Route Origin Authorization
$ rpki-client -vvf rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a6234323a3a2f34382d3438203d3e20313432313330.roa
File: 323630323a666564613a6234323a3a2f34382d3438203d3e20313432313330.roa (raw, json)
Hash identifier: cEdVv71wBiFfpSD0djazuQNTojLbO8hfTGUvIdsLjIc=
Subject key identifier: 9B:38:6F:F6:1D:C5:1D:33:15:37:F6:60:E9:AB:82:40:2E:FC:B1:6F
Certificate issuer: /CN=0108398CA988382C2A509BFDB39E146A76CF9DE0
Certificate serial: 0EBF6E39A0BF8D4E84BF7D3DB51A29F7BADD8792
Authority key identifier: 01:08:39:8C:A9:88:38:2C:2A:50:9B:FD:B3:9E:14:6A:76:CF:9D:E0
Authority info access: rsync://sakuya.nat.moe/repo/NATOCA/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a6234323a3a2f34382d3438203d3e20313432313330.roa
Signing time: Thu 21 Apr 2022 17:00:00 +0000
ROA not before: Thu 21 Apr 2022 16:55:00 +0000
ROA not after: Thu 20 Apr 2023 17:00:00 +0000
asID: 142130
IP address blocks: 2602:feda:b42::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:bf:6e:39:a0:bf:8d:4e:84:bf:7d:3d:b5:1a:29:f7:ba:dd:87:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0108398CA988382C2A509BFDB39E146A76CF9DE0
Validity
Not Before: Apr 21 16:55:00 2022 GMT
Not After : Apr 20 17:00:00 2023 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:9f:5f:82:2a:2c:a4:c9:9b:34:b3:0c:c6:6f:
ab:b2:ef:b6:1d:28:53:a6:9c:53:0f:e6:be:fc:a7:
ea:51:6b:57:2d:4c:a5:94:78:33:0a:92:d9:4f:62:
55:aa:b5:57:48:fe:ce:03:ad:a6:02:82:0d:f1:67:
4b:a1:9c:76:37:e3:a2:6f:09:eb:5c:b8:e2:b1:53:
1f:d3:fb:4a:e5:a5:1a:7c:1b:28:d6:64:92:7c:d2:
7f:1f:86:44:b9:cc:b4:0b:3b:cc:89:aa:5d:39:02:
64:aa:4f:e0:8b:f2:0f:87:a2:1d:19:e0:47:57:91:
10:33:82:a6:8c:56:35:2d:0b:e1:2a:64:1d:3d:a9:
0a:6e:85:eb:6f:44:da:f5:df:1f:c0:d3:8e:ac:32:
07:ef:25:02:bf:cd:97:cd:ba:08:3b:8a:99:fa:85:
65:f3:bd:12:fe:92:aa:25:be:7f:00:cb:88:1c:c8:
ae:8c:08:79:13:38:3b:a3:fe:2c:f9:fb:4f:d4:05:
9a:00:25:c2:49:56:0e:8b:70:af:0e:7b:b4:0a:82:
c9:ba:ef:4e:2f:82:1d:2f:8a:bf:72:5f:60:88:34:
82:73:ae:82:05:43:df:36:30:49:74:0a:43:44:ae:
7f:bb:cb:9c:6e:ff:30:78:b8:f4:ff:bf:8e:71:8c:
1c:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:38:6F:F6:1D:C5:1D:33:15:37:F6:60:E9:AB:82:40:2E:FC:B1:6F
X509v3 Authority Key Identifier:
keyid:01:08:39:8C:A9:88:38:2C:2A:50:9B:FD:B3:9E:14:6A:76:CF:9D:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9114E750000/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.crl
Authority Information Access:
CA Issuers - URI:rsync://sakuya.nat.moe/repo/NATOCA/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a6234323a3a2f34382d3438203d3e20313432313330.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:feda:b42::/48
Signature Algorithm: sha256WithRSAEncryption
8a:33:2a:71:42:78:52:9e:ad:f8:a6:7d:0a:ea:7e:35:90:54:
5e:3f:e5:78:c2:ee:f4:f7:90:dc:c8:59:9c:2b:83:7d:74:db:
80:94:7f:13:cb:db:6f:80:70:af:63:ce:96:4f:79:3b:03:48:
2f:15:ec:88:13:93:8f:05:3b:df:9a:49:45:f9:ec:19:9c:b5:
b7:ed:c2:eb:59:0f:e5:63:0f:7d:63:a2:f3:6f:5c:9a:2a:35:
b0:6a:73:a3:f5:bb:1d:90:54:cf:bb:b9:f7:99:f0:9e:10:7c:
b6:e2:84:2f:36:ba:b6:c8:8b:6c:fc:02:56:2e:bf:e6:f6:a6:
8f:2c:f7:17:21:61:14:b0:24:4f:be:bb:38:f1:11:76:e8:71:
60:58:d9:32:2b:43:4f:47:ab:70:e0:7d:2b:7e:44:8b:30:b0:
7a:63:2d:a7:0f:24:57:91:d3:10:42:11:e2:51:e5:e9:b1:f8:
15:30:3b:30:af:22:1d:d4:49:d0:a3:76:d5:de:b8:29:ad:83:
c8:6f:91:3e:2f:b5:a0:f3:4b:c5:43:5a:36:80:3c:13:c1:ce:
21:02:ae:d8:e7:4f:a4:b8:6e:da:73:cc:07:3d:84:87:b0:32:
6e:c0:15:52:72:fc:4a:05:9f:98:d4:cf:53:33:cc:15:4b:24:
11:e4:43:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:24 2024 by rpki-client on console-fra.rpki-client.org