Route Origin Authorization
$ rpki-client -vvf rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a6236303a3a2f34342d3438203d3e20313436393530.roa
File: 323630323a666564613a6236303a3a2f34342d3438203d3e20313436393530.roa (raw, json)
Hash identifier: Wi4uJ+n9VhpQOLavyCum5/wNhhWQdRLfqC3PVrB/bYs=
Subject key identifier: CB:80:00:04:AA:95:C1:8D:AE:5E:D3:47:86:60:52:5E:65:80:94:A3
Certificate issuer: /CN=0108398CA988382C2A509BFDB39E146A76CF9DE0
Certificate serial: 047A526C14D77AB27D2BB7D75CB096DFA369325F
Authority key identifier: 01:08:39:8C:A9:88:38:2C:2A:50:9B:FD:B3:9E:14:6A:76:CF:9D:E0
Authority info access: rsync://sakuya.nat.moe/repo/NATOCA/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a6236303a3a2f34342d3438203d3e20313436393530.roa
Signing time: Fri 05 Aug 2022 01:00:00 +0000
ROA not before: Fri 05 Aug 2022 00:55:00 +0000
ROA not after: Fri 04 Aug 2023 01:00:00 +0000
asID: 146950
IP address blocks: 2602:feda:b60::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:7a:52:6c:14:d7:7a:b2:7d:2b:b7:d7:5c:b0:96:df:a3:69:32:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0108398CA988382C2A509BFDB39E146A76CF9DE0
Validity
Not Before: Aug 5 00:55:00 2022 GMT
Not After : Aug 4 01:00:00 2023 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e7:1e:e9:dc:10:4e:a5:95:ae:2d:fe:f3:f5:
51:7f:83:b0:7a:33:41:db:8f:d6:6c:34:f4:1d:60:
f7:7f:9d:20:dc:04:b9:4e:2e:7a:38:b9:2f:f6:07:
3f:80:45:48:18:a8:33:dd:94:2e:2d:d1:65:25:28:
c8:2b:cc:82:e3:96:45:b7:a3:7c:23:4b:92:4e:2f:
a7:f3:64:7f:e6:fc:2d:b2:61:29:c6:f5:44:5e:e3:
47:65:c0:1e:01:77:b7:eb:f0:11:a6:0d:a2:7c:fa:
17:ce:8d:c5:3a:42:35:48:34:e4:11:30:34:2b:4e:
a6:12:d5:04:c1:eb:63:20:e9:a9:84:71:51:46:0d:
17:68:96:90:f6:02:5e:4c:17:29:c0:2e:f4:11:58:
f7:7a:b6:79:f2:b7:41:75:4a:7e:da:85:f8:ba:f2:
f2:e8:eb:6d:02:d7:bc:2d:11:ad:48:7c:d1:ad:5a:
45:f3:f7:53:a0:42:98:ae:92:6d:59:5f:92:d3:8e:
25:28:74:f0:5a:53:0b:1c:a1:89:ef:d2:36:c1:77:
27:ba:9f:55:43:81:89:a7:c2:ec:c1:c4:a6:96:f4:
19:8e:9d:af:84:36:da:4b:dd:5a:46:62:c2:75:86:
f9:01:ec:ec:37:65:5b:6f:6f:f8:36:6b:92:a9:1e:
9c:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:80:00:04:AA:95:C1:8D:AE:5E:D3:47:86:60:52:5E:65:80:94:A3
X509v3 Authority Key Identifier:
keyid:01:08:39:8C:A9:88:38:2C:2A:50:9B:FD:B3:9E:14:6A:76:CF:9D:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9114E750000/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.crl
Authority Information Access:
CA Issuers - URI:rsync://sakuya.nat.moe/repo/NATOCA/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a6236303a3a2f34342d3438203d3e20313436393530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:feda:b60::/44
Signature Algorithm: sha256WithRSAEncryption
49:79:79:cf:f7:24:e1:49:fb:b0:45:fe:ca:25:6b:07:2b:d9:
36:c8:58:ad:3f:ab:0e:19:3c:ac:fa:13:05:f3:56:3c:3b:7a:
64:5c:7a:ef:b6:ca:7d:fe:94:73:d0:ad:06:1e:50:50:ba:90:
72:86:03:f9:53:0c:29:dc:37:d8:b2:01:88:fd:3b:00:8b:03:
8e:2b:98:17:be:6a:88:58:c9:f3:ba:5e:5b:8f:77:f1:84:92:
d3:59:96:31:56:d1:ea:85:12:c1:45:2d:7b:ef:b3:05:a7:f4:
3f:e1:4f:e7:3e:a5:45:f3:7a:f0:04:3a:f5:dd:c1:f7:52:fe:
71:82:ec:f7:39:e6:bc:fd:c6:6f:a4:36:cc:d6:a6:bf:07:13:
f7:32:5f:5f:cd:cb:bd:89:85:db:e5:3f:29:aa:52:ba:38:d9:
82:5f:9f:d7:cd:f2:41:ad:53:8e:2a:34:71:d4:fe:48:06:00:
c1:c5:7c:e7:7c:3b:4a:63:29:f1:ae:b2:59:a8:89:63:9b:48:
9a:d7:27:12:58:54:57:6d:f8:92:4a:c3:7c:ab:1b:e9:c1:5f:
a6:8a:a4:55:d0:3b:7a:e9:cb:96:7e:a6:09:8f:69:c9:1b:66:
50:16:88:fb:14:5c:73:99:b3:00:7d:0b:b5:92:fd:e3:48:b7:
33:34:30:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:24 2024 by rpki-client on console-fra.rpki-client.org