Route Origin Authorization
$ rpki-client -vvf rpki-rsync.mnihyc.com/repo/mnihyc/1/323430363a343434303a653030303a3a2f34302d3438203d3e20313430393338.roa
File: 323430363a343434303a653030303a3a2f34302d3438203d3e20313430393338.roa (raw, json)
Hash identifier: v8zHMCo9TWSt83Zh6Q1c3hY4I9TPCshbgjgnlVftNcA=
Subject key identifier: 5D:95:22:23:8C:3A:81:11:4F:0D:0C:40:DD:C5:05:4F:9C:4B:BA:7A
Certificate issuer: /CN=A60929C78B1DA5A5B0D91530E8827900546E14AE
Certificate serial: 2BC2F9FD9A7ECF43383D156B84BD2CF9EADF52FB
Authority key identifier: A6:09:29:C7:8B:1D:A5:A5:B0:D9:15:30:E8:82:79:00:54:6E:14:AE
Authority info access: rsync://sakuya.nat.moe/repo/NATOCA/1/A60929C78B1DA5A5B0D91530E8827900546E14AE.cer
Subject info access: rsync://rpki-rsync.mnihyc.com/repo/mnihyc/1/323430363a343434303a653030303a3a2f34302d3438203d3e20313430393338.roa
Signing time: Wed 07 Sep 2022 00:44:42 +0000
ROA not before: Wed 07 Sep 2022 00:39:42 +0000
ROA not after: Wed 06 Sep 2023 00:44:42 +0000
asID: 140938
IP address blocks: 2406:4440:e000::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:c2:f9:fd:9a:7e:cf:43:38:3d:15:6b:84:bd:2c:f9:ea:df:52:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A60929C78B1DA5A5B0D91530E8827900546E14AE
Validity
Not Before: Sep 7 00:39:42 2022 GMT
Not After : Sep 6 00:44:42 2023 GMT
Subject: CN=5D9522238C3A81114F0D0C40DDC5054F9C4BBA7A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f7:ef:c0:d7:4d:44:d9:f7:50:5a:00:6e:ec:
85:ad:8d:44:af:a8:92:9d:e8:5a:82:7f:3e:61:09:
ac:1c:56:24:b0:65:bd:15:d9:16:42:83:a0:e4:32:
c4:c0:af:e7:ed:65:06:f4:61:64:3a:51:06:69:4e:
40:8b:17:34:95:71:81:34:e6:03:24:90:ba:90:5b:
67:63:a2:ab:59:43:c9:e0:d3:9c:bd:02:01:f3:b8:
de:fc:47:d9:a1:c7:c8:d5:a0:f7:b1:34:b8:09:97:
ae:c2:55:c0:27:09:d7:74:f2:d8:4d:18:aa:3c:fe:
15:cd:32:fa:df:cb:69:5b:bc:18:13:40:91:2d:e2:
d5:c7:01:d2:de:2a:a2:6d:e2:3f:6f:89:1e:ee:4a:
82:a4:74:cd:43:48:9b:f0:9b:a0:07:a6:a3:11:ed:
6d:34:b6:3f:b3:52:7f:e4:af:7f:17:0b:a6:54:d7:
bf:2b:a5:d6:36:97:09:00:dd:47:f1:d7:57:d4:d1:
35:70:f5:d9:19:10:a0:e1:2c:dc:71:53:78:cf:ec:
d5:b3:7d:42:59:e3:ae:10:85:e4:c0:29:ab:87:b3:
07:f0:a7:07:b0:b8:b4:62:78:60:70:ac:1a:c7:73:
7e:fe:a5:a8:49:06:00:a9:3d:b1:8e:17:c2:ef:24:
af:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:95:22:23:8C:3A:81:11:4F:0D:0C:40:DD:C5:05:4F:9C:4B:BA:7A
X509v3 Authority Key Identifier:
keyid:A6:09:29:C7:8B:1D:A5:A5:B0:D9:15:30:E8:82:79:00:54:6E:14:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.mnihyc.com/repo/mnihyc/1/A60929C78B1DA5A5B0D91530E8827900546E14AE.crl
Authority Information Access:
CA Issuers - URI:rsync://sakuya.nat.moe/repo/NATOCA/1/A60929C78B1DA5A5B0D91530E8827900546E14AE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.mnihyc.com/repo/mnihyc/1/323430363a343434303a653030303a3a2f34302d3438203d3e20313430393338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:4440:e000::/40
Signature Algorithm: sha256WithRSAEncryption
06:dd:f6:e1:63:df:e2:17:4b:19:23:d1:85:bc:36:59:0c:8d:
cc:8d:9b:c0:87:90:b7:10:62:5e:7e:77:90:9a:10:29:44:77:
db:54:1a:b0:2a:22:b9:dd:9a:f8:24:7a:30:db:8c:0e:3c:08:
04:50:f5:bf:2f:ef:c7:a5:c5:92:c0:fa:24:2d:6a:dd:d5:c8:
ca:18:27:4e:97:7b:b0:c2:02:d1:7c:7c:13:e2:24:87:10:84:
7e:5a:86:07:93:0c:94:83:91:c9:c8:3a:a8:61:d2:fa:89:bd:
cb:29:18:34:f0:52:a1:e9:c4:10:42:25:6c:92:03:1c:1e:b6:
93:28:82:86:e7:7f:37:af:2c:fc:bd:d1:a5:b0:ce:75:65:cf:
f1:35:79:0d:3f:0b:7b:04:96:55:a6:fe:cb:8d:a6:06:79:56:
91:4c:c5:64:6a:61:13:31:7b:f1:f9:bf:3b:2a:fc:4a:fe:c2:
61:0d:26:ab:d1:d9:44:fc:33:0b:a7:20:c3:fd:5a:f2:4f:9c:
63:40:70:ca:25:d7:d7:53:e5:8c:c7:c5:ab:de:72:ef:7f:dc:
f9:b1:40:1d:e3:62:e8:55:cc:6c:ff:e7:6d:85:88:16:59:9d:
fe:c1:3a:be:e1:ff:73:99:6c:cb:98:a8:12:9d:81:8a:7e:e0:
3d:2e:47:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:45 2024 by rpki-client on console-ams.rpki-client.org