Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/3MSC4pyUFVUcsWJ56n1u3EL6cfM.roa
File: 3MSC4pyUFVUcsWJ56n1u3EL6cfM.roa (raw, json)
Hash identifier: VNdRvUeRzMeXancsDFYAGza7UE/2qJNZUEyE4d8A1+A=
Subject key identifier: DC:C4:82:E2:9C:94:15:55:1C:B1:62:79:EA:7D:6E:DC:42:FA:71:F3
Certificate issuer: /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial: 0214
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/3MSC4pyUFVUcsWJ56n1u3EL6cfM.roa
Signing time: Mon 30 Sep 2024 01:30:07 +0000
ROA not before: Mon 30 Sep 2024 01:30:07 +0000
ROA not after: Mon 15 Sep 2025 01:30:03 +0000
asID: 7684
IP address blocks: 49.212.228.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 532 (0x214)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Validity
Not Before: Sep 30 01:30:07 2024 GMT
Not After : Sep 15 01:30:03 2025 GMT
Subject: CN=DCC482E29C9415551CB16279EA7D6EDC42FA71F3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f4:9a:17:9e:c9:31:ba:7c:48:57:21:7b:49:
93:89:77:71:e9:80:e1:49:0f:72:f8:26:ed:59:de:
56:f9:f5:9e:ae:8a:37:46:f3:db:18:48:20:9b:e2:
5b:c2:d4:42:20:4e:39:21:93:cf:74:0a:d0:9e:18:
77:84:de:42:bc:4b:b8:b9:0e:21:67:72:40:dc:f6:
da:e9:28:ee:fb:d1:97:7d:b7:2e:bd:45:b3:2f:ff:
30:2b:86:08:48:a5:fa:cc:18:0a:51:b2:98:e7:ce:
52:80:c8:e0:1c:d9:84:2b:fa:48:5d:86:77:dc:ae:
5f:68:47:6b:da:14:b9:a1:e8:ad:37:9a:c6:4c:85:
37:2f:cd:ae:66:3b:dd:d0:b3:c7:12:30:41:15:a4:
b5:d7:39:e1:41:e8:48:65:bf:8e:ca:72:8d:dc:c6:
8f:40:25:30:ac:91:35:b2:43:c1:86:a2:7c:cf:d2:
d5:cd:ce:17:c9:0e:1c:ca:03:67:d9:d7:96:42:ed:
4b:81:3e:15:03:19:37:4e:f7:57:9b:86:e9:35:99:
31:06:af:9a:d1:2c:ec:3e:d0:e5:97:ba:f3:e7:fe:
a1:0d:08:7a:84:52:0a:9b:c7:ac:c1:57:12:b1:c3:
f6:59:dd:70:fe:fa:6f:ce:eb:e6:ff:04:a4:c6:7e:
6d:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:C4:82:E2:9C:94:15:55:1C:B1:62:79:EA:7D:6E:DC:42:FA:71:F3
X509v3 Authority Key Identifier:
keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/3MSC4pyUFVUcsWJ56n1u3EL6cfM.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.212.228.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:7a:1c:86:2d:10:eb:c8:e2:ce:15:51:57:6c:ca:07:36:b8:
ad:10:64:12:d8:b1:a0:69:8e:08:aa:2a:2c:0f:da:5b:29:d5:
b8:be:b5:76:fb:3c:61:67:a3:f3:b2:10:81:d9:f7:fc:a4:21:
d3:c7:73:96:6a:95:8a:f0:06:b6:b0:ca:5c:9c:71:d2:54:47:
62:ba:b1:2b:6b:ef:92:72:68:90:e7:17:34:a4:e6:77:09:96:
12:ad:23:80:56:7b:6a:00:5c:da:b7:a1:83:3d:e1:71:2f:ba:
93:23:e1:8c:88:d2:0c:d7:31:c4:0b:99:82:2e:b7:99:9f:e0:
48:09:36:0b:fd:b2:86:7f:fa:f6:33:37:45:92:c3:7f:3e:bc:
f1:b9:da:bf:95:57:42:3e:82:ee:eb:ff:0f:15:24:b5:c1:ab:
b2:60:f0:1e:bf:6b:ef:ff:a5:37:48:47:37:32:f8:2b:fb:68:
af:f9:0b:35:77:82:54:6e:b6:e2:4e:50:5c:1b:fc:27:19:c2:
9c:0d:d0:31:e1:05:89:eb:28:a4:cc:b3:cf:85:6e:44:cb:85:
a0:62:e8:8d:e0:04:9b:26:01:91:62:1f:ee:99:ef:7a:53:f5:
bc:75:72:ce:a1:95:1d:96:23:71:3c:9c:fd:fd:96:f6:60:68:
1c:f4:5f:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:25:34 2025 by rpki-client