Route Origin Authorization
$ rpki-client -vvf rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a6162303a3a2f34342d3438203d3e20313431303131.roa
File: 323630323a666564613a6162303a3a2f34342d3438203d3e20313431303131.roa (raw, json)
Hash identifier: 5eOv9g8QhtxZVxKhbNe/DcRYh+MszZbqRW8TzJvJRzM=
Subject key identifier: EF:8E:95:E8:EA:24:33:43:BE:44:BE:55:E3:F7:62:EC:B9:E8:2B:71
Certificate issuer: /CN=0108398CA988382C2A509BFDB39E146A76CF9DE0
Certificate serial: 501C8B85F4604CB2E7DC300CDE8AA3D1DD66273D
Authority key identifier: 01:08:39:8C:A9:88:38:2C:2A:50:9B:FD:B3:9E:14:6A:76:CF:9D:E0
Authority info access: rsync://sakuya.nat.moe/repo/NATOCA/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a6162303a3a2f34342d3438203d3e20313431303131.roa
Signing time: Mon 28 Feb 2022 01:00:05 +0000
ROA not before: Mon 28 Feb 2022 00:55:05 +0000
ROA not after: Mon 27 Feb 2023 01:00:05 +0000
asID: 141011
IP address blocks: 2602:feda:ab0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:1c:8b:85:f4:60:4c:b2:e7:dc:30:0c:de:8a:a3:d1:dd:66:27:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0108398CA988382C2A509BFDB39E146A76CF9DE0
Validity
Not Before: Feb 28 00:55:05 2022 GMT
Not After : Feb 27 01:00:05 2023 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:0d:6a:66:d2:69:d8:bd:23:df:53:12:04:8c:
19:11:76:1c:e2:04:93:ba:eb:ab:8b:f8:86:45:09:
b4:9d:87:8c:e2:c3:98:a7:ca:f7:b5:25:cf:fc:67:
2b:af:e8:a1:0d:aa:2e:d0:b2:ce:ec:4f:46:2c:49:
bc:02:0c:53:6d:99:0e:ca:e0:28:9a:56:88:c2:46:
e1:c0:15:d0:5d:e4:a0:e7:80:8f:50:19:3d:ac:ae:
77:b5:15:eb:41:42:06:46:5f:cb:c8:b9:28:b2:8f:
33:81:17:6f:b2:bd:02:40:5b:07:6c:e0:51:89:09:
c0:6e:cf:10:98:96:8d:ff:5e:ff:7f:e1:ef:9b:c4:
ed:ee:18:25:9d:6d:e2:80:ba:c7:f8:1c:33:ee:11:
43:c9:fb:26:66:8a:1f:09:de:a2:0a:da:35:3b:28:
b9:11:57:50:61:99:05:cb:7a:12:08:d9:8b:d6:14:
e2:f9:7b:fd:6a:e3:93:ad:6f:99:97:88:01:7d:85:
4e:9e:05:59:b1:36:15:38:b6:4f:87:87:e4:9b:41:
e4:74:15:c5:a2:97:d3:81:ca:35:64:b4:40:aa:6f:
fd:f1:cb:33:b7:3a:df:25:c5:a0:f7:e5:19:29:9d:
9e:3d:32:06:87:fa:bf:9a:77:93:bf:f0:33:5a:fb:
e5:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:8E:95:E8:EA:24:33:43:BE:44:BE:55:E3:F7:62:EC:B9:E8:2B:71
X509v3 Authority Key Identifier:
keyid:01:08:39:8C:A9:88:38:2C:2A:50:9B:FD:B3:9E:14:6A:76:CF:9D:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9114E750000/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.crl
Authority Information Access:
CA Issuers - URI:rsync://sakuya.nat.moe/repo/NATOCA/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a6162303a3a2f34342d3438203d3e20313431303131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:feda:ab0::/44
Signature Algorithm: sha256WithRSAEncryption
48:bd:cd:64:d1:3d:c4:c0:1e:86:87:fe:78:d9:38:5d:0a:53:
e0:f6:fe:19:28:ac:1d:11:05:ba:7a:84:86:6f:fa:6a:fb:40:
ab:ad:a7:f2:3e:de:46:22:dd:7f:7a:60:b0:ef:79:97:ff:7c:
e3:18:2e:59:2f:c3:04:80:37:49:b1:f3:72:eb:00:97:a2:3f:
d2:7d:8d:36:0e:a2:40:85:8a:ec:f7:fe:30:35:1b:aa:08:06:
2b:f4:69:e3:7c:d0:8d:f3:b9:56:18:b7:ae:90:c2:91:95:18:
bf:e5:82:32:c7:7f:d2:e7:51:2b:5a:5e:c0:d6:07:48:d2:8d:
da:7c:bb:f5:aa:8b:30:c0:bb:1b:22:66:50:d1:82:f9:e6:e7:
5a:5a:40:05:16:e5:0b:12:41:94:1c:07:ca:0a:e5:f0:4f:2c:
29:15:a3:7d:8c:4d:f7:c1:05:4e:b9:04:6e:1f:d0:99:66:d1:
a2:30:7f:5e:97:07:13:97:95:48:8f:68:05:ad:94:a6:76:fc:
04:21:b8:dc:3c:ea:f6:89:3f:12:1d:37:dd:26:95:ec:5b:8e:
8a:7b:35:e4:cd:56:c6:28:a9:42:4c:64:10:f9:3f:7a:29:94:
79:ac:1a:fa:ab:40:5d:de:96:17:dd:ae:8a:57:9f:0d:5e:1e:
26:f8:87:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:24 2024 by rpki-client on console-fra.rpki-client.org