Route Origin Authorization
$ rpki-client -vvf rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a3a2f34382d3438203d3e203436393937.roa
File: 323630323a666564613a3a2f34382d3438203d3e203436393937.roa (raw, json)
Hash identifier: 8/mmqg02eckJzAQWuPjfgjwUXO96e6mT7nvJiEVXmWs=
Subject key identifier: 14:8D:1B:B8:A7:CB:73:9B:49:1E:D7:CA:6E:6C:DD:50:1E:8A:27:52
Certificate issuer: /CN=0108398CA988382C2A509BFDB39E146A76CF9DE0
Certificate serial: 1C38483E9B8EAFAAE8399BC29E4CD3B616B3E0CA
Authority key identifier: 01:08:39:8C:A9:88:38:2C:2A:50:9B:FD:B3:9E:14:6A:76:CF:9D:E0
Authority info access: rsync://sakuya.nat.moe/repo/NATOCA/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a3a2f34382d3438203d3e203436393937.roa
Signing time: Mon 28 Feb 2022 01:00:12 +0000
ROA not before: Mon 28 Feb 2022 00:55:12 +0000
ROA not after: Mon 27 Feb 2023 01:00:12 +0000
asID: 46997
IP address blocks: 2602:feda::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:38:48:3e:9b:8e:af:aa:e8:39:9b:c2:9e:4c:d3:b6:16:b3:e0:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0108398CA988382C2A509BFDB39E146A76CF9DE0
Validity
Not Before: Feb 28 00:55:12 2022 GMT
Not After : Feb 27 01:00:12 2023 GMT
Subject: CN=3082010A0282010100B1ED59483E9898920166E2427AC7C445E95FFC5977DF1010F6301A1E8333C451797BA72AB41B013EF6A2317FC851694DB201C83BC685F0F5DB68E24C6EC54867FC4BACF7BC4B0178C247425ED59FEC5150D9C97A834E41478A7F289C6D21F81AC8884E17C07EF809062C5A7C3AE41ACC9897F1663F68EFEC4CE278168B233206F30474504CA099B77CF9E309117DA9D662A0963DDD735A591141665D7CC9261F6F4F51E51FA442CEB89B0DB08756797D8288D94670AF352076696A7F424B5B32704F29E642F761F1F476F05D97F2B076FF8BC06EC609480182CCA14365A17F31E5EF7371288512D270F26722B15650A24D8780D1C04B0697038E264A649327BF0203010001
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ed:59:48:3e:98:98:92:01:66:e2:42:7a:c7:
c4:45:e9:5f:fc:59:77:df:10:10:f6:30:1a:1e:83:
33:c4:51:79:7b:a7:2a:b4:1b:01:3e:f6:a2:31:7f:
c8:51:69:4d:b2:01:c8:3b:c6:85:f0:f5:db:68:e2:
4c:6e:c5:48:67:fc:4b:ac:f7:bc:4b:01:78:c2:47:
42:5e:d5:9f:ec:51:50:d9:c9:7a:83:4e:41:47:8a:
7f:28:9c:6d:21:f8:1a:c8:88:4e:17:c0:7e:f8:09:
06:2c:5a:7c:3a:e4:1a:cc:98:97:f1:66:3f:68:ef:
ec:4c:e2:78:16:8b:23:32:06:f3:04:74:50:4c:a0:
99:b7:7c:f9:e3:09:11:7d:a9:d6:62:a0:96:3d:dd:
73:5a:59:11:41:66:5d:7c:c9:26:1f:6f:4f:51:e5:
1f:a4:42:ce:b8:9b:0d:b0:87:56:79:7d:82:88:d9:
46:70:af:35:20:76:69:6a:7f:42:4b:5b:32:70:4f:
29:e6:42:f7:61:f1:f4:76:f0:5d:97:f2:b0:76:ff:
8b:c0:6e:c6:09:48:01:82:cc:a1:43:65:a1:7f:31:
e5:ef:73:71:28:85:12:d2:70:f2:67:22:b1:56:50:
a2:4d:87:80:d1:c0:4b:06:97:03:8e:26:4a:64:93:
27:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:8D:1B:B8:A7:CB:73:9B:49:1E:D7:CA:6E:6C:DD:50:1E:8A:27:52
X509v3 Authority Key Identifier:
keyid:01:08:39:8C:A9:88:38:2C:2A:50:9B:FD:B3:9E:14:6A:76:CF:9D:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9114E750000/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.crl
Authority Information Access:
CA Issuers - URI:rsync://sakuya.nat.moe/repo/NATOCA/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a3a2f34382d3438203d3e203436393937.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:feda::/48
Signature Algorithm: sha256WithRSAEncryption
1b:67:82:3b:8b:81:c7:35:c9:81:3f:e2:57:ab:32:f8:e5:2f:
5a:70:38:23:36:53:8a:5e:05:fd:49:53:06:72:95:f3:d8:b5:
46:bd:b5:2a:72:f3:79:46:fe:35:83:0a:c2:9a:8e:4d:60:8c:
76:3c:97:d3:ce:6e:1e:f8:df:9d:b5:26:df:8a:ce:39:50:03:
94:ba:02:8b:f7:08:5e:e8:ac:58:5f:27:53:7e:ad:4b:15:4c:
9b:46:79:55:7f:fa:55:f1:bd:43:da:d2:35:93:ef:12:5d:7e:
67:21:43:0d:b7:4c:aa:92:96:70:fd:cf:c3:2a:e7:5a:aa:33:
71:1a:20:7a:8b:2c:11:76:3b:73:46:46:fe:98:3d:c5:76:ba:
7a:c0:ac:a2:d2:fe:82:9d:27:71:5f:c1:13:40:41:d1:0c:e6:
7b:98:34:cf:92:c7:cc:11:95:23:59:96:17:09:c7:62:46:1e:
36:60:5b:be:37:db:0b:3b:eb:c1:90:71:4e:ee:48:f9:32:cc:
04:6f:4c:cd:87:3e:8e:d2:a6:e1:c7:49:d1:c5:3f:2d:10:34:
12:a0:4c:89:56:15:0d:8d:73:70:67:4b:0f:73:3b:f2:fa:34:
a6:1d:74:92:68:d3:96:85:ec:2d:48:67:48:e4:b6:ae:3d:78:
6a:e7:c4:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:59:50 2024 by rpki-client on console-ams.rpki-client.org