Route Origin Authorization
$ rpki-client -vvf rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a6361303a3a2f34342d3438203d3e203339373533.roa
File: 323630323a666564613a6361303a3a2f34342d3438203d3e203339373533.roa (raw, json)
Hash identifier: b0TclUcTsR8HFknXINKHZkCEP3lDqF9S1HUUuCkW+JY=
Subject key identifier: BC:B8:DB:7C:F9:04:DC:3B:15:78:58:81:22:C9:56:66:A9:95:F5:4C
Certificate issuer: /CN=0108398CA988382C2A509BFDB39E146A76CF9DE0
Certificate serial: 4176B0E65A84EE86DE3A0D57FC1461E834EA4392
Authority key identifier: 01:08:39:8C:A9:88:38:2C:2A:50:9B:FD:B3:9E:14:6A:76:CF:9D:E0
Authority info access: rsync://sakuya.nat.moe/repo/NATOCA/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a6361303a3a2f34342d3438203d3e203339373533.roa
Signing time: Mon 28 Feb 2022 01:00:03 +0000
ROA not before: Mon 28 Feb 2022 00:55:03 +0000
ROA not after: Mon 27 Feb 2023 01:00:03 +0000
asID: 39753
IP address blocks: 2602:feda:ca0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:76:b0:e6:5a:84:ee:86:de:3a:0d:57:fc:14:61:e8:34:ea:43:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0108398CA988382C2A509BFDB39E146A76CF9DE0
Validity
Not Before: Feb 28 00:55:03 2022 GMT
Not After : Feb 27 01:00:03 2023 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:4f:c6:04:96:55:9b:96:f8:41:fe:90:f3:97:
06:2b:f4:30:c1:93:8c:5a:fb:be:19:42:12:5b:99:
69:6f:0e:68:d7:d7:a1:92:7a:57:79:86:59:40:65:
18:9a:2c:70:cd:cc:2e:fd:46:86:9a:f5:31:c4:4f:
89:77:c1:85:15:ce:ba:ab:d0:22:dd:a5:05:0e:ce:
67:1f:38:f7:99:44:41:24:40:c4:d7:c0:9d:e2:c1:
7c:06:0b:91:51:39:b5:77:39:d0:55:a3:91:8d:ec:
e0:54:1f:a0:80:dc:3c:bc:27:70:cc:06:f3:a5:c0:
cb:2c:d5:18:a4:11:5e:ee:d7:ad:94:a6:5c:32:bb:
77:5a:9d:b0:02:7d:51:b7:b7:47:7a:52:b8:a6:4d:
f5:d0:eb:09:8b:1c:65:68:79:ce:a3:35:65:a7:f0:
a2:10:0c:51:39:38:df:c5:95:7a:9e:10:dd:8e:76:
81:c6:04:0c:79:48:4d:0c:fd:03:3e:67:d1:ec:f3:
00:82:68:32:ce:0b:e4:30:fc:de:d4:e5:92:ee:4b:
35:ab:c1:f7:b9:23:36:38:3e:14:68:85:26:e7:ce:
f7:0f:3b:cf:5f:7f:bb:c8:b3:89:e4:a6:7a:5d:d2:
28:bb:0d:ca:e8:c4:b3:00:fe:b8:d9:a6:c7:d5:af:
5b:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:B8:DB:7C:F9:04:DC:3B:15:78:58:81:22:C9:56:66:A9:95:F5:4C
X509v3 Authority Key Identifier:
keyid:01:08:39:8C:A9:88:38:2C:2A:50:9B:FD:B3:9E:14:6A:76:CF:9D:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9114E750000/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.crl
Authority Information Access:
CA Issuers - URI:rsync://sakuya.nat.moe/repo/NATOCA/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a6361303a3a2f34342d3438203d3e203339373533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:feda:ca0::/44
Signature Algorithm: sha256WithRSAEncryption
07:52:a8:d8:22:42:c1:53:aa:b0:bf:1d:ed:14:d7:0b:3a:65:
12:08:07:58:08:2b:2e:a2:1b:3f:b9:7c:f4:4c:d3:9f:9f:42:
3f:6b:81:99:0c:8c:82:98:77:84:67:e6:a7:b0:1e:dc:1d:c3:
fd:85:4d:6c:d1:b7:6a:2f:1c:35:bb:f2:b7:ce:a2:08:fa:76:
af:e4:59:18:ae:8f:4b:9f:4d:5d:15:aa:ee:78:4e:36:dc:79:
f2:0f:cf:fa:86:d9:ec:38:f3:b8:67:76:60:60:90:7c:1c:1e:
90:bb:d8:00:f4:6c:b0:bb:8e:3c:45:7a:dc:61:ad:5e:f7:62:
a4:df:8d:27:f9:c0:43:0d:e1:ec:cf:c9:e6:b2:95:e0:c2:0f:
3e:ec:13:ac:aa:ec:1f:e8:8e:e7:ea:fc:6a:b1:43:dc:1b:1e:
cd:56:ae:07:25:1e:69:fe:e8:a4:d7:a2:65:b8:ee:48:79:e2:
42:72:df:79:fe:b3:a8:a6:7d:20:a3:2a:98:d9:14:fa:28:c9:
b6:e9:1a:f2:14:11:07:ae:39:ab:49:2c:ab:0d:ed:56:ef:4c:
21:62:f8:45:b6:ee:13:29:ce:27:94:44:24:b0:57:a0:a0:dc:
72:30:36:87:83:88:5d:22:86:b0:7a:96:7b:b0:85:61:a0:f8:
d8:aa:5e:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:59:50 2024 by rpki-client on console-ams.rpki-client.org