Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/-MrykMuF-zP9qrDNvw7xQWpAxXk.roa
File: -MrykMuF-zP9qrDNvw7xQWpAxXk.roa (raw, json)
Hash identifier: SDUJ0OluictibEfz8E7qaFP0sK9/+eIXTw17RFn1gww=
Subject key identifier: F8:CA:F2:90:CB:85:FB:33:FD:AA:B0:CD:BF:0E:F1:41:6A:40:C5:79
Certificate issuer: /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial: 013A
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/-MrykMuF-zP9qrDNvw7xQWpAxXk.roa
Signing time: Sun 01 Oct 2023 01:33:14 +0000
ROA not before: Sun 01 Oct 2023 01:33:14 +0000
ROA not after: Sat 14 Sep 2024 01:30:03 +0000
asID: 2516
IP address blocks: 210.253.154.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 314 (0x13a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Validity
Not Before: Oct 1 01:33:14 2023 GMT
Not After : Sep 14 01:30:03 2024 GMT
Subject: CN=F8CAF290CB85FB33FDAAB0CDBF0EF1416A40C579
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:bf:ba:41:51:06:7c:02:5d:3b:de:15:d9:71:
7c:24:d1:94:40:c3:6a:94:6b:98:43:b7:46:46:fc:
e9:fd:08:42:cb:27:b1:99:b5:15:e4:6b:a6:86:47:
9e:99:37:46:f9:d5:28:25:df:b9:ec:0d:4f:4d:41:
76:79:7f:10:ca:aa:1b:7d:aa:11:ed:32:91:b6:c2:
3a:5a:bb:de:bc:a2:70:02:a2:c5:33:dd:d6:55:ef:
95:46:c5:01:52:6d:7f:be:63:84:12:a6:22:e9:9c:
62:c6:0d:e9:f2:c0:97:1e:26:dd:e9:52:8f:ae:e8:
e0:95:45:d4:08:ad:4a:44:a5:de:71:a1:0d:e7:80:
93:58:f6:31:75:96:ce:d1:b8:24:a2:de:90:9b:0f:
83:8c:f6:ac:d2:08:39:37:6a:04:46:35:48:51:48:
a2:f9:0b:bb:68:48:22:ce:aa:09:87:6e:10:12:8b:
df:63:2d:47:ce:17:42:3f:9d:82:fc:cd:28:0e:46:
15:31:cc:59:29:51:da:4e:38:f9:22:88:88:e4:ef:
e5:15:76:b8:f8:27:5f:ec:45:10:5b:25:e5:b3:17:
6c:83:3d:8b:b4:35:d3:74:eb:dc:a8:b0:b0:c5:45:
4b:d2:d7:3b:30:fe:7e:ff:a7:f5:ab:15:6d:c9:4e:
58:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:CA:F2:90:CB:85:FB:33:FD:AA:B0:CD:BF:0E:F1:41:6A:40:C5:79
X509v3 Authority Key Identifier:
keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/-MrykMuF-zP9qrDNvw7xQWpAxXk.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
210.253.154.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:17:56:3b:26:98:33:eb:d9:9a:36:f1:6b:2d:16:f9:9e:f2:
9c:55:bf:24:86:c7:2f:29:5e:b6:90:b9:28:c9:92:60:62:32:
71:eb:2c:3e:1d:49:5a:99:46:c4:4f:e1:2e:ad:5a:42:08:39:
e2:b3:80:15:25:2f:3a:a9:09:1d:13:0f:1f:43:5f:b8:e7:a5:
b3:5e:d6:b3:4c:48:00:c1:29:b7:2e:b6:b9:2f:1b:a7:2a:94:
e9:a4:14:ad:9e:e5:ca:d9:a5:48:4c:ba:ba:ef:1d:b5:ca:7a:
b2:d2:0d:bb:13:1d:5e:bb:7a:c3:48:bb:2d:84:8d:e1:0b:ce:
81:00:d1:59:3e:9a:3f:4f:24:f8:5d:60:42:d4:72:b2:d7:4b:
b2:ae:39:19:f7:fc:b7:e3:ca:2f:b2:99:81:3c:9c:e4:d5:66:
2a:98:2e:1e:a4:d6:70:1c:5c:56:e6:d4:83:5a:ea:a0:c0:d3:
6a:a6:0f:7f:1c:cb:8f:8b:06:58:22:d5:e7:da:55:d8:9d:ed:
07:f0:14:50:d5:ee:b6:1f:47:f9:83:e6:a5:0c:e8:f5:1a:74:
60:46:30:39:85:5a:23:2b:ed:87:f7:64:8a:26:f5:5c:d1:38:
ea:0b:b6:a4:5a:34:af:3a:4b:7e:b7:2d:e4:fd:a3:58:0c:2a:
91:60:9a:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:42 2024 by rpki-client on console-fra.rpki-client.org