Route Origin Authorization
$ rpki-client -vvf rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a3138303a3a2f34382d3438203d3e203335323531.roa
File: 323630323a666564613a3138303a3a2f34382d3438203d3e203335323531.roa (raw, json)
Hash identifier: y/hXrm1zVk6j58YdIR0DFdvHyg5ElsVmxNqlsAhOObA=
Subject key identifier: FF:2A:85:DF:32:E7:B4:2F:3B:2E:DA:21:9C:48:39:72:A5:BE:E5:81
Certificate issuer: /CN=0108398CA988382C2A509BFDB39E146A76CF9DE0
Certificate serial: 292422CC6D8DBBC1C4C30A9691E51DEE26E58D2B
Authority key identifier: 01:08:39:8C:A9:88:38:2C:2A:50:9B:FD:B3:9E:14:6A:76:CF:9D:E0
Authority info access: rsync://sakuya.nat.moe/repo/NATOCA/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a3138303a3a2f34382d3438203d3e203335323531.roa
Signing time: Mon 28 Feb 2022 01:00:02 +0000
ROA not before: Mon 28 Feb 2022 00:55:02 +0000
ROA not after: Mon 27 Feb 2023 01:00:02 +0000
asID: 35251
IP address blocks: 2602:feda:180::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:24:22:cc:6d:8d:bb:c1:c4:c3:0a:96:91:e5:1d:ee:26:e5:8d:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0108398CA988382C2A509BFDB39E146A76CF9DE0
Validity
Not Before: Feb 28 00:55:02 2022 GMT
Not After : Feb 27 01:00:02 2023 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:1f:d0:c8:90:56:9f:92:ba:0f:a4:93:79:cd:
fa:d9:54:04:28:0e:32:d6:68:f1:2d:dd:4e:b1:42:
f2:ee:23:b1:38:90:35:73:44:23:f1:9d:cf:07:4f:
0a:77:36:11:11:31:06:14:a6:a3:73:cb:40:74:02:
2d:c5:5b:2d:b2:12:a1:51:12:97:fb:8b:af:33:df:
dc:59:39:fa:c7:3e:73:f5:80:4f:c8:46:c2:77:50:
d6:c8:06:5d:7d:90:2f:b4:99:be:01:97:96:6b:f2:
83:e1:8d:bf:e8:b5:9f:bf:93:f0:d5:9a:17:ee:6c:
22:e1:91:2d:71:a7:e6:36:b6:f9:30:2d:24:03:12:
7a:0e:26:cd:f5:40:df:80:9b:9e:5f:df:e4:72:2b:
e9:82:0c:cc:7b:9a:60:21:1d:ce:14:d8:03:0e:df:
4d:25:03:13:af:39:e1:1d:54:81:09:e8:b1:f2:c0:
d6:20:58:b1:a4:05:73:39:57:ed:f4:15:ed:c8:eb:
f1:c8:1d:6e:67:c4:16:46:19:64:e8:06:6b:ff:33:
b2:b9:72:b6:6d:fa:f6:ac:d3:f8:cc:e4:28:70:a9:
5e:99:c0:18:34:ed:85:aa:fb:6a:3c:22:52:6b:25:
11:d7:f1:c0:d5:5f:45:e1:b5:85:0d:c7:c3:3c:ae:
90:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:2A:85:DF:32:E7:B4:2F:3B:2E:DA:21:9C:48:39:72:A5:BE:E5:81
X509v3 Authority Key Identifier:
keyid:01:08:39:8C:A9:88:38:2C:2A:50:9B:FD:B3:9E:14:6A:76:CF:9D:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9114E750000/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.crl
Authority Information Access:
CA Issuers - URI:rsync://sakuya.nat.moe/repo/NATOCA/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a3138303a3a2f34382d3438203d3e203335323531.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:feda:180::/48
Signature Algorithm: sha256WithRSAEncryption
b2:fa:54:16:6f:62:cf:ac:ed:f8:24:07:3a:ed:32:0a:d3:2d:
08:36:23:e3:53:a4:38:20:df:3a:63:84:29:92:1c:85:b3:ec:
ef:14:08:33:ff:ac:63:67:df:9d:32:06:52:ba:71:7a:57:da:
d4:62:85:66:eb:2e:a9:37:4d:07:a0:b6:e8:70:b5:42:cf:f8:
25:40:7b:39:62:34:2d:93:c1:9d:d3:63:7c:7f:2f:90:e9:ab:
c2:5d:6f:47:ed:df:dc:04:12:d2:4b:3f:c5:78:42:ba:54:dc:
02:97:b0:b1:61:ce:a2:d3:34:f3:89:00:0e:44:03:6f:b4:24:
1f:bb:d5:17:07:63:1d:92:f8:23:ba:35:45:d4:dc:07:76:82:
3b:12:ad:4b:a3:97:76:d9:19:15:d0:bf:10:b2:d1:59:48:f2:
f9:65:30:57:a6:81:0f:d7:38:29:65:a4:24:2b:c4:fb:f1:09:
27:da:f4:cd:b3:ad:6b:80:f5:0a:57:36:c9:66:f9:0b:a7:91:
45:73:43:0c:a4:a5:a8:af:4b:6b:33:56:c7:14:36:a8:f2:e6:
63:2f:44:9a:d9:b8:39:67:08:02:0d:72:71:00:50:a9:c8:d7:
82:9b:c7:60:2e:bb:c1:44:f8:bd:c6:ec:cc:df:ac:92:ba:e9:
09:97:d3:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:24 2024 by rpki-client on console-fra.rpki-client.org