Route Origin Authorization
$ rpki-client -vvf rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a3364303a3a2f34342d3438203d3e20323133333631.roa
File: 323630323a666564613a3364303a3a2f34342d3438203d3e20323133333631.roa (raw, json)
Hash identifier: Nbr9j9r8ql/V1+C61qPXqjZ82a4iMy1TzrJEuVGzAQs=
Subject key identifier: A9:20:7E:AB:9D:1A:C6:BE:65:B2:5E:3E:35:41:F5:37:14:DE:83:1B
Certificate issuer: /CN=0108398CA988382C2A509BFDB39E146A76CF9DE0
Certificate serial: 6CDBE927B4588A99CCB59AD40E74A12FA597DDFA
Authority key identifier: 01:08:39:8C:A9:88:38:2C:2A:50:9B:FD:B3:9E:14:6A:76:CF:9D:E0
Authority info access: rsync://sakuya.nat.moe/repo/NATOCA/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a3364303a3a2f34342d3438203d3e20323133333631.roa
Signing time: Mon 28 Feb 2022 01:00:06 +0000
ROA not before: Mon 28 Feb 2022 00:55:06 +0000
ROA not after: Mon 27 Feb 2023 01:00:06 +0000
asID: 213361
IP address blocks: 2602:feda:3d0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:db:e9:27:b4:58:8a:99:cc:b5:9a:d4:0e:74:a1:2f:a5:97:dd:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0108398CA988382C2A509BFDB39E146A76CF9DE0
Validity
Not Before: Feb 28 00:55:06 2022 GMT
Not After : Feb 27 01:00:06 2023 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:6e:df:4a:4b:52:12:df:ec:95:77:87:8f:14:
ee:c2:56:da:78:d8:44:a9:8c:77:fa:b7:c9:c2:23:
d0:3a:19:d8:a9:44:f4:d3:0f:53:f1:79:90:81:24:
1f:ea:f7:a5:87:e5:86:4e:a3:8d:72:4c:0f:54:cd:
48:5f:6e:be:68:75:36:56:1d:5d:71:3e:f8:c2:74:
4a:e1:40:ee:9c:9b:ee:d5:2b:a0:a4:bb:a7:61:c0:
1f:e7:fa:25:13:c2:0b:81:d4:e3:b3:d6:2a:0c:d5:
36:a6:fc:04:c3:48:8c:4f:2a:78:cb:51:17:30:23:
7b:85:ed:81:2b:a1:a1:44:4a:9e:53:02:9f:9d:3d:
14:e8:db:6c:a8:8b:f0:f6:1e:54:f8:6f:ae:50:b3:
1b:8e:1c:45:70:5e:45:60:59:06:38:ec:95:e8:e6:
3c:54:c9:01:8e:f1:d1:97:ba:c8:b8:da:6e:ae:67:
09:45:77:10:78:44:5e:88:89:93:19:93:dd:8c:e2:
0c:4b:29:5f:fe:59:ae:48:12:af:4b:ac:25:a1:9f:
5e:9e:a1:9e:6c:1e:83:4f:6c:bc:ef:a3:76:b6:f5:
59:fe:7c:e1:f6:14:35:12:79:7d:b7:e1:69:0e:b6:
28:ad:0c:9e:a3:1d:fa:94:c4:2e:28:a0:9c:e6:cf:
52:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:20:7E:AB:9D:1A:C6:BE:65:B2:5E:3E:35:41:F5:37:14:DE:83:1B
X509v3 Authority Key Identifier:
keyid:01:08:39:8C:A9:88:38:2C:2A:50:9B:FD:B3:9E:14:6A:76:CF:9D:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9114E750000/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.crl
Authority Information Access:
CA Issuers - URI:rsync://sakuya.nat.moe/repo/NATOCA/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a3364303a3a2f34342d3438203d3e20323133333631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:feda:3d0::/44
Signature Algorithm: sha256WithRSAEncryption
8c:e7:ef:b2:69:19:4a:0f:0e:b1:53:7d:23:e0:2f:5b:01:00:
2b:6d:01:79:1f:1d:dc:36:07:d2:3a:56:14:7d:ca:85:4e:29:
d8:36:88:2b:28:89:da:87:da:0b:9e:7a:3e:0c:cd:60:8b:33:
3c:56:3a:ed:14:1d:03:42:9d:f0:f8:00:59:c1:25:a4:de:db:
47:55:b1:97:6c:8e:42:87:fc:72:65:35:f9:c2:bb:e4:24:e8:
11:44:cc:9a:00:d0:66:6f:55:02:3e:b4:bb:0b:17:b2:21:0b:
db:4c:eb:06:16:ad:cc:c9:ec:47:09:54:c6:b5:07:17:fc:55:
6d:0a:41:1d:29:82:36:92:b1:d1:03:0b:99:fe:f1:27:6d:e0:
8f:6f:09:84:35:bf:b5:df:d7:d1:e9:2f:c1:24:e7:39:0a:f6:
e7:60:91:c0:20:21:a4:bd:d9:0b:0e:d6:dc:19:e1:59:66:31:
28:55:a1:45:df:82:a0:e1:24:32:1a:b0:7a:67:e3:1c:5a:f3:
b3:96:15:bc:ed:8f:7d:13:fd:f1:0b:4f:e3:38:0c:f1:4b:31:
03:4e:e8:4d:25:d0:e5:6c:99:80:18:c7:db:eb:7b:94:41:fc:
dd:4a:30:dd:68:8f:81:d4:03:79:23:4c:9e:44:a1:e0:91:ee:
3c:f3:90:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:24 2024 by rpki-client on console-fra.rpki-client.org