Route Origin Authorization
$ rpki-client -vvf rpki.sub.apnic.net/repository/A9114E750000/0/3133342e3139352e3130302e302f32332d3234203d3e203436393937.roa
File: 3133342e3139352e3130302e302f32332d3234203d3e203436393937.roa (raw, json)
Hash identifier: CbFg6If+aCsIn06w+OsQNlFkBUccOtfoF7PgdNcPNYM=
Subject key identifier: 5F:77:F6:F5:4D:91:C4:D2:DE:59:E4:D9:C8:F6:A7:A9:79:A0:FF:EA
Certificate issuer: /CN=0108398CA988382C2A509BFDB39E146A76CF9DE0
Certificate serial: 59D9EBBD2208576BFC831C560D2E20E50B45A80F
Authority key identifier: 01:08:39:8C:A9:88:38:2C:2A:50:9B:FD:B3:9E:14:6A:76:CF:9D:E0
Authority info access: rsync://sakuya.nat.moe/repo/NATOCA/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9114E750000/0/3133342e3139352e3130302e302f32332d3234203d3e203436393937.roa
Signing time: Mon 28 Feb 2022 01:00:11 +0000
ROA not before: Mon 28 Feb 2022 00:55:11 +0000
ROA not after: Mon 27 Feb 2023 01:00:11 +0000
asID: 46997
IP address blocks: 134.195.100.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:d9:eb:bd:22:08:57:6b:fc:83:1c:56:0d:2e:20:e5:0b:45:a8:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0108398CA988382C2A509BFDB39E146A76CF9DE0
Validity
Not Before: Feb 28 00:55:11 2022 GMT
Not After : Feb 27 01:00:11 2023 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:68:95:87:3b:d2:4f:0e:41:3e:ea:41:ac:dc:
d8:1f:d2:70:0d:fe:4a:9f:68:76:71:05:ec:0a:09:
ce:f2:65:53:bd:51:eb:01:70:be:0e:3c:f3:b6:57:
29:11:d5:d8:1e:5e:d3:74:21:91:a1:a5:1e:bb:2b:
d9:6b:f5:95:18:73:77:3c:9d:6c:89:9a:9b:a7:da:
db:01:45:1c:4c:5c:67:81:0f:39:6d:5f:b9:20:b4:
a9:1e:b4:c7:28:9b:4b:6f:8e:af:cc:19:27:19:1c:
8f:af:ad:a9:1d:11:1d:11:6d:4a:67:63:bd:7d:cf:
f3:dd:d8:eb:01:23:35:00:c4:9c:73:43:c3:c6:e2:
f9:df:6c:f1:f4:6f:bc:f4:2d:e0:30:95:29:2a:c2:
53:7a:38:82:d3:8e:eb:91:c1:96:de:86:76:e5:c4:
ff:4b:a1:c3:e0:6f:44:9a:96:91:1d:a9:d1:c3:ea:
a0:79:d1:ba:5b:ee:e2:f7:15:ef:08:dd:12:ff:c2:
b5:df:95:26:e4:b6:20:26:03:29:bc:6f:3c:df:4e:
06:23:0c:c5:7d:51:69:53:72:c1:47:0b:14:5b:97:
16:4c:5c:01:9f:54:08:d2:e6:0c:6d:06:4f:1d:00:
b9:75:62:fc:89:eb:ef:dd:78:87:5f:1f:65:c6:35:
1c:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:77:F6:F5:4D:91:C4:D2:DE:59:E4:D9:C8:F6:A7:A9:79:A0:FF:EA
X509v3 Authority Key Identifier:
keyid:01:08:39:8C:A9:88:38:2C:2A:50:9B:FD:B3:9E:14:6A:76:CF:9D:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9114E750000/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.crl
Authority Information Access:
CA Issuers - URI:rsync://sakuya.nat.moe/repo/NATOCA/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9114E750000/0/3133342e3139352e3130302e302f32332d3234203d3e203436393937.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
134.195.100.0/23
Signature Algorithm: sha256WithRSAEncryption
0c:a9:38:a7:8e:36:f5:ce:8c:37:e3:f5:7c:83:8c:0c:c4:af:
e7:9b:29:f4:f0:b9:1f:a3:13:e1:1c:77:b1:7e:b7:62:18:5f:
28:8c:35:03:4a:80:75:8f:58:98:6b:de:ca:d4:52:03:7d:93:
d6:1b:3a:8f:88:c2:7a:da:8f:18:45:88:64:bd:6c:40:fb:cb:
91:99:6a:5a:1f:3c:33:81:d9:de:df:cb:3d:84:9b:26:b0:a5:
f1:5b:22:92:1f:4a:27:a0:ec:62:54:c7:87:5f:dc:89:0f:83:
3f:cc:fb:e1:5c:32:4a:0f:3b:ec:ae:dd:54:47:bc:5f:a0:c1:
bd:e3:27:43:ed:8b:11:da:1b:99:2d:d0:97:98:b8:c0:06:bb:
fb:83:92:37:76:ef:74:48:3b:e6:64:1e:c3:38:28:18:c5:43:
67:50:bf:e4:a4:57:cc:ca:18:12:76:8a:13:50:d7:0f:75:ad:
f0:cf:74:2f:ac:fe:03:94:50:34:14:d4:51:9b:be:2e:63:fe:
5a:ed:57:84:a6:40:4d:cf:08:24:39:4b:69:0e:fe:0b:97:55:
2e:a3:ed:7d:fe:42:1f:98:09:40:7e:6a:4b:fd:ad:cf:39:1f:
0b:b9:10:2e:8a:5e:d2:95:fb:60:41:45:97:dd:a1:14:d6:ce:
b5:2a:5a:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:24 2024 by rpki-client on console-fra.rpki-client.org