Route Origin Authorization
$ rpki-client -vvf rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a383a3a2f34382d3438203d3e203436393937.roa
File: 323630323a666564613a383a3a2f34382d3438203d3e203436393937.roa (raw, json)
Hash identifier: kpp1SYV+B75oxhBspUXExDqrhTd8o5oDwKL7gvkEBpg=
Subject key identifier: 26:CE:E0:27:3F:DC:3F:4B:B6:72:03:99:14:5E:F2:BC:06:7D:A1:F8
Certificate issuer: /CN=0108398CA988382C2A509BFDB39E146A76CF9DE0
Certificate serial: 305A976AA23388A87C21505E859D906B6E5C61F0
Authority key identifier: 01:08:39:8C:A9:88:38:2C:2A:50:9B:FD:B3:9E:14:6A:76:CF:9D:E0
Authority info access: rsync://sakuya.nat.moe/repo/NATOCA/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a383a3a2f34382d3438203d3e203436393937.roa
Signing time: Mon 28 Feb 2022 01:00:11 +0000
ROA not before: Mon 28 Feb 2022 00:55:11 +0000
ROA not after: Mon 27 Feb 2023 01:00:11 +0000
asID: 46997
IP address blocks: 2602:feda:8::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:5a:97:6a:a2:33:88:a8:7c:21:50:5e:85:9d:90:6b:6e:5c:61:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0108398CA988382C2A509BFDB39E146A76CF9DE0
Validity
Not Before: Feb 28 00:55:11 2022 GMT
Not After : Feb 27 01:00:11 2023 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ae:53:af:ca:bb:23:4d:7b:c7:92:e1:fa:20:
71:27:26:4e:d5:90:d5:d7:ac:99:ac:22:d1:78:0c:
57:c8:cf:85:b3:7b:da:6f:7d:f1:96:a6:1a:02:b9:
b3:2f:c2:b1:b3:a1:37:0d:a8:f4:f2:2c:07:20:aa:
71:38:cf:64:03:46:fc:c9:e2:68:65:0b:03:1e:b4:
70:3f:77:2a:69:21:29:05:1f:2a:af:48:2b:88:61:
f8:83:e4:52:21:38:bd:88:6c:7e:b5:57:d4:9e:7a:
66:5f:fa:4e:f1:75:bb:99:7a:5a:da:75:db:dc:e2:
27:1a:6a:b0:20:4e:4a:03:75:05:4f:1b:58:bd:ed:
15:08:45:10:ee:17:07:f3:ce:b7:c1:2d:7e:11:a0:
a1:82:30:91:4e:45:b2:7a:49:7e:74:1d:f4:b0:15:
b9:cc:06:5b:4c:ea:8f:36:8b:28:63:8f:1b:fa:3b:
47:c9:0c:2c:1e:22:c7:6d:a4:19:3e:c5:30:a5:02:
bf:e6:ec:33:5d:86:bf:dd:d9:82:59:06:d7:8b:c5:
29:3c:ea:e2:1d:45:38:0a:a6:c5:d6:65:1a:2a:ed:
7d:b0:dd:e9:93:63:e1:a1:e1:ea:a2:d5:12:a2:8c:
65:81:08:80:e9:10:df:e7:6c:8f:a6:8a:75:c5:4a:
63:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:CE:E0:27:3F:DC:3F:4B:B6:72:03:99:14:5E:F2:BC:06:7D:A1:F8
X509v3 Authority Key Identifier:
keyid:01:08:39:8C:A9:88:38:2C:2A:50:9B:FD:B3:9E:14:6A:76:CF:9D:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9114E750000/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.crl
Authority Information Access:
CA Issuers - URI:rsync://sakuya.nat.moe/repo/NATOCA/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a383a3a2f34382d3438203d3e203436393937.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:feda:8::/48
Signature Algorithm: sha256WithRSAEncryption
8a:3d:45:9c:2a:51:d4:dd:8c:77:6f:39:c6:4c:c1:13:16:9d:
ac:12:55:55:fc:19:90:f7:0b:20:2b:63:97:36:38:28:cb:b7:
87:d9:db:1c:a6:c7:c6:43:ad:46:f2:e8:cb:17:79:2e:55:95:
23:ea:64:7a:31:6e:8e:38:92:62:52:02:44:d3:17:50:03:4b:
13:1e:bb:b1:9d:ed:28:80:c3:79:4d:2a:45:4d:71:51:9c:c3:
ce:b2:b9:68:f3:0a:d6:89:96:e8:fd:8c:47:eb:69:3e:97:ed:
85:98:ea:14:c5:6c:12:8f:46:03:60:37:b1:2a:17:50:d2:16:
80:09:ef:99:6b:6e:bc:37:73:26:e3:08:90:56:a8:a1:dd:b9:
73:34:a8:09:e0:f2:c6:85:ef:4a:6a:97:72:83:49:86:c5:93:
cf:59:5a:e8:72:40:e4:2a:d4:9d:55:45:f8:3c:ca:20:ba:d5:
a9:6c:ff:ad:1d:91:dc:69:8b:8b:83:a4:76:72:68:82:55:d1:
a6:e9:62:5b:2b:6f:57:19:de:9e:03:d7:02:b8:23:82:b2:9d:
27:34:c0:d9:92:0b:d7:8c:07:29:7e:8a:69:10:e7:42:f2:6c:
b9:72:64:82:c9:ed:50:b3:da:ec:30:e7:2a:dd:d4:eb:6c:c6:
fc:fa:26:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:59:50 2024 by rpki-client on console-ams.rpki-client.org