Route Origin Authorization
$ rpki-client -vvf rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a6433303a3a2f34382d3438203d3e20323132323932.roa
File: 323630323a666564613a6433303a3a2f34382d3438203d3e20323132323932.roa (raw, json)
Hash identifier: iArFH1zQBg9jZzJHrz30OD8vKf5/ZxO60TdSViXRwes=
Subject key identifier: B6:76:E1:CC:B9:77:72:85:47:93:E1:49:0B:3E:49:72:6B:67:F9:EF
Certificate issuer: /CN=0108398CA988382C2A509BFDB39E146A76CF9DE0
Certificate serial: 35154E0390C19929FC73D2E8E6B248E3941D8D78
Authority key identifier: 01:08:39:8C:A9:88:38:2C:2A:50:9B:FD:B3:9E:14:6A:76:CF:9D:E0
Authority info access: rsync://sakuya.nat.moe/repo/NATOCA/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a6433303a3a2f34382d3438203d3e20323132323932.roa
Signing time: Mon 28 Feb 2022 01:00:10 +0000
ROA not before: Mon 28 Feb 2022 00:55:10 +0000
ROA not after: Mon 27 Feb 2023 01:00:10 +0000
asID: 212292
IP address blocks: 2602:feda:d30::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:15:4e:03:90:c1:99:29:fc:73:d2:e8:e6:b2:48:e3:94:1d:8d:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0108398CA988382C2A509BFDB39E146A76CF9DE0
Validity
Not Before: Feb 28 00:55:10 2022 GMT
Not After : Feb 27 01:00:10 2023 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:9f:67:a7:83:4a:aa:e1:41:8f:8d:81:e7:80:
a9:80:3d:88:7a:6d:a6:cd:d7:2c:9c:76:f3:1c:2a:
88:2b:33:f7:ab:69:0f:65:04:6e:be:3c:28:32:8c:
61:e5:45:d6:3d:e6:6e:75:22:ac:0f:0f:1b:3a:b6:
24:6d:7c:b4:37:d0:1e:f2:39:b6:9b:9e:98:32:89:
6a:53:90:c8:da:62:00:df:42:d5:a3:c1:de:86:b8:
4a:28:da:63:0e:cd:53:b7:2d:a9:ae:ce:f6:cc:f9:
44:b7:e1:e5:06:50:17:32:97:b8:3a:21:4a:ba:cd:
66:62:f0:17:64:f0:62:d9:72:f8:cf:34:24:1c:57:
83:44:7b:f8:b3:74:f2:92:24:75:0c:a4:0a:b8:9a:
76:ba:94:16:91:3f:e6:ea:db:ba:6f:a7:1f:c6:20:
5e:7b:8b:6d:50:40:68:1b:78:f4:6f:07:1b:a3:19:
22:80:30:43:d7:88:7c:02:ed:74:83:23:2b:22:df:
33:46:f3:00:77:19:48:95:54:e0:1e:a7:33:76:0f:
3f:63:56:14:55:5e:03:62:9e:08:52:e7:fb:96:bd:
e0:f8:6d:49:31:f3:90:e6:53:34:c5:3f:b1:46:34:
2d:1c:28:fd:6c:c9:8c:70:f5:ee:11:98:05:3d:c9:
49:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:76:E1:CC:B9:77:72:85:47:93:E1:49:0B:3E:49:72:6B:67:F9:EF
X509v3 Authority Key Identifier:
keyid:01:08:39:8C:A9:88:38:2C:2A:50:9B:FD:B3:9E:14:6A:76:CF:9D:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9114E750000/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.crl
Authority Information Access:
CA Issuers - URI:rsync://sakuya.nat.moe/repo/NATOCA/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a6433303a3a2f34382d3438203d3e20323132323932.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:feda:d30::/48
Signature Algorithm: sha256WithRSAEncryption
2a:5a:93:65:53:1f:1f:f0:60:35:b0:36:52:87:6c:98:64:90:
75:c6:5b:7e:16:79:7f:f0:9a:e5:a9:00:bd:0d:9d:36:21:80:
78:7f:6a:e0:b9:73:09:70:41:ea:2e:5b:74:93:6d:ff:c5:37:
a2:10:d5:8e:8f:57:36:69:bd:3e:f6:f6:2e:7a:37:db:62:30:
c3:72:25:b0:22:51:3b:11:18:da:e7:d5:b1:5b:20:10:71:2b:
db:0c:4e:0e:56:18:2f:85:a1:64:f3:ba:5c:c3:21:e9:8e:f2:
23:c2:e1:ae:67:9d:bf:dd:6d:42:76:5c:3e:5e:9c:66:f9:2e:
3a:e2:07:3e:6e:73:8a:89:e1:b4:a1:d5:c5:ea:42:1c:19:f8:
8d:b8:c9:02:79:14:94:30:ae:7f:45:40:75:22:f5:45:53:21:
35:79:57:3b:80:da:5e:fe:9a:56:f5:86:1b:4f:fd:ba:48:57:
0b:b6:17:ad:11:37:48:c8:f9:06:84:4d:9a:a2:38:11:ca:e0:
c5:15:2b:48:34:c3:a9:16:d5:1d:8d:46:a3:8e:ae:53:b4:4b:
4d:e2:d7:34:f8:2d:c5:11:e5:0a:84:3b:d2:a6:70:70:76:12:
0c:ee:42:fa:3c:93:88:e0:c1:c7:83:8f:b9:af:85:b8:0a:1e:
ec:d9:15:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:24 2024 by rpki-client on console-fra.rpki-client.org