:16:ea:be:66:ae:50:5d:55:be:
b5:68:8b:81:1c:0d:c6:89:f2:bc:52:07:43:39:1b:
e6:dc:4f:59:eb:d2:16:4c:55:83:d9:44:5f:20:97:
6c:b2:c1:e2:3e:36:62:db:88:61:9b:f1:be:2a:5b:
3a:42:10:df:7a:92:5b:c7:f6:a8:2d:cd:4e:ee:cf:
45:15:0a:29:5b:73:20:a9:e5:e1:47:86:f0:13:65:
d9:b5:c8:97:47:bf:ab:c1:57:bf:6e:a7:cd:fa:86:
f6:b2:31:5d:a0:a9:97:5d:1e:f1:12:2a:8f:44:88:
1a:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:A8:A0:7D:08:25:34:85:3B:7A:98:F1:7E:25:2A:C2:60:6B:30:AB
X509v3 Authority Key Identifier:
keyid:4F:36:60:58:E8:C8:DC:E8:E2:4C:1C:BB:8D:8F:8A:28:2A:6F:E5:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8wLZUK7waTZjCjSnZbvwjJGP1yLk8ifWoi31HJqj1u74/0/4F366058E8C8DCE8E24C1CBB8D8F8A282A6FE59D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F366058E8C8DCE8E24C1CBB8D8F8A282A6FE59D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8wLZUK7waTZjCjSnZbvwjJGP1yLk8ifWoi31HJqj1u74/0/34352e3139312e32322e302f32342d3234203d3e20323639363634.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.191.22.0/24
Signature Algorithm: sha256WithRSAEncryption
05:34:87:9b:37:92:be:78:92:d0:e6:18:d4:c0:2a:92:46:3f:
c8:2c:15:ae:c3:52:47:50:99:cf:5a:db:06:3c:ca:30:1b:52:
90:0d:0c:38:f0:8c:0d:98:41:bd:47:72:7d:94:b1:bd:e2:4d:
35:85:36:28:7b:75:87:47:b5:12:7c:ab:ca:90:34:7f:ba:b8:
a3:97:99:c6:e1:1f:67:73:13:c5:2e:15:13:9f:11:53:65:92:
80:a7:f3:c0:37:9d:a6:dc:2a:a7:14:7a:2d:78:5f:89:28:5c:
32:9a:cf:e3:86:a4:c8:87:78:b6:5c:4e:6f:91:c9:50:cd:dd:
da:9a:45:5c:04:17:05:75:cb:e7:fc:3a:29:79:5c:ff:14:04:
a7:b3:d3:53:82:ce:6f:5d:67:65:df:89:04:2d:87:4c:27:f8:
79:c0:3e:c7:76:09:ec:17:7b:4d:86:7a:7e:d6:9d:e0:c2:b7:
3a:7f:74:e2:d1:b2:8d:77:b8:1a:2c:41:1c:1d:28:b5:42:51:
a4:11:b9:45:72:79:7f:06:0c:04:e1:8c:0a:c5:8e:54:43:75:
59:46:82:7e:fb:d9:0d:94:c1:df:9c:d5:98:4a:cc:58:36:8c:
18:41:c6:61:57:73:b8:80:45:37:d7:ce:14:b3:92:96:c0:12:
f7:d5:c4:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 03:48:31 2025 by rpki-client on console.sobornost.net