Route Origin Authorization
$ rpki-client -vvf rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a6165353a3a2f34382d3438203d3e203338303038.roa
File: 323630323a666564613a6165353a3a2f34382d3438203d3e203338303038.roa (raw, json)
Hash identifier: 8FwkkIkHgre2nKF67IcbhYe8xhZefCZedmOGeezA3O0=
Subject key identifier: AE:A9:97:D1:DD:F0:3A:F9:52:B3:2E:4B:C5:06:E6:8C:32:96:5B:38
Certificate issuer: /CN=0108398CA988382C2A509BFDB39E146A76CF9DE0
Certificate serial: 1585670BF562B088606D961096B32CDF2BCF4F5C
Authority key identifier: 01:08:39:8C:A9:88:38:2C:2A:50:9B:FD:B3:9E:14:6A:76:CF:9D:E0
Authority info access: rsync://sakuya.nat.moe/repo/NATOCA/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a6165353a3a2f34382d3438203d3e203338303038.roa
Signing time: Mon 28 Feb 2022 01:00:01 +0000
ROA not before: Mon 28 Feb 2022 00:55:01 +0000
ROA not after: Mon 27 Feb 2023 01:00:01 +0000
asID: 38008
IP address blocks: 2602:feda:ae5::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:85:67:0b:f5:62:b0:88:60:6d:96:10:96:b3:2c:df:2b:cf:4f:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0108398CA988382C2A509BFDB39E146A76CF9DE0
Validity
Not Before: Feb 28 00:55:01 2022 GMT
Not After : Feb 27 01:00:01 2023 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d3:ae:90:39:52:79:db:87:91:10:1c:74:b6:
3b:f5:45:02:7f:fb:f9:a9:99:00:00:71:32:4f:ee:
b5:24:8e:f2:16:b8:f9:39:54:2f:9d:13:73:6c:ac:
13:cb:da:41:17:03:7d:a7:28:2b:06:b1:7d:b0:7a:
b4:b1:56:be:e7:33:26:c1:6a:d6:21:ad:9a:0a:38:
6a:01:13:01:01:d7:a1:35:d5:29:44:d4:33:49:37:
e2:49:57:bf:10:90:20:9c:5e:4e:60:13:78:80:3e:
7e:9e:ac:6e:c6:24:65:59:43:56:e5:28:bf:99:63:
e9:0f:d4:fc:e6:16:92:17:8e:b2:eb:d3:b3:cc:d9:
aa:cc:75:7d:8b:31:7b:c3:b9:5b:6a:a4:00:27:fc:
c6:d3:3f:fb:92:5f:fb:2d:bb:36:36:0e:4c:40:68:
45:94:29:bf:e7:db:29:bc:2e:8d:b7:62:b7:7f:70:
77:bd:24:48:a8:c3:1c:63:a6:bd:39:a5:d8:3e:54:
11:fd:c9:2b:51:f7:9e:27:d1:ef:04:4d:a0:3c:d6:
55:d1:e0:4c:47:a5:71:66:ab:f1:5e:a0:4a:bb:1e:
34:82:36:6e:4f:f8:f0:e1:28:17:0c:0b:3a:6d:7f:
01:a7:a3:99:0b:b0:ee:ce:8f:c4:dd:83:83:33:7d:
1d:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:A9:97:D1:DD:F0:3A:F9:52:B3:2E:4B:C5:06:E6:8C:32:96:5B:38
X509v3 Authority Key Identifier:
keyid:01:08:39:8C:A9:88:38:2C:2A:50:9B:FD:B3:9E:14:6A:76:CF:9D:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9114E750000/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.crl
Authority Information Access:
CA Issuers - URI:rsync://sakuya.nat.moe/repo/NATOCA/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a6165353a3a2f34382d3438203d3e203338303038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:feda:ae5::/48
Signature Algorithm: sha256WithRSAEncryption
5c:53:75:f6:c9:73:60:37:5f:00:23:62:49:86:35:40:28:d6:
41:1f:b0:98:28:30:d2:38:f6:98:8d:7a:31:6d:3b:79:bf:7e:
46:f1:dc:7f:2e:f6:b1:0a:9d:31:79:37:04:80:86:15:7b:30:
3e:71:49:09:21:b2:39:fd:fc:c1:94:77:d9:60:6b:91:35:28:
68:70:0d:29:58:5f:8b:98:70:31:de:37:f1:86:35:1b:a4:1a:
b3:c4:91:a1:3b:75:2b:1d:09:03:71:cd:d0:0f:96:c2:f9:3b:
0a:89:53:58:e8:f5:bf:f9:1b:9c:9f:3e:de:a6:63:4c:63:c9:
a7:59:aa:5e:07:9a:87:c1:8d:b0:6b:8d:08:46:cd:41:1d:0d:
f0:9d:b4:e8:cb:9b:76:bd:f6:0f:90:1f:14:de:f4:27:6f:a4:
87:7f:41:e5:b4:a7:dc:61:83:07:92:ec:37:70:97:c5:9f:49:
ea:84:1c:af:d6:1f:1b:96:ee:bf:38:93:65:0f:35:0c:e2:e4:
a9:85:fd:5e:5f:45:fd:c6:73:29:f0:86:25:cf:0e:97:f1:85:
2b:87:ff:91:bc:0b:59:54:31:a1:29:80:d1:c0:97:05:ce:65:
53:a4:43:6b:5e:8e:59:45:9e:3d:d3:77:bb:e1:89:38:93:fd:
6c:33:d3:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:59:50 2024 by rpki-client on console-ams.rpki-client.org