Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/3133382e3138352e3235342e302f32332d3233203d3e20323633393430.roa
File: 3133382e3138352e3235342e302f32332d3233203d3e20323633393430.roa (raw, json)
Hash identifier: 3w5VWhSwLj3V9FhIbrsTqWmQM7mGxvwAjPNbz+brKa8=
Subject key identifier: 29:C6:3F:03:09:30:81:9C:60:DB:5B:60:50:7B:47:1F:70:CF:88:09
Certificate issuer: /CN=1C2736B7CFC9C7EA5B9CA9D4E00280396ADF13B0
Certificate serial: 18F545ED8186C2F0F0F17E530E8B340BD7839518
Authority key identifier: 1C:27:36:B7:CF:C9:C7:EA:5B:9C:A9:D4:E0:02:80:39:6A:DF:13:B0
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C2736B7CFC9C7EA5B9CA9D4E00280396ADF13B0.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/3133382e3138352e3235342e302f32332d3233203d3e20323633393430.roa
Signing time: Wed 09 Apr 2025 14:26:37 +0000
ROA not before: Wed 09 Apr 2025 14:21:37 +0000
ROA not after: Wed 08 Apr 2026 14:26:37 +0000
asID: 263940
IP address blocks: 138.185.254.0/23 maxlen: 23
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:f5:45:ed:81:86:c2:f0:f0:f1:7e:53:0e:8b:34:0b:d7:83:95:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1C2736B7CFC9C7EA5B9CA9D4E00280396ADF13B0
Validity
Not Before: Apr 9 14:21:37 2025 GMT
Not After : Apr 8 14:26:37 2026 GMT
Subject: CN=29C63F030930819C60DB5B60507B471F70CF8809
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:0d:ce:0f:bd:ee:59:e7:75:9e:cb:38:62:43:
ca:b1:15:18:e6:6c:f6:86:b1:80:8c:42:57:2d:9c:
54:4d:8a:32:96:4b:a9:41:5c:af:d6:ec:f0:ff:78:
5b:f9:44:49:bb:07:98:c3:9d:a6:fc:a5:42:09:57:
4b:b7:2c:b6:72:42:45:64:69:22:d5:aa:18:cd:5a:
85:ae:71:5f:21:f4:2d:dd:ea:88:e5:d7:7c:23:0f:
a5:13:5e:72:b7:a2:a3:3a:80:c4:c9:65:99:81:dd:
bf:99:20:68:34:95:35:ad:fe:c0:ae:c8:e7:ef:1a:
b4:ee:de:6d:09:44:f2:c0:ab:b1:54:2b:c3:42:5c:
35:c9:ca:a1:74:b5:d9:ae:ca:da:bc:b4:ff:2b:a9:
2e:13:78:61:d9:40:94:1c:d0:e9:de:e2:24:4a:27:
46:9a:d4:38:67:3c:bb:84:f9:18:e1:46:aa:f7:6b:
d7:d6:06:bf:ae:76:07:6c:10:34:51:b5:e3:39:0b:
70:f8:35:3c:0d:47:38:f3:e5:06:ca:40:67:f8:43:
4f:43:81:3c:0d:d6:23:c1:b5:ad:82:85:05:71:b3:
22:04:c3:be:87:ba:ea:30:41:d3:2a:d5:57:92:64:
58:f1:e8:c2:29:65:a4:c7:54:29:ab:32:9f:0c:fe:
99:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:C6:3F:03:09:30:81:9C:60:DB:5B:60:50:7B:47:1F:70:CF:88:09
X509v3 Authority Key Identifier:
keyid:1C:27:36:B7:CF:C9:C7:EA:5B:9C:A9:D4:E0:02:80:39:6A:DF:13:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/1C2736B7CFC9C7EA5B9CA9D4E00280396ADF13B0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C2736B7CFC9C7EA5B9CA9D4E00280396ADF13B0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/3133382e3138352e3235342e302f32332d3233203d3e20323633393430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.185.254.0/23
Signature Algorithm: sha256WithRSAEncryption
3c:b7:3d:59:3d:11:de:a2:73:16:56:99:a6:8c:65:47:05:1f:
11:6d:4f:b5:2a:f2:ac:df:6d:75:8e:ca:12:2e:af:ec:95:21:
ef:be:fc:eb:4f:d1:fa:57:21:2b:c9:87:7a:aa:8e:fe:35:4e:
a0:83:35:32:2e:e8:6d:57:36:93:0e:fa:61:0e:3b:c4:e9:5f:
05:c9:1f:2a:4b:31:97:2b:df:7d:26:ea:a7:5b:ab:30:dc:76:
5b:20:68:0d:30:ac:d5:f0:65:91:43:68:ee:12:0b:eb:fc:3c:
95:07:4b:4f:f3:76:d9:75:0b:2d:f9:2c:de:8e:63:84:e6:15:
e8:f8:6a:70:9f:5c:90:88:7a:f4:b1:ee:d2:82:9b:15:25:cb:
bc:9e:72:ff:40:0f:18:93:4d:6c:ce:ba:7f:13:c7:ec:34:b2:
65:6e:68:e3:7c:68:0a:3e:d3:f7:3c:01:09:12:94:f0:02:bb:
48:6a:3e:0c:f1:6c:a6:84:34:95:71:fc:0b:7a:2e:7e:63:63:
6e:69:61:19:ec:be:cd:91:44:70:0a:fa:25:b5:e1:08:88:db:
d4:84:75:2f:3b:05:5a:b5:74:ca:af:63:5e:97:24:d9:15:db:
3d:12:e1:ae:24:bb:f4:52:af:10:a0:a7:0a:90:13:c0:8d:0d:
aa:16:ab:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:13:35 2025 by rpki-client on console.sobornost.net