Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/AkbjVRXVpXvEX11UtRHoBJQjp5tukBoNsnh8zxug6gYB/0/3137372e31312e3133382e302f32332d3233203d3e203533323039.roa
File: 3137372e31312e3133382e302f32332d3233203d3e203533323039.roa (raw, json)
Hash identifier: 9l7Rki8AQ90omzLVzc+rzBZyLi16yEG4iBiIiLQUYsc=
Subject key identifier: 8E:52:F3:B2:C2:7A:A0:02:05:C0:9D:64:FA:48:8F:F0:BA:8C:C0:17
Certificate issuer: /CN=B2D2010B208ADA303E84ADA92145BD21A0BB1822
Certificate serial: 08D85AF9BD6D2052AC100C003FC0523255DFEABF
Authority key identifier: B2:D2:01:0B:20:8A:DA:30:3E:84:AD:A9:21:45:BD:21:A0:BB:18:22
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B2D2010B208ADA303E84ADA92145BD21A0BB1822.cer
Subject info access: rsync://rpki-repo.registro.br/repo/AkbjVRXVpXvEX11UtRHoBJQjp5tukBoNsnh8zxug6gYB/0/3137372e31312e3133382e302f32332d3233203d3e203533323039.roa
Signing time: Tue 06 Aug 2024 17:59:33 +0000
ROA not before: Tue 06 Aug 2024 17:54:33 +0000
ROA not after: Tue 05 Aug 2025 17:59:33 +0000
asID: 53209
IP address blocks: 177.11.138.0/23 maxlen: 23
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:d8:5a:f9:bd:6d:20:52:ac:10:0c:00:3f:c0:52:32:55:df:ea:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B2D2010B208ADA303E84ADA92145BD21A0BB1822
Validity
Not Before: Aug 6 17:54:33 2024 GMT
Not After : Aug 5 17:59:33 2025 GMT
Subject: CN=8E52F3B2C27AA00205C09D64FA488FF0BA8CC017
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:8a:08:64:36:ad:5e:a0:f1:de:0a:7d:60:58:
68:cf:14:0e:62:20:58:a5:eb:7c:70:83:27:dc:75:
ff:e8:d4:15:d6:c7:10:73:ec:15:a9:ea:5d:df:4a:
fe:ea:96:af:f1:9e:d9:5a:72:a0:a3:42:86:62:65:
bd:ae:66:de:e1:f6:13:f8:ef:5b:b4:d1:3e:bb:97:
40:e9:55:88:e9:2e:94:d8:1e:12:4f:c6:ba:ac:fb:
f8:60:3d:bb:b0:e8:0b:52:4e:ed:b1:19:5a:8a:ca:
13:01:60:f7:27:c1:30:01:a2:26:c3:b9:3c:c7:49:
39:e6:2d:b2:2c:94:fc:e7:2f:d0:ab:d0:c0:d6:aa:
26:b1:29:40:d5:d0:b2:75:91:fd:e8:a5:54:ea:3d:
b1:24:e1:e4:b1:f9:1c:08:c2:8f:9e:9f:bb:a4:a2:
74:71:6c:96:bd:77:97:49:58:92:8c:20:37:b6:64:
27:d8:40:1e:b8:09:dd:0c:62:7e:04:4d:cf:0c:f0:
fd:e2:5b:3d:50:6c:0a:9f:21:ba:86:2b:bf:b8:1c:
56:af:5a:56:41:00:ab:00:64:bb:79:4d:1e:a2:bf:
88:6d:70:02:67:ec:62:ec:1b:d9:38:fa:09:10:1c:
41:ee:be:95:20:5c:c8:ef:36:ee:74:94:db:a2:eb:
7d:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:52:F3:B2:C2:7A:A0:02:05:C0:9D:64:FA:48:8F:F0:BA:8C:C0:17
X509v3 Authority Key Identifier:
keyid:B2:D2:01:0B:20:8A:DA:30:3E:84:AD:A9:21:45:BD:21:A0:BB:18:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/AkbjVRXVpXvEX11UtRHoBJQjp5tukBoNsnh8zxug6gYB/0/B2D2010B208ADA303E84ADA92145BD21A0BB1822.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B2D2010B208ADA303E84ADA92145BD21A0BB1822.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/AkbjVRXVpXvEX11UtRHoBJQjp5tukBoNsnh8zxug6gYB/0/3137372e31312e3133382e302f32332d3233203d3e203533323039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.11.138.0/23
Signature Algorithm: sha256WithRSAEncryption
29:77:c7:2e:76:01:f2:ce:ff:53:d3:a4:58:8a:f0:5d:0e:8c:
d5:7a:24:98:99:d5:cf:50:50:d1:f2:43:fb:50:ee:b0:97:1d:
99:cd:e4:0d:c6:7f:0d:c3:fe:a2:df:87:a0:08:22:36:3b:64:
94:41:9a:74:bb:43:7e:ad:23:0c:4a:5c:a5:ec:82:49:26:f3:
2d:1e:9d:4b:74:09:54:52:26:7f:fc:4b:9b:a0:94:fb:04:79:
d9:23:4c:2a:2c:cb:83:6f:91:c9:a3:7b:e2:37:a1:18:77:56:
d3:25:9f:ef:1c:1d:c9:fb:1d:a3:dd:a0:bf:bc:c8:43:0c:f7:
93:3a:12:ad:79:23:eb:51:92:d9:e7:11:8f:4d:73:95:6c:68:
df:61:52:32:d9:81:52:30:3d:68:13:06:6e:ae:0c:6d:96:11:
92:e1:c0:49:d5:0c:ba:32:d0:9c:f9:af:a3:bd:6c:27:5b:41:
0a:4e:d0:52:68:af:e2:26:3c:a2:1f:66:23:8e:f1:77:1d:e4:
07:3a:30:c7:81:37:19:82:c7:24:42:8d:cc:16:27:bc:0f:67:
1b:03:52:8e:39:2a:30:60:19:6a:e7:a4:38:0d:12:5b:35:99:
f3:87:74:b7:cc:9b:1c:7e:ad:fe:b9:65:3a:dd:fa:a9:71:03:
42:fa:04:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 9 16:05:28 2024 by rpki-client on console.sobornost.net