Route Origin Authorization
$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6261303a3a2f34342d3438203d3e20313335333935.roa
File: 323630323a666564613a6261303a3a2f34342d3438203d3e20313335333935.roa (raw, json)
Hash identifier: 0+A1VzuUKE2JJDNcux/S7glAJom/l045c4JqELIgwY8=
Subject key identifier: 82:DA:23:CF:EA:13:77:DE:A7:00:B9:4D:44:4F:64:07:E9:3B:C6:D2
Certificate issuer: /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
Certificate serial: 27D346EC779995675A4EED2ED954CDEE9BC779FD
Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
Subject info access: rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6261303a3a2f34342d3438203d3e20313335333935.roa
Signing time: Mon 15 Jul 2024 08:50:08 +0000
ROA not before: Mon 15 Jul 2024 08:45:08 +0000
ROA not after: Mon 14 Jul 2025 08:50:08 +0000
asID: 135395
IP address blocks: 2602:feda:ba0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:d3:46:ec:77:99:95:67:5a:4e:ed:2e:d9:54:cd:ee:9b:c7:79:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
Validity
Not Before: Jul 15 08:45:08 2024 GMT
Not After : Jul 14 08:50:08 2025 GMT
Subject: CN=82DA23CFEA1377DEA700B94D444F6407E93BC6D2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b5:6b:ab:d0:d9:64:83:d7:31:b3:54:c4:80:
c2:69:8a:f6:d5:4e:d9:aa:2e:85:98:c2:de:59:75:
5c:cd:01:9b:37:e7:af:5b:3c:b6:43:46:58:ec:d2:
d3:06:c7:bd:46:79:ab:e9:b1:dc:a2:98:34:e1:11:
92:f0:61:5e:ec:fa:37:df:b3:2c:3a:82:73:b4:03:
fa:b2:9f:3f:98:66:fa:38:ba:44:94:ee:bd:79:f1:
7e:3f:3b:c6:6a:d2:40:4a:43:fb:d3:30:a0:69:b8:
47:39:fa:6d:4d:16:89:e2:67:b8:4b:70:9c:10:a8:
a4:6a:44:0f:65:4e:28:65:9c:41:41:4f:47:ba:d5:
74:75:e3:81:53:14:80:a8:cf:9d:1b:17:36:e3:cd:
c5:30:1e:da:b3:35:26:7e:f4:40:6f:38:ed:b6:65:
04:52:20:d9:ec:de:52:53:38:5c:48:88:ee:4b:d6:
c3:ac:15:b6:33:58:cc:57:f8:c4:97:19:e3:3f:a0:
6f:f9:12:3e:13:ad:f7:39:ce:5e:8d:c8:b2:4f:04:
47:e3:6c:82:c6:8b:77:6f:7c:4b:91:8c:98:bc:7a:
bb:ce:47:0b:5c:22:19:ff:6c:5c:73:98:7d:c4:c9:
18:0c:9a:7d:83:27:98:37:dc:bd:85:e8:41:77:48:
cb:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:DA:23:CF:EA:13:77:DE:A7:00:B9:4D:44:4F:64:07:E9:3B:C6:D2
X509v3 Authority Key Identifier:
keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
Subject Information Access:
Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6261303a3a2f34342d3438203d3e20313335333935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:feda:ba0::/44
Signature Algorithm: sha256WithRSAEncryption
16:5c:69:70:87:92:3b:bf:55:f4:8b:de:07:d1:91:15:76:91:
7d:da:83:81:53:e8:7b:84:ab:b6:24:5c:21:08:b2:6c:cf:17:
ab:76:a2:9e:91:df:98:52:0e:f5:5c:15:ad:53:ee:d2:26:53:
8a:1a:6a:1e:66:19:29:64:eb:48:b6:d3:8f:4f:d7:69:00:b1:
90:f0:29:bc:a7:07:cd:c7:3f:ba:90:d8:0d:53:00:50:62:ac:
f6:03:3f:c5:46:c6:8d:49:a9:b5:9e:bd:c1:a4:c3:e5:50:a5:
ee:6b:bb:04:72:db:38:7c:4d:ae:5c:23:94:6a:2e:4f:80:14:
f1:cc:c3:ba:94:50:f3:9a:5a:53:95:a6:65:58:5f:80:97:70:
0a:b9:96:19:0a:cc:55:f9:68:bf:96:76:24:e8:f9:c9:e5:e8:
e7:5a:b5:ad:5a:1d:1f:d4:e2:e3:a9:43:01:50:1a:3f:69:4c:
c2:c3:12:b8:60:78:94:16:22:ae:54:df:1e:25:47:03:e6:75:
b1:01:d6:7f:d1:1b:16:8f:0c:3a:46:6a:3a:a7:40:fb:6a:a9:
19:e5:61:4a:66:ea:5b:07:3b:f5:aa:9f:9f:13:de:95:a4:fc:
f4:23:8c:f9:54:40:ea:4c:5e:b5:46:b2:6e:79:5c:d7:11:75:
d9:79:5e:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:26:42 2025 by rpki-client