Route Origin Authorization
$ rpki-client -vvf rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a6362303a3a2f34342d3438203d3e20323039353537.roa
File: 323630323a666564613a6362303a3a2f34342d3438203d3e20323039353537.roa (raw, json)
Hash identifier: AiB9+DIVw5eNVhM2hb1mGRgDbN5myXh7IHPfkUQGjv8=
Subject key identifier: 80:E3:03:BC:5E:C7:5F:02:61:57:66:C9:30:D0:33:3A:70:1F:0E:0D
Certificate issuer: /CN=0108398CA988382C2A509BFDB39E146A76CF9DE0
Certificate serial: 7A69B164907F55E796924A124847701FEA103640
Authority key identifier: 01:08:39:8C:A9:88:38:2C:2A:50:9B:FD:B3:9E:14:6A:76:CF:9D:E0
Authority info access: rsync://sakuya.nat.moe/repo/NATOCA/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a6362303a3a2f34342d3438203d3e20323039353537.roa
Signing time: Mon 28 Feb 2022 01:00:04 +0000
ROA not before: Mon 28 Feb 2022 00:55:04 +0000
ROA not after: Mon 27 Feb 2023 01:00:04 +0000
asID: 209557
IP address blocks: 2602:feda:cb0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:69:b1:64:90:7f:55:e7:96:92:4a:12:48:47:70:1f:ea:10:36:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0108398CA988382C2A509BFDB39E146A76CF9DE0
Validity
Not Before: Feb 28 00:55:04 2022 GMT
Not After : Feb 27 01:00:04 2023 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:7b:93:46:41:7f:84:94:5a:2e:3f:0a:5e:d2:
2f:12:d9:ba:ac:f1:4f:58:07:35:a3:ca:68:49:c2:
ad:41:66:a3:0a:54:42:57:47:73:78:99:0b:f9:45:
b5:ce:95:8c:1e:e1:8c:3c:65:38:74:23:65:dd:98:
af:6e:6a:0d:b6:6e:7e:85:a9:88:d9:b4:81:47:d7:
81:bd:98:19:dd:24:37:59:17:4c:f0:06:f2:e9:76:
25:d8:fd:a7:de:c4:13:e5:14:fa:33:3d:8a:90:b4:
94:2d:6b:2b:51:77:23:a1:9d:91:33:d8:c5:ef:19:
50:b8:3e:86:f8:2a:36:c0:0c:69:1a:da:2a:95:a2:
8c:72:3b:38:b1:f3:33:07:80:36:58:33:b9:08:1a:
47:21:ad:e9:37:05:e3:0d:f5:df:ac:63:56:7f:9d:
0f:eb:b0:60:9b:3d:87:9f:05:a7:de:04:2b:b6:bc:
00:80:4c:bb:a0:e0:11:3d:8e:4c:78:e4:ee:9e:3f:
d1:96:08:05:82:3c:b6:90:02:f9:95:dd:9e:ba:a8:
36:0b:f3:c2:38:83:bd:a1:89:a1:c7:c9:52:69:92:
aa:b9:46:a8:ab:de:33:51:cf:73:ce:71:d9:b1:88:
7e:fe:e2:db:a5:6b:85:70:16:a7:30:c1:9f:08:b8:
6d:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:E3:03:BC:5E:C7:5F:02:61:57:66:C9:30:D0:33:3A:70:1F:0E:0D
X509v3 Authority Key Identifier:
keyid:01:08:39:8C:A9:88:38:2C:2A:50:9B:FD:B3:9E:14:6A:76:CF:9D:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9114E750000/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.crl
Authority Information Access:
CA Issuers - URI:rsync://sakuya.nat.moe/repo/NATOCA/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a6362303a3a2f34342d3438203d3e20323039353537.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:feda:cb0::/44
Signature Algorithm: sha256WithRSAEncryption
33:f9:5e:00:63:3e:9a:2e:49:29:19:ea:f7:d5:96:df:eb:c2:
eb:8e:0b:ef:cf:02:e7:9d:94:73:5a:69:7c:b3:4a:76:d7:f3:
85:14:a9:87:9f:e1:7b:a2:00:ea:9e:6e:66:b2:41:38:79:e8:
87:94:d7:6e:9c:84:d5:b8:13:d9:5b:a4:80:88:5d:20:98:4f:
f7:48:97:08:c5:af:ab:20:ed:66:da:7f:28:11:67:a0:a8:02:
0c:a0:5c:3c:dd:9b:31:a4:c5:a9:4e:c6:de:6c:66:85:7d:b6:
60:04:e8:e3:6d:86:39:56:ef:35:37:98:76:e4:e7:4e:b8:33:
5b:e7:34:0e:8a:76:fe:f8:15:c2:36:42:3d:b1:b3:a7:40:83:
cc:a1:ec:d7:d0:87:6f:1f:fa:73:08:2d:07:8a:3c:80:84:63:
6e:ad:19:8d:42:7e:73:25:95:97:61:31:5c:e6:7c:61:57:a3:
79:1d:87:74:e8:21:e4:1a:0d:b5:5f:bb:ad:91:d6:22:51:26:
d3:ca:c2:53:6f:e8:8f:d8:19:d0:88:ac:8f:9e:b9:ce:3c:ed:
4b:5c:2d:94:7a:07:84:99:c5:a8:47:82:75:ed:ec:81:56:6e:
94:35:6d:a1:e6:3b:fd:0c:79:86:07:d1:27:6e:bf:a9:74:72:
80:2a:c9:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:24 2024 by rpki-client on console-fra.rpki-client.org