Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CMJhtV8NdmGXqtXZyZLuhAwQZkXNMoBPPi2C7cxHYVYh/0/34352e3232362e3134332e302f32342d3234203d3e20323636393833.roa
File: 34352e3232362e3134332e302f32342d3234203d3e20323636393833.roa (raw, json)
Hash identifier: lXO1XD7QIPVIeJVAVCE+7dImBP7gliCiYOpBtHcF5d4=
Subject key identifier: FD:2F:0E:4F:5B:F5:38:B6:A6:11:C9:94:AF:0D:15:13:50:68:CB:AA
Certificate issuer: /CN=FC7B655C6372CB73D708B42D83FE2B62B3EEF17D
Certificate serial: 340BDA84124E57A9360562C490811DF05EB35D66
Authority key identifier: FC:7B:65:5C:63:72:CB:73:D7:08:B4:2D:83:FE:2B:62:B3:EE:F1:7D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FC7B655C6372CB73D708B42D83FE2B62B3EEF17D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CMJhtV8NdmGXqtXZyZLuhAwQZkXNMoBPPi2C7cxHYVYh/0/34352e3232362e3134332e302f32342d3234203d3e20323636393833.roa
Signing time: Thu 10 Apr 2025 12:10:33 +0000
ROA not before: Thu 10 Apr 2025 12:05:33 +0000
ROA not after: Thu 09 Apr 2026 12:10:33 +0000
asID: 266983
IP address blocks: 45.226.143.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:0b:da:84:12:4e:57:a9:36:05:62:c4:90:81:1d:f0:5e:b3:5d:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FC7B655C6372CB73D708B42D83FE2B62B3EEF17D
Validity
Not Before: Apr 10 12:05:33 2025 GMT
Not After : Apr 9 12:10:33 2026 GMT
Subject: CN=FD2F0E4F5BF538B6A611C994AF0D15135068CBAA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:5d:f2:14:9e:49:ca:ef:5f:f3:ae:29:b8:b4:
b8:71:0a:e4:a5:97:be:d4:2d:19:d9:39:ee:92:16:
01:3a:4a:ac:f0:27:c9:59:6c:c8:e0:45:ad:99:c7:
4b:33:a4:55:5a:eb:4e:33:99:09:6c:6e:f3:76:70:
86:c9:b7:c8:5d:e9:d1:2a:99:15:af:55:b0:38:d6:
6f:10:9c:9c:69:57:94:b0:cc:b0:98:09:92:5e:f3:
d6:ea:20:6a:16:b2:a5:61:a6:8c:8f:d0:49:da:ec:
0a:a6:3a:b9:b2:a7:53:40:59:58:5b:d6:a5:9d:16:
ee:da:c8:7f:d7:72:45:4b:d2:5c:dc:28:58:ae:10:
b4:d0:8a:34:26:53:3d:1f:6a:6b:f6:a9:a4:a0:06:
d3:3d:e2:71:2d:a7:d8:2b:6b:cf:34:3d:db:82:01:
d4:4a:e7:d5:29:5e:12:fd:51:e9:bc:fc:ea:ed:7f:
ff:56:76:58:05:73:9d:10:cf:13:d1:1f:24:b7:be:
30:a9:81:e5:be:6e:33:d7:13:32:47:b5:7d:f9:6b:
d8:25:c5:85:8a:c7:7f:d0:8b:24:29:12:85:38:2d:
ae:4e:f8:86:36:6b:e1:de:6f:8a:55:d8:1b:e2:f3:
24:06:f4:17:d2:dc:18:07:76:64:62:58:95:5e:aa:
a8:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:2F:0E:4F:5B:F5:38:B6:A6:11:C9:94:AF:0D:15:13:50:68:CB:AA
X509v3 Authority Key Identifier:
keyid:FC:7B:65:5C:63:72:CB:73:D7:08:B4:2D:83:FE:2B:62:B3:EE:F1:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CMJhtV8NdmGXqtXZyZLuhAwQZkXNMoBPPi2C7cxHYVYh/0/FC7B655C6372CB73D708B42D83FE2B62B3EEF17D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FC7B655C6372CB73D708B42D83FE2B62B3EEF17D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CMJhtV8NdmGXqtXZyZLuhAwQZkXNMoBPPi2C7cxHYVYh/0/34352e3232362e3134332e302f32342d3234203d3e20323636393833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.226.143.0/24
Signature Algorithm: sha256WithRSAEncryption
46:9c:97:71:be:5e:99:5a:80:b3:f0:5f:1f:d8:64:ce:26:85:
76:f8:0c:af:b2:87:01:e3:65:fa:06:33:2c:b5:6a:e1:18:20:
21:0c:28:90:71:18:87:c0:48:78:68:7d:a7:03:75:41:2e:6c:
55:f0:ca:52:29:39:cb:db:18:5a:0d:2b:ad:b8:a7:1c:39:4a:
c4:61:28:c7:84:fb:8c:28:e6:20:02:1f:57:4f:bf:8f:7f:f2:
00:b3:6b:cb:56:0d:9a:83:8d:b5:42:f0:a5:c8:93:6d:f6:e8:
ee:1f:69:da:39:d6:2e:f0:3d:e5:a8:e4:f7:43:7f:62:73:76:
ed:f9:a1:86:ac:7e:18:f1:21:bf:23:bb:8c:87:74:21:24:dd:
e7:d2:f5:47:7c:5c:35:b4:69:dd:24:05:f5:ab:c3:56:76:31:
69:69:34:1a:84:86:74:f3:b7:c6:37:b4:44:df:5e:ec:3d:0a:
96:7e:87:1b:24:47:1a:52:7b:1f:f7:9a:91:76:a9:88:7a:99:
90:6a:8f:dc:c3:fc:33:b8:ef:bf:9e:51:c8:c9:56:1b:c3:f4:
a4:ab:0e:0f:7d:41:16:2c:85:44:52:b9:ef:59:bd:ff:18:54:
ab:39:42:12:ce:59:40:0c:85:05:6c:7e:2f:78:15:54:1d:ae:
9f:a0:8f:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:13:35 2025 by rpki-client on console.sobornost.net