Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/ZS-2o-qcerov3aMNJaWEK3czXbI.roa
File: ZS-2o-qcerov3aMNJaWEK3czXbI.roa (raw, json)
Hash identifier: 6TpdQ3RjFBu0DiUfiXkSRMCr6ZrcsoNW8lzouAwA1/g=
Subject key identifier: 65:2F:B6:A3:EA:9C:7A:BA:2F:DD:A3:0D:25:A5:84:2B:77:33:5D:B2
Certificate issuer: /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial: 021F
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/ZS-2o-qcerov3aMNJaWEK3czXbI.roa
Signing time: Mon 30 Sep 2024 01:33:42 +0000
ROA not before: Mon 30 Sep 2024 01:33:42 +0000
ROA not after: Mon 15 Sep 2025 01:30:03 +0000
asID: 9371
IP address blocks: 183.181.74.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 543 (0x21f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Validity
Not Before: Sep 30 01:33:42 2024 GMT
Not After : Sep 15 01:30:03 2025 GMT
Subject: CN=652FB6A3EA9C7ABA2FDDA30D25A5842B77335DB2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:28:52:f2:81:89:de:31:56:6e:95:b8:63:a8:
32:c3:eb:d7:9a:00:b4:c5:2d:9c:97:74:cc:53:31:
0b:a2:f9:e1:fd:a3:b3:b7:f8:e9:10:69:94:ac:f5:
8b:b0:66:ad:74:de:ac:68:95:f9:5e:4e:21:db:ed:
3f:41:3b:0e:d8:3a:39:67:ed:3f:ab:79:80:36:70:
13:81:16:08:ef:b4:0d:a1:eb:cb:5a:b6:4e:ca:03:
3d:8f:33:3d:e6:51:e5:45:96:2b:f6:99:75:01:44:
a0:b9:b6:44:60:04:58:68:15:07:06:64:d2:61:36:
e4:e1:12:28:ca:74:1b:e9:85:3a:47:f2:73:9a:23:
57:4e:cc:01:40:1a:5f:ff:30:87:ee:af:e8:a9:13:
71:d8:73:9d:cb:0b:a8:20:cf:35:f4:73:da:9c:f6:
81:73:54:a7:78:ff:c8:9d:9b:a6:41:d3:81:c9:e7:
87:15:ed:ef:8e:64:49:98:49:98:99:ee:c3:4a:ce:
36:3c:05:71:55:ef:36:cf:84:30:58:61:32:e4:f9:
54:29:ec:76:28:ee:fb:7f:03:b0:e8:6b:c9:61:d0:
05:8a:8d:30:a1:a4:fe:24:af:2e:a3:9b:f5:6a:47:
e4:cd:35:57:77:7b:e6:f2:80:ce:13:68:0a:55:d6:
d2:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:2F:B6:A3:EA:9C:7A:BA:2F:DD:A3:0D:25:A5:84:2B:77:33:5D:B2
X509v3 Authority Key Identifier:
keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/ZS-2o-qcerov3aMNJaWEK3czXbI.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
183.181.74.0/23
Signature Algorithm: sha256WithRSAEncryption
37:c1:11:db:64:d8:4e:2a:ab:7f:c9:04:08:16:4d:59:04:fc:
99:a9:87:d1:70:fa:0d:95:27:2b:be:a0:7d:b2:ff:84:40:4c:
3b:cf:32:58:af:3f:ec:14:0a:41:1d:de:0b:b3:2f:a9:6e:09:
70:8a:a6:7c:54:b0:0b:73:ec:3d:f7:68:e5:9a:19:a7:87:ab:
46:dd:e9:a4:2b:c7:fa:99:33:82:0c:b8:af:e7:3b:bc:d2:5f:
8b:4c:e6:8e:d6:41:9a:c6:f2:01:26:18:3f:fe:bd:44:3f:64:
5f:ca:9f:ab:62:9f:2a:ff:d9:74:9a:ed:35:f6:5a:bc:8b:84:
96:cd:45:bc:73:65:2e:b2:9a:4a:27:6d:cd:91:68:a2:b0:93:
7e:31:b6:40:c8:7b:49:b0:52:64:95:f5:d6:d2:5f:a8:48:31:
7b:55:fe:a8:52:e6:96:2d:ea:43:1f:0f:88:5f:a4:aa:c9:31:
97:0c:62:af:50:5e:70:0e:9c:6c:c9:10:6c:d5:30:84:80:dc:
08:69:a7:9e:43:97:d8:db:d9:77:df:d0:5d:46:46:51:bf:43:
69:82:ca:d9:11:43:8a:48:f8:b7:1b:88:2d:d7:06:05:b0:a8:
e0:dd:e0:1f:92:91:48:a9:d2:f7:41:d7:8d:a6:8a:6e:a4:79:
57:5f:93:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:38:16 2025 by rpki-client