Route Origin Authorization
$ rpki-client -vvf rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a6331303a3a2f34342d3438203d3e20323132333539.roa
File: 323630323a666564613a6331303a3a2f34342d3438203d3e20323132333539.roa (raw, json)
Hash identifier: xth4lAo3t6EZq9YMqHcfnvt2gcvVZFZa2c/1UPIo5sU=
Subject key identifier: D4:5A:95:76:E6:7E:6A:7E:CB:94:B3:0F:94:E1:BC:A9:1D:00:BD:C7
Certificate issuer: /CN=0108398CA988382C2A509BFDB39E146A76CF9DE0
Certificate serial: 685BB7069CBD2AA52E01978533AF76E25096A517
Authority key identifier: 01:08:39:8C:A9:88:38:2C:2A:50:9B:FD:B3:9E:14:6A:76:CF:9D:E0
Authority info access: rsync://sakuya.nat.moe/repo/NATOCA/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a6331303a3a2f34342d3438203d3e20323132333539.roa
Signing time: Mon 28 Feb 2022 01:00:05 +0000
ROA not before: Mon 28 Feb 2022 00:55:05 +0000
ROA not after: Mon 27 Feb 2023 01:00:05 +0000
asID: 212359
IP address blocks: 2602:feda:c10::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:5b:b7:06:9c:bd:2a:a5:2e:01:97:85:33:af:76:e2:50:96:a5:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0108398CA988382C2A509BFDB39E146A76CF9DE0
Validity
Not Before: Feb 28 00:55:05 2022 GMT
Not After : Feb 27 01:00:05 2023 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:8e:ff:55:20:66:38:d0:54:02:d3:a4:57:c5:
7c:91:48:32:71:5d:28:30:a1:32:f5:6e:67:2d:eb:
29:44:f6:98:b8:c5:da:64:26:31:75:2b:c8:30:ce:
e1:81:a5:e7:3e:5d:bb:a2:4c:2d:a9:71:e9:7d:ed:
eb:10:5b:91:b3:5e:ba:30:50:2d:bd:89:57:bf:23:
88:4c:6c:96:0f:94:c8:de:6d:d9:04:c5:0e:91:fb:
e1:c8:3e:c2:52:ff:4f:e2:ca:15:1f:06:12:65:05:
85:30:03:99:2d:e9:66:30:29:8b:de:c1:c7:a7:3a:
d7:d2:b7:f8:72:70:20:dd:4e:d6:6c:96:c2:6d:98:
1f:2a:94:29:fe:1a:01:52:9a:28:4c:cf:3e:cd:54:
39:60:92:ab:7f:e0:7e:14:a4:51:d4:7c:ff:cc:9e:
69:84:f0:02:47:19:f7:4a:18:89:ce:a4:9c:24:a8:
f2:ca:0d:83:f4:71:17:46:71:50:e6:e4:8f:71:9b:
da:62:1c:25:91:6c:97:99:f4:19:aa:c7:1d:46:dc:
56:6c:79:e5:8d:ad:ed:2d:a2:ab:4c:71:c5:05:1c:
36:f7:26:9f:89:ac:93:6b:29:b7:c1:58:5f:f0:64:
65:5d:85:22:ec:69:94:63:eb:18:b2:ea:e3:74:ac:
df:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:5A:95:76:E6:7E:6A:7E:CB:94:B3:0F:94:E1:BC:A9:1D:00:BD:C7
X509v3 Authority Key Identifier:
keyid:01:08:39:8C:A9:88:38:2C:2A:50:9B:FD:B3:9E:14:6A:76:CF:9D:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9114E750000/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.crl
Authority Information Access:
CA Issuers - URI:rsync://sakuya.nat.moe/repo/NATOCA/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a6331303a3a2f34342d3438203d3e20323132333539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:feda:c10::/44
Signature Algorithm: sha256WithRSAEncryption
b1:25:ed:33:a4:88:ad:c8:06:05:ec:75:be:49:c0:d8:ab:46:
19:2c:5c:b2:31:a7:ca:f4:0e:ac:e9:92:2c:6b:f5:c2:0c:a0:
84:0e:f6:31:37:a6:36:35:a4:be:38:84:a2:63:26:8d:dc:89:
35:0f:35:05:91:af:1f:cf:33:1e:d5:12:2a:d5:c0:33:92:20:
4b:a5:d7:7a:09:42:ba:a7:c6:cf:f2:7d:a1:a7:9a:0e:d9:d9:
67:ad:e3:d1:85:7b:b8:92:be:a9:a0:3b:13:c3:de:16:f3:98:
c6:16:81:8a:2d:79:2b:5e:17:a7:5d:91:49:99:48:30:7e:f3:
d3:3d:74:03:93:ea:0b:1e:fd:ff:f4:d6:67:3b:02:28:33:97:
05:60:97:a8:d6:4a:ad:e0:8d:49:41:e4:c1:3b:57:46:49:56:
2a:0b:08:8d:02:d3:62:bd:c9:87:91:53:1a:be:4a:dd:d5:73:
6b:bb:4e:d9:36:3e:aa:55:63:75:81:3e:43:76:9b:db:7b:36:
03:c3:96:0a:4e:8a:82:eb:ab:dc:fa:a7:0a:f4:26:6e:1a:d1:
1b:e5:e3:28:82:0f:c4:f6:d7:05:e4:b7:a8:38:be:40:fb:b9:
fb:d7:f1:c3:c8:2b:82:83:6c:74:44:93:41:3c:db:c3:b7:56:
76:12:52:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:59:50 2024 by rpki-client on console-ams.rpki-client.org