Route Origin Authorization
$ rpki-client -vvf rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a663030303a3a2f34342d3438203d3e20313437303431.roa
File: 323630323a666564613a663030303a3a2f34342d3438203d3e20313437303431.roa (raw, json)
Hash identifier: G1xI3aTro1GWS8pJeihlWtAl6kK2r1RHhJSxr8OD7S4=
Subject key identifier: 7C:1F:06:38:46:C2:59:4E:F4:5C:E1:A8:36:38:C3:0D:4E:5E:10:D5
Certificate issuer: /CN=0108398CA988382C2A509BFDB39E146A76CF9DE0
Certificate serial: 18F7D6F791E926D872731F9D6525B81A8102C736
Authority key identifier: 01:08:39:8C:A9:88:38:2C:2A:50:9B:FD:B3:9E:14:6A:76:CF:9D:E0
Authority info access: rsync://sakuya.nat.moe/repo/NATOCA/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a663030303a3a2f34342d3438203d3e20313437303431.roa
Signing time: Tue 06 Sep 2022 08:00:00 +0000
ROA not before: Tue 06 Sep 2022 07:55:00 +0000
ROA not after: Tue 05 Sep 2023 08:00:00 +0000
asID: 147041
IP address blocks: 2602:feda:f000::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:f7:d6:f7:91:e9:26:d8:72:73:1f:9d:65:25:b8:1a:81:02:c7:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0108398CA988382C2A509BFDB39E146A76CF9DE0
Validity
Not Before: Sep 6 07:55:00 2022 GMT
Not After : Sep 5 08:00:00 2023 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:94:9d:e6:47:08:fa:f2:14:88:80:fe:b7:8f:
0d:31:ba:b2:f8:0b:91:ed:ea:c1:37:33:d6:f0:72:
b4:04:6d:9b:6c:ca:ff:38:4e:c8:9c:64:72:4c:8c:
f2:8d:ea:03:c5:fb:89:7f:49:4d:25:34:e5:4f:1d:
28:ae:64:49:5b:eb:33:3f:01:ba:32:a7:08:7a:2c:
78:53:fa:ec:ce:c0:3a:9a:fa:b1:07:8b:7b:9b:9a:
09:6f:e2:ca:f8:65:60:f2:ba:ae:7f:a8:b0:42:e3:
28:5e:7c:e2:87:54:5d:79:9f:fb:a1:6b:15:f0:5c:
4a:ee:2f:a0:cc:3f:e3:2e:1a:04:12:6c:ab:b7:89:
c4:9f:c2:7c:2e:32:e2:2e:a1:75:76:58:7d:ff:73:
79:c6:99:dc:e2:da:a4:41:8c:c3:12:96:a5:2f:c7:
d2:23:11:65:56:0a:bb:c6:09:67:3a:d4:63:9b:07:
85:d7:71:1c:b0:d0:3d:0a:33:02:c5:e8:f1:ac:0f:
62:85:6d:02:a7:a1:e6:9a:68:ae:ea:9d:0d:b2:c5:
03:52:d9:8e:47:2a:94:0e:47:38:8e:23:d1:e8:31:
11:0d:f4:c3:c6:5d:aa:6a:61:d5:07:8e:d5:97:3f:
71:06:9a:04:9c:e6:e8:d7:5d:a9:5c:18:eb:7d:eb:
34:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:1F:06:38:46:C2:59:4E:F4:5C:E1:A8:36:38:C3:0D:4E:5E:10:D5
X509v3 Authority Key Identifier:
keyid:01:08:39:8C:A9:88:38:2C:2A:50:9B:FD:B3:9E:14:6A:76:CF:9D:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9114E750000/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.crl
Authority Information Access:
CA Issuers - URI:rsync://sakuya.nat.moe/repo/NATOCA/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a663030303a3a2f34342d3438203d3e20313437303431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:feda:f000::/44
Signature Algorithm: sha256WithRSAEncryption
40:05:5c:2f:41:19:3e:59:b3:36:1c:c6:8c:41:bb:be:4e:4c:
e3:91:ab:2c:d1:61:5b:97:56:de:10:58:bc:e3:43:74:a7:23:
df:6b:4d:20:40:42:33:09:62:f4:8a:c9:bf:5f:2d:f8:d2:86:
89:f2:f0:51:33:d1:a7:ab:e0:76:6b:d3:01:5c:72:a9:fd:1a:
43:51:62:e3:1d:2f:d8:c2:ee:e2:92:f9:6e:d0:99:f4:17:25:
17:84:2f:e2:22:4b:b2:ff:9e:af:be:f2:27:be:35:a9:a6:21:
52:72:ae:43:bf:e6:7d:a1:36:da:f7:b9:4f:ce:9a:80:d3:bd:
38:9d:1e:40:8a:62:e8:c9:0f:e2:7a:7c:10:0d:98:78:bc:78:
32:8a:df:4e:cd:cd:4b:14:96:9c:65:8a:96:a7:51:76:a0:3c:
e4:49:29:3e:e3:e5:aa:41:b1:50:4b:53:8b:5b:9d:34:93:98:
e1:16:46:f1:d3:ea:80:af:59:35:14:05:14:2f:4d:13:53:35:
5a:6b:25:dd:83:fe:9a:41:53:81:47:e0:c8:03:b1:97:2e:4b:
a0:9c:38:d5:f1:82:11:8d:fa:9a:08:5f:49:ae:00:52:88:2c:
c7:f2:f4:81:85:f2:a1:e3:7c:c5:26:53:af:cd:3e:98:28:b0:
0f:5f:f9:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:24 2024 by rpki-client on console-fra.rpki-client.org