Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1003/mCi_hgJzzSOEMbaFL1K8z_KeDnQ.roa
File: mCi_hgJzzSOEMbaFL1K8z_KeDnQ.roa (raw, json)
Hash identifier: sQXIvWh35sqPoGQSuXGq5gxjnjsiklAaNqjc5mKxt3w=
Subject key identifier: 98:28:BF:86:02:73:CD:23:84:31:B6:85:2F:52:BC:CF:F2:9E:0E:74
Certificate issuer: /CN=8ACDAB1E1EA633BA8AD18A2ACB72360E9280C4B6
Certificate serial: 51
Authority key identifier: 8A:CD:AB:1E:1E:A6:33:BA:8A:D1:8A:2A:CB:72:36:0E:92:80:C4:B6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/is2rHh6mM7qK0Yoqy3I2DpKAxLY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1003/mCi_hgJzzSOEMbaFL1K8z_KeDnQ.roa
Signing time: Sat 30 Nov 2024 01:28:34 +0000
ROA not before: Sat 30 Nov 2024 01:28:34 +0000
ROA not after: Sat 15 Nov 2025 01:30:03 +0000
asID: 2515
IP address blocks: 202.12.30.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81 (0x51)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ACDAB1E1EA633BA8AD18A2ACB72360E9280C4B6
Validity
Not Before: Nov 30 01:28:34 2024 GMT
Not After : Nov 15 01:30:03 2025 GMT
Subject: CN=9828BF860273CD238431B6852F52BCCFF29E0E74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:38:82:9d:50:af:1b:2b:4f:eb:7a:c3:1a:f8:
8b:84:86:2d:b1:62:0f:4e:93:d7:93:29:9d:8e:76:
d5:46:6d:60:b2:ec:9b:1d:e3:8a:b5:08:f6:00:7a:
14:22:42:16:01:3a:4d:ff:fe:41:59:65:4c:be:3a:
75:72:00:2e:37:c1:e8:f0:6e:f4:ee:5e:11:30:0c:
a4:2b:28:da:92:bf:33:3c:b7:4c:79:ee:91:88:4d:
6d:7f:15:d5:42:bc:e5:16:cd:88:92:d9:3a:56:81:
62:a1:c8:17:ce:1b:79:38:1f:a7:d9:48:64:b5:8c:
e5:ad:15:72:2f:9e:c6:0e:9f:68:0f:6e:51:89:a8:
ca:5a:39:5c:63:a1:d8:be:c1:e6:6a:aa:2a:8c:03:
55:33:e6:33:27:10:ef:a9:6c:c2:65:26:c0:bb:57:
35:47:20:34:e2:be:fc:8e:2c:d2:73:c5:86:9b:e1:
65:1b:ce:56:2e:56:5d:cb:44:cb:4c:72:8c:3f:65:
9c:ea:43:83:f1:5f:e8:28:84:87:88:00:7e:32:9b:
b8:c5:44:a4:45:e6:a0:21:99:5e:24:f6:3d:4e:c0:
43:63:15:c5:e3:c5:93:07:da:a9:18:28:20:11:f3:
55:f1:ce:30:5f:a6:43:1c:bd:57:f0:b2:aa:32:b2:
38:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:28:BF:86:02:73:CD:23:84:31:B6:85:2F:52:BC:CF:F2:9E:0E:74
X509v3 Authority Key Identifier:
keyid:8A:CD:AB:1E:1E:A6:33:BA:8A:D1:8A:2A:CB:72:36:0E:92:80:C4:B6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1003/is2rHh6mM7qK0Yoqy3I2DpKAxLY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/is2rHh6mM7qK0Yoqy3I2DpKAxLY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1003/mCi_hgJzzSOEMbaFL1K8z_KeDnQ.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.12.30.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:4f:57:c4:0c:18:e0:70:9d:5f:2f:db:ed:01:6f:7a:67:51:
1f:7c:50:a1:d3:ad:53:1b:15:60:a2:a4:bc:d9:d2:3e:b7:08:
e2:6f:fb:97:60:39:b3:f7:9f:87:69:8b:5c:37:03:3d:03:6c:
de:df:20:6c:0d:84:9a:59:b4:2d:53:b5:da:72:66:38:b4:a2:
76:32:b1:5a:15:6e:29:60:7a:62:de:17:8c:27:20:d8:00:69:
ab:50:d4:3b:d0:e5:c0:d5:91:96:b4:c1:78:b0:b2:ac:76:2b:
8a:5d:d0:9a:5f:fb:db:b8:52:a2:f6:c8:00:d7:e9:02:dc:a3:
b9:ae:de:99:d7:f9:1c:34:84:5b:be:f8:3a:1d:9f:06:90:c9:
ef:ba:84:a0:1a:a9:68:b8:3c:f8:e9:86:3b:f8:a6:c5:7c:c5:
13:50:71:88:ab:af:bf:1d:8e:c3:aa:2c:10:2d:d3:17:02:eb:
fc:41:c1:78:14:4a:85:bd:7d:6c:c0:e2:ee:0d:d5:79:f9:71:
59:88:fe:7d:5a:7c:e4:3e:34:36:03:7a:13:8f:5a:a9:ac:88:
65:6b:ff:8c:6a:f6:b5:72:1f:33:22:28:41:d3:f8:d8:42:d4:
b7:a3:c4:01:38:80:a2:d7:f5:47:57:0d:2f:11:67:bd:7f:d3:
7d:3a:f8:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:56:32 2025 by rpki-client