Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/1/323830343a3163633a3a2f33322d3438203d3e20313938393439.roa
File: 323830343a3163633a3a2f33322d3438203d3e20313938393439.roa (raw, json)
Hash identifier: CxQbkOMS11xpq4wGheQSVjsvmoaEKIlH8FavJ/E3NwU=
Subject key identifier: 5A:6B:68:3A:F3:E1:39:6D:D8:4A:CC:52:BB:AB:6E:5E:C1:55:4A:A2
Certificate issuer: /CN=4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0
Certificate serial: 3E09F522E45BC0213BAE8C432FA06399412CA2C9
Authority key identifier: 4B:13:DB:64:BC:C2:5C:9F:A9:9F:A2:B9:DF:AC:49:61:D3:DC:09:E0
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.cer
Subject info access: rsync://rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/1/323830343a3163633a3a2f33322d3438203d3e20313938393439.roa
Signing time: Wed 16 Apr 2025 00:29:40 +0000
ROA not before: Wed 16 Apr 2025 00:24:40 +0000
ROA not after: Wed 15 Apr 2026 00:29:40 +0000
asID: 198949
IP address blocks: 2804:1cc::/32 maxlen: 48
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:09:f5:22:e4:5b:c0:21:3b:ae:8c:43:2f:a0:63:99:41:2c:a2:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0
Validity
Not Before: Apr 16 00:24:40 2025 GMT
Not After : Apr 15 00:29:40 2026 GMT
Subject: CN=5A6B683AF3E1396DD84ACC52BBAB6E5EC1554AA2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:97:e9:52:f4:b4:c8:f9:d4:79:62:83:28:6d:
39:68:48:98:5d:0d:5e:f2:a6:80:54:91:84:2c:1e:
ba:b0:54:ac:6b:f0:b7:c8:39:82:5b:cc:ee:55:5a:
14:24:f1:5f:9b:ca:29:39:d2:0d:ce:37:4d:08:92:
23:20:90:0e:ca:39:ab:2c:5f:a2:1e:1f:df:e2:d6:
eb:5b:ec:dc:73:07:98:ef:0f:dc:49:58:35:b3:4b:
18:24:35:9b:72:dc:0a:62:e8:e9:f5:05:a6:11:42:
9b:4a:b0:58:d3:30:8d:02:84:df:b4:09:12:ba:fe:
e1:78:68:7e:59:6f:81:e1:6d:23:ba:46:7c:ca:01:
56:12:b8:dc:f8:28:05:40:4e:a5:e3:8f:b0:55:30:
d4:fc:af:4e:89:64:a6:1b:17:20:a9:f5:c1:c0:03:
14:db:39:e2:c9:92:4e:3b:3c:2a:d4:f8:14:bd:2d:
a3:97:e4:2b:53:aa:2d:0b:98:5e:27:e0:e5:90:2f:
8a:70:05:09:20:84:eb:f6:a0:69:88:4c:08:7b:be:
29:69:4e:e6:6a:90:a9:2f:3e:be:86:46:8d:48:30:
fc:c5:c9:08:03:bd:8b:a9:90:7a:81:c4:04:78:74:
6c:20:0a:1d:88:0a:12:a5:32:a1:c6:30:bb:34:61:
fd:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:6B:68:3A:F3:E1:39:6D:D8:4A:CC:52:BB:AB:6E:5E:C1:55:4A:A2
X509v3 Authority Key Identifier:
keyid:4B:13:DB:64:BC:C2:5C:9F:A9:9F:A2:B9:DF:AC:49:61:D3:DC:09:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/1/323830343a3163633a3a2f33322d3438203d3e20313938393439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:1cc::/32
Signature Algorithm: sha256WithRSAEncryption
40:10:06:c0:72:2e:ce:6c:fe:79:3d:e0:2c:0b:65:b8:64:b4:
c6:e7:3c:75:51:43:59:66:43:33:c1:86:d0:fc:74:65:78:be:
23:4e:0d:a0:36:b4:84:20:ff:22:47:5d:33:3e:3d:70:ed:84:
56:2d:c5:5a:33:53:97:ab:99:69:20:0a:50:88:75:db:2a:aa:
94:7a:92:4b:51:ca:fd:ef:44:ab:49:9c:84:bc:d1:2a:ab:70:
7d:c5:45:4b:9d:06:80:ca:1b:66:8f:bc:bf:35:97:ba:99:41:
9a:8c:b5:5e:dc:06:92:1b:bf:ab:e0:e9:48:af:71:33:02:0b:
bf:f7:a9:fe:6b:2f:df:f7:a7:86:06:a4:49:27:82:23:46:8e:
55:44:2f:bb:61:f3:5d:fe:23:89:b0:4f:cd:91:ce:51:08:94:
2a:7d:cb:49:20:72:0e:09:99:1b:d2:dc:44:4a:73:60:cd:2c:
02:71:16:22:20:48:20:69:ab:b7:3c:d8:34:fc:05:a1:67:a8:
fa:ea:2a:36:1f:da:b2:7b:1f:38:b6:36:3e:cc:9a:f6:98:64:
fb:83:ab:4d:fa:7f:b0:5b:19:ee:ad:21:e5:bc:98:aa:11:f8:
af:d6:59:68:a6:aa:b0:20:b4:65:c9:7d:0e:74:11:9e:92:4f:
44:60:3f:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 04:18:51 2025 by rpki-client on console.sobornost.net