Route Origin Authorization
$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/3133342e3139352e3130302e302f32332d3233203d3e20333936393832.roa
File: 3133342e3139352e3130302e302f32332d3233203d3e20333936393832.roa (raw, json)
Hash identifier: oHLQFsjXRFv3CKzqdnVL+OPwxzuvXFWJNWc6iw0Sujk=
Subject key identifier: 37:E8:20:50:73:AB:11:7B:5C:4D:70:F7:5A:AA:72:4C:EC:37:0D:5E
Certificate issuer: /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
Certificate serial: 0950502654CA20789EB8A0A4FC4EF4D9B1806472
Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
Subject info access: rsync://ca.nat.moe/repo/NATOLAB/2/3133342e3139352e3130302e302f32332d3233203d3e20333936393832.roa
Signing time: Mon 15 Jul 2024 08:50:09 +0000
ROA not before: Mon 15 Jul 2024 08:45:09 +0000
ROA not after: Mon 14 Jul 2025 08:50:09 +0000
asID: 396982
IP address blocks: 134.195.100.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:50:50:26:54:ca:20:78:9e:b8:a0:a4:fc:4e:f4:d9:b1:80:64:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
Validity
Not Before: Jul 15 08:45:09 2024 GMT
Not After : Jul 14 08:50:09 2025 GMT
Subject: CN=37E8205073AB117B5C4D70F75AAA724CEC370D5E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:a2:b2:5b:ae:f2:74:72:28:58:90:37:3d:98:
a7:f1:87:a8:92:5c:a0:0b:c5:93:b4:0f:e7:a4:b8:
7b:a1:5a:1d:80:14:85:ed:b1:e7:80:10:6b:80:5c:
c7:79:30:97:75:ed:e0:20:34:d0:78:db:d6:a6:d9:
38:0c:7e:fa:18:a6:47:2b:dd:c1:74:e1:3b:1d:fd:
37:7d:a8:f4:86:9e:dc:af:4d:3c:2b:16:5b:c4:15:
0e:a4:4d:8d:71:57:16:a9:7c:19:26:62:8f:58:60:
33:37:3d:7b:f2:50:b9:9e:f3:22:1a:77:0e:c7:47:
34:d7:bf:c1:07:9d:ea:d5:f8:b6:05:73:c5:95:9b:
64:6f:e0:80:37:7a:17:8d:9d:1e:2b:d0:a6:c8:ed:
58:13:49:90:45:e0:36:0d:5b:9d:64:5a:28:9d:76:
cd:62:82:47:f7:f5:96:ff:22:be:4f:c6:89:ba:04:
0a:50:c6:9a:b5:4b:97:56:41:7b:e1:1c:dd:d6:1a:
fa:e5:9e:de:8e:0d:71:d1:11:83:0a:0d:1a:20:05:
42:22:7b:8c:0c:ef:1d:50:b0:7e:08:e9:16:a1:1c:
84:9b:aa:1e:6e:dd:70:21:b4:59:29:a7:08:9e:95:
54:ee:2b:aa:7c:57:e1:9b:5e:8f:99:8f:88:fc:f9:
10:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:E8:20:50:73:AB:11:7B:5C:4D:70:F7:5A:AA:72:4C:EC:37:0D:5E
X509v3 Authority Key Identifier:
keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
Subject Information Access:
Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/3133342e3139352e3130302e302f32332d3233203d3e20333936393832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
134.195.100.0/23
Signature Algorithm: sha256WithRSAEncryption
b6:d4:7d:8e:3d:d6:52:cb:3c:98:09:58:e3:4c:39:b8:5e:c4:
7f:8e:22:95:c6:a0:3f:14:df:ab:60:fb:eb:13:62:33:6a:fd:
ef:7d:92:d3:db:ab:15:bf:b5:c7:b0:64:a4:00:4b:b8:8b:47:
5c:5a:00:dc:30:e8:4f:18:fd:7a:ac:22:e2:b7:fe:31:41:ca:
aa:cb:0d:5e:85:c3:d8:33:4a:2b:3b:6c:67:3f:d1:6b:ca:7e:
1e:a4:f9:ef:3e:a0:11:12:80:ef:d6:e9:60:aa:5f:b5:50:0e:
93:02:d8:6b:26:9f:db:f5:c8:30:4b:34:cd:15:3a:b4:0f:e4:
e3:bd:68:68:53:6b:f4:e7:77:60:d1:35:3d:f9:7e:03:03:a8:
88:6a:6c:4f:43:79:56:ed:fb:58:bc:f0:72:3d:15:09:37:e7:
51:06:50:65:86:30:83:a5:d8:27:90:b2:2b:5f:53:57:d6:c8:
b9:85:1c:39:fc:63:52:56:ff:e9:73:7f:a9:85:42:6c:a2:b6:
33:34:29:9a:4f:cb:5c:6d:75:67:39:d0:59:d3:58:dc:38:bb:
7a:57:7d:50:88:07:49:1a:6b:2b:fd:38:55:60:e6:61:65:c9:
7b:f2:fe:2d:fb:64:f2:e0:0a:08:77:4b:46:c4:a9:29:74:a6:
33:d3:16:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 15:43:16 2025 by rpki-client