Route Origin Authorization
$ rpki-client -vvf rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a343a3a2f34382d3438203d3e203436393937.roa
File: 323630323a666564613a343a3a2f34382d3438203d3e203436393937.roa (raw, json)
Hash identifier: 3smR7y3h7bEOL+YGvBargrMB//OK9eR2KaFosYsrCFg=
Subject key identifier: 6D:D5:B3:A0:D4:1D:7A:7F:25:33:FC:8C:9A:FC:C9:6A:7D:3B:13:BB
Certificate issuer: /CN=0108398CA988382C2A509BFDB39E146A76CF9DE0
Certificate serial: 13CF6825374AF95CB27CE9D333E1283648F1BD6B
Authority key identifier: 01:08:39:8C:A9:88:38:2C:2A:50:9B:FD:B3:9E:14:6A:76:CF:9D:E0
Authority info access: rsync://sakuya.nat.moe/repo/NATOCA/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a343a3a2f34382d3438203d3e203436393937.roa
Signing time: Mon 28 Feb 2022 01:00:08 +0000
ROA not before: Mon 28 Feb 2022 00:55:08 +0000
ROA not after: Mon 27 Feb 2023 01:00:08 +0000
asID: 46997
IP address blocks: 2602:feda:4::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:cf:68:25:37:4a:f9:5c:b2:7c:e9:d3:33:e1:28:36:48:f1:bd:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0108398CA988382C2A509BFDB39E146A76CF9DE0
Validity
Not Before: Feb 28 00:55:08 2022 GMT
Not After : Feb 27 01:00:08 2023 GMT
Subject: CN=3082010A0282010100C5350200CB112F44EDF9D390E24C61F1747F2BCBFB10856C667160A07FF48F841A0C735271E393923082D7E63D8B888B7BA598CFDF822149EEC3F905A7A86D8CCF42404D2BB47A981A10C428C811C3C99EF96DCF84BC86384D5BC405FAA5A00FDEB1693903AE38C7D8A9D930B33F0CB730FC4D2EFC9583C3F2E1CB2319B3CE5C95F1C70DD1340EE9BBB1E5E750A5E4F97DA811252E12A1DF523A31790CD851EDE9135213ABEEBDA4595E643325A63042E6731D49E0B7DA14AC8F893E7E1CAE265407824BF3DB3255AB05076D91B4FF689B016015C2BB3B7702B4197129D92FAD17B87A5095AC55973C5B7B47545BA27ABC422A33929700DC14709FF52EC846FD0203010001
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:35:02:00:cb:11:2f:44:ed:f9:d3:90:e2:4c:
61:f1:74:7f:2b:cb:fb:10:85:6c:66:71:60:a0:7f:
f4:8f:84:1a:0c:73:52:71:e3:93:92:30:82:d7:e6:
3d:8b:88:8b:7b:a5:98:cf:df:82:21:49:ee:c3:f9:
05:a7:a8:6d:8c:cf:42:40:4d:2b:b4:7a:98:1a:10:
c4:28:c8:11:c3:c9:9e:f9:6d:cf:84:bc:86:38:4d:
5b:c4:05:fa:a5:a0:0f:de:b1:69:39:03:ae:38:c7:
d8:a9:d9:30:b3:3f:0c:b7:30:fc:4d:2e:fc:95:83:
c3:f2:e1:cb:23:19:b3:ce:5c:95:f1:c7:0d:d1:34:
0e:e9:bb:b1:e5:e7:50:a5:e4:f9:7d:a8:11:25:2e:
12:a1:df:52:3a:31:79:0c:d8:51:ed:e9:13:52:13:
ab:ee:bd:a4:59:5e:64:33:25:a6:30:42:e6:73:1d:
49:e0:b7:da:14:ac:8f:89:3e:7e:1c:ae:26:54:07:
82:4b:f3:db:32:55:ab:05:07:6d:91:b4:ff:68:9b:
01:60:15:c2:bb:3b:77:02:b4:19:71:29:d9:2f:ad:
17:b8:7a:50:95:ac:55:97:3c:5b:7b:47:54:5b:a2:
7a:bc:42:2a:33:92:97:00:dc:14:70:9f:f5:2e:c8:
46:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:D5:B3:A0:D4:1D:7A:7F:25:33:FC:8C:9A:FC:C9:6A:7D:3B:13:BB
X509v3 Authority Key Identifier:
keyid:01:08:39:8C:A9:88:38:2C:2A:50:9B:FD:B3:9E:14:6A:76:CF:9D:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9114E750000/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.crl
Authority Information Access:
CA Issuers - URI:rsync://sakuya.nat.moe/repo/NATOCA/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a343a3a2f34382d3438203d3e203436393937.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:feda:4::/48
Signature Algorithm: sha256WithRSAEncryption
b0:e0:93:52:32:04:ef:53:b6:0c:1d:1b:3f:6e:b3:7d:f3:53:
cf:ec:e4:66:46:d1:69:53:d8:43:3f:02:d4:4a:c4:07:4f:a9:
83:e0:b6:32:86:c8:b8:be:73:0e:44:59:a2:85:b8:54:18:18:
55:9f:e4:de:3d:95:8d:2c:ea:b8:ea:42:78:72:2e:88:2f:d8:
56:73:99:da:32:be:5c:01:a2:ce:58:67:88:a5:8a:59:11:ad:
cb:b8:c7:a0:ca:8b:db:f0:24:91:f2:ed:07:68:82:59:5d:b2:
fe:9e:c3:c3:75:f8:5e:f4:3f:85:f9:c4:85:16:28:90:eb:74:
b7:15:c6:d6:9a:c2:b9:59:0e:d6:c5:79:98:67:e6:c8:61:85:
24:e2:87:cb:5e:86:41:2e:1e:7c:fe:0f:28:16:fe:fd:db:40:
1d:56:6b:92:c2:bc:5a:b0:3e:25:b0:fe:70:1a:c0:7b:a3:9f:
59:5f:81:f0:86:83:26:f0:78:2a:36:a7:f8:b8:bd:e0:e7:06:
b0:f0:3f:d4:a0:b2:b6:45:bc:28:cb:31:dd:4c:a3:b3:c3:10:
6e:54:34:7c:03:9a:83:da:87:15:71:80:79:80:e0:8d:64:78:
9b:09:db:14:04:e5:19:03:e0:7c:fa:a6:35:81:be:8f:4a:a2:
31:20:22:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:24 2024 by rpki-client on console-fra.rpki-client.org