Certificate
$ rpki-client -vvf sakuya.nat.moe/repo/NATOCA/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.cer
File: 0108398CA988382C2A509BFDB39E146A76CF9DE0.cer (raw, json)
Hash identifier: HKsY6JWnb+/iWfqtU20M9lODrempxx59y+7/iNGg9/Y=
Subject key identifier: 01:08:39:8C:A9:88:38:2C:2A:50:9B:FD:B3:9E:14:6A:76:CF:9D:E0
Authority key identifier: F4:3E:07:03:28:FC:CF:A5:C9:99:CE:F9:7F:3D:0B:3C:2D:62:CA:19
Certificate issuer: /CN=5093cbb46fb1b96f7d8798f565e92eb683a28d8da9191693be
Certificate serial: 108668ED59F088F5F4C95D2BDC79FB353AA0C80A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46fb1b96f7d8798f565e92eb683a28d8da9191693be.cer
Manifest: rsync://ca.nat.moe/repo/NATOLAB/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.mft
caRepository: rsync://ca.nat.moe/repo/NATOLAB/0
Notify URL: https://ca.nat.moe/rrdp/notification.xml
Certificate not before: Sat 10 Sep 2022 02:05:08 +0000
Certificate not after: Sat 09 Sep 2023 02:10:08 +0000
Subordinate resources: AS: 46997
AS: 396303
IP: 23.247.136.0/22
IP: 134.195.100.0/23
IP: 141.193.21.0/24
IP: 2602:feda::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:86:68:ed:59:f0:88:f5:f4:c9:5d:2b:dc:79:fb:35:3a:a0:c8:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5093cbb46fb1b96f7d8798f565e92eb683a28d8da9191693be
Validity
Not Before: Sep 10 02:05:08 2022 GMT
Not After : Sep 9 02:10:08 2023 GMT
Subject: CN=0108398CA988382C2A509BFDB39E146A76CF9DE0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:86:15:df:61:3c:40:30:3d:dd:1f:63:bc:e0:
aa:8e:29:26:77:31:4b:bb:a2:26:89:e8:b9:1a:b8:
4a:c4:7e:a9:3b:33:a5:c7:e5:ab:8d:cd:9c:4f:79:
b5:1c:d7:5f:2d:ed:93:6c:0f:22:9e:4a:59:48:6b:
0b:e3:69:5f:45:cc:76:49:36:22:54:09:9e:38:cf:
9f:42:7b:40:ab:06:70:86:85:9d:58:9f:7e:6b:2a:
d3:62:ac:5f:c4:3a:a8:15:70:0b:e9:9c:31:1c:a1:
d3:b6:38:82:d8:11:b3:55:bd:55:d4:5a:b9:6d:2c:
a2:82:0a:37:e9:df:d1:d1:96:d4:8e:f0:2e:62:f0:
82:95:23:0b:5a:94:7f:0a:9d:7d:c2:e2:2f:40:5e:
c4:97:97:26:73:e0:65:a7:0a:b5:4d:3f:98:f4:89:
8c:d4:4e:bf:15:ff:12:97:5d:72:2b:f8:07:a9:2f:
65:7b:be:2c:3b:f1:2e:25:65:60:5a:56:d6:bd:4c:
c5:86:0f:b3:20:32:60:66:99:7a:d6:bb:f6:11:9e:
0c:bf:8d:a6:30:12:db:23:7c:f5:b7:9f:79:b6:c7:
53:c3:37:47:b5:77:84:2b:8d:22:2e:79:87:d8:c7:
37:9f:2a:68:7b:ea:8c:7e:c1:8d:ef:3b:18:5f:cf:
fe:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
01:08:39:8C:A9:88:38:2C:2A:50:9B:FD:B3:9E:14:6A:76:CF:9D:E0
X509v3 Authority Key Identifier:
keyid:F4:3E:07:03:28:FC:CF:A5:C9:99:CE:F9:7F:3D:0B:3C:2D:62:CA:19
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://sakuya.nat.moe/repo/NATOCA/0/F43E070328FCCFA5C999CEF97F3D0B3C2D62CA19.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46fb1b96f7d8798f565e92eb683a28d8da9191693be.cer
Subject Information Access:
CA Repository - URI:rsync://ca.nat.moe/repo/NATOLAB/0
RPKI Manifest - URI:rsync://ca.nat.moe/repo/NATOLAB/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.mft
RPKI Notify - URI:https://ca.nat.moe/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.247.136.0/22
134.195.100.0/23
141.193.21.0/24
IPv6:
2602:feda::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
46997
396303
Signature Algorithm: sha256WithRSAEncryption
5a:85:d6:f5:e3:5f:96:0c:fe:5b:62:dd:89:44:ee:5a:1f:74:
ad:3d:0b:79:7e:b4:f6:1f:cd:16:40:e6:79:ce:12:a1:3c:10:
66:04:50:61:fd:d1:29:9e:81:83:c5:90:80:63:28:51:b6:09:
ee:33:0a:8b:41:ae:db:ff:6a:c3:d7:da:4e:70:d6:15:67:c2:
f8:6b:9c:ed:00:90:62:9d:26:5c:29:b3:a2:b9:ac:6e:de:08:
0a:9b:0b:4c:38:32:4e:73:3f:c1:dc:cc:ec:3f:df:45:56:03:
ab:d9:4a:61:86:27:dc:53:ea:e2:3c:27:5e:f3:88:06:b6:39:
58:85:98:2b:64:b4:50:4e:a7:90:3b:9f:76:c2:08:6d:ed:24:
de:68:30:68:32:92:60:22:91:0d:66:06:7d:58:60:11:da:6d:
8b:2a:d4:de:22:d1:db:bc:f4:9b:9b:c3:f6:66:fa:5c:9f:e6:
4b:c2:fa:22:da:a8:1c:c3:c9:06:66:17:97:35:56:a3:38:9a:
41:61:f7:6f:f7:77:f9:6f:39:72:6e:4f:03:42:c1:49:73:da:
d7:a2:b6:f5:fd:57:65:8c:d5:69:84:08:8c:4f:8a:e8:af:5c:
ba:8c:1a:e3:6e:00:93:7b:51:2e:66:77:8f:1d:09:cb:f7:eb:
f3:45:c9:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:53 2023 by rpki-client on console-ams.rpki-client.org