Route Origin Authorization
$ rpki-client -vvf rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a353a3a2f34382d3438203d3e203436393937.roa
File: 323630323a666564613a353a3a2f34382d3438203d3e203436393937.roa (raw, json)
Hash identifier: PWb5xkuEhSPnPy1n8Vpq5L3BaZBoD5xF66tXsjiPC3c=
Subject key identifier: 94:F8:17:87:0E:C2:85:EC:74:C1:89:17:58:0F:5C:F7:C9:6F:B4:41
Certificate issuer: /CN=0108398CA988382C2A509BFDB39E146A76CF9DE0
Certificate serial: 0451B9E02C1C030A5C63DF44A16F6F095B933799
Authority key identifier: 01:08:39:8C:A9:88:38:2C:2A:50:9B:FD:B3:9E:14:6A:76:CF:9D:E0
Authority info access: rsync://sakuya.nat.moe/repo/NATOCA/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a353a3a2f34382d3438203d3e203436393937.roa
Signing time: Mon 28 Feb 2022 01:00:10 +0000
ROA not before: Mon 28 Feb 2022 00:55:10 +0000
ROA not after: Mon 27 Feb 2023 01:00:10 +0000
asID: 46997
IP address blocks: 2602:feda:5::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:51:b9:e0:2c:1c:03:0a:5c:63:df:44:a1:6f:6f:09:5b:93:37:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0108398CA988382C2A509BFDB39E146A76CF9DE0
Validity
Not Before: Feb 28 00:55:10 2022 GMT
Not After : Feb 27 01:00:10 2023 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:27:e9:65:e0:b9:70:4f:fc:95:45:cc:80:5e:
cc:ff:a6:a9:08:b9:43:2f:74:31:be:43:13:fc:b9:
2e:79:95:34:19:aa:7a:48:42:93:d7:b2:16:cb:7f:
29:66:fb:8c:f1:60:5e:b5:4b:e8:d5:f5:39:ad:cc:
5a:72:43:f3:40:1d:33:0c:22:6e:eb:e1:10:a6:e4:
0d:dd:01:50:65:bc:92:ff:b4:5e:31:c1:c8:e2:22:
9d:74:9e:5b:e4:f4:f1:d3:be:54:43:7b:e7:8d:1a:
19:91:1f:51:0f:81:88:99:2f:f9:a2:1d:9a:c1:24:
75:7b:8c:b4:b6:8d:dd:0b:fc:55:2d:64:d5:3e:c2:
71:d4:ef:78:86:ea:e1:0c:5d:d7:0f:9c:f1:9e:8f:
07:05:e5:1f:53:14:58:2f:e6:b9:94:f2:46:5a:cf:
91:d2:18:6a:c1:88:c1:f7:60:7e:6e:4f:88:d5:f9:
b9:36:5b:0f:07:90:30:d8:0d:4f:c3:22:d3:8d:db:
56:0f:df:97:b7:8b:dd:2d:7a:fc:45:78:a7:e4:ad:
b8:3a:a7:c8:a5:2a:36:1d:5a:98:14:66:9d:b9:ad:
27:ad:c8:fd:3c:42:e2:60:d3:90:c3:42:35:ce:6b:
c6:2e:87:7c:da:1e:98:be:5b:18:b8:fa:c5:2b:bd:
e8:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:F8:17:87:0E:C2:85:EC:74:C1:89:17:58:0F:5C:F7:C9:6F:B4:41
X509v3 Authority Key Identifier:
keyid:01:08:39:8C:A9:88:38:2C:2A:50:9B:FD:B3:9E:14:6A:76:CF:9D:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9114E750000/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.crl
Authority Information Access:
CA Issuers - URI:rsync://sakuya.nat.moe/repo/NATOCA/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a353a3a2f34382d3438203d3e203436393937.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:feda:5::/48
Signature Algorithm: sha256WithRSAEncryption
5d:bf:e0:da:50:97:27:68:33:73:8c:a5:33:4e:45:20:81:af:
bb:1e:96:19:a4:d2:bd:ec:5d:c1:4d:f6:e9:26:3f:e5:bd:99:
09:d7:a8:88:dd:ef:96:b4:a0:df:68:52:51:c9:61:e3:06:a4:
17:4b:fe:e5:de:f0:5a:8f:48:b9:f2:b8:2d:fb:f2:e0:17:b1:
3a:6d:aa:cc:b1:f6:68:06:28:29:47:a0:7d:9d:fa:8c:e1:c0:
90:a0:62:72:65:4e:be:5e:37:0f:19:a0:46:f4:ae:47:08:f9:
63:31:7a:1f:b6:2c:88:18:1c:c4:ee:80:5e:e8:f7:1e:6b:ed:
f2:ad:90:df:5c:56:3a:bc:5c:49:ab:18:03:8c:10:cc:aa:4a:
6e:ce:84:a6:84:0e:c1:16:ad:35:aa:94:bf:64:7d:94:f9:d0:
88:51:c8:01:0d:a6:fb:03:10:7a:80:c2:d6:4f:72:9b:93:24:
64:3c:8d:99:d0:60:06:78:d9:c5:50:a7:c0:a1:c9:95:7e:4f:
d1:eb:da:8b:e1:fc:bc:b2:31:bd:35:4d:e4:95:94:4e:6e:19:
ed:64:f5:5e:4f:79:14:2f:c9:03:e7:3c:d6:7e:56:54:55:f5:
09:dd:27:1f:4e:65:89:cd:ce:ac:76:cb:b8:f4:d8:c9:43:65:
11:60:76:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:24 2024 by rpki-client on console-fra.rpki-client.org