Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/BpbREuOtbnJ5XMlg9vVeSmrf4RU.roa
File: BpbREuOtbnJ5XMlg9vVeSmrf4RU.roa (raw, json)
Hash identifier: 5PUtshULa4iiXyyoFPiFrjdZL0CJAlBDnNgRgfNqfrk=
Subject key identifier: 06:96:D1:12:E3:AD:6E:72:79:5C:C9:60:F6:F5:5E:4A:6A:DF:E1:15
Certificate issuer: /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial: 0145
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/BpbREuOtbnJ5XMlg9vVeSmrf4RU.roa
Signing time: Sun 01 Oct 2023 01:33:20 +0000
ROA not before: Sun 01 Oct 2023 01:33:20 +0000
ROA not after: Sat 14 Sep 2024 01:30:03 +0000
asID: 2516
IP address blocks: 211.10.200.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 325 (0x145)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Validity
Not Before: Oct 1 01:33:20 2023 GMT
Not After : Sep 14 01:30:03 2024 GMT
Subject: CN=0696D112E3AD6E72795CC960F6F55E4A6ADFE115
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:5d:2c:ae:24:fa:34:72:fb:a7:4e:e7:58:13:
ab:03:b0:d3:eb:42:b0:9c:9d:f7:d6:5f:f6:4c:2c:
fb:d1:8e:09:de:12:05:df:2f:f6:d9:2f:d5:b9:4a:
fe:69:01:98:a1:82:9e:d2:ad:70:7d:21:91:88:89:
77:3f:1b:5c:65:98:67:94:8b:ff:22:bf:55:c7:9e:
02:0d:a0:7a:3a:4a:5f:70:d7:93:c9:e6:ca:43:35:
a7:c0:bd:7f:71:78:c9:dc:76:d0:0b:27:05:85:88:
1f:5d:ae:ac:9c:7d:bb:7e:17:1e:53:17:6e:95:d8:
bf:a6:1c:f2:a5:be:bb:d2:ed:68:99:33:77:3e:58:
c6:4b:03:ca:a3:33:75:d7:e2:f6:11:e7:33:34:99:
60:7e:c9:f6:45:d3:45:06:58:ab:7b:83:a9:bb:af:
14:da:39:c2:74:76:2b:19:59:83:4d:ff:22:e2:6f:
8c:36:75:3d:ee:e6:01:10:ad:45:8c:2b:bf:37:07:
69:fb:43:8b:db:f7:31:eb:a8:94:9e:e3:53:bb:dd:
27:bb:39:8e:5b:d3:50:29:0d:e0:ac:24:0e:16:e7:
a9:b4:97:99:0b:1e:93:7f:56:3c:e7:ed:8e:28:f2:
0b:de:c6:b0:11:44:fa:fc:61:99:84:ee:40:f0:86:
24:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:96:D1:12:E3:AD:6E:72:79:5C:C9:60:F6:F5:5E:4A:6A:DF:E1:15
X509v3 Authority Key Identifier:
keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/BpbREuOtbnJ5XMlg9vVeSmrf4RU.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
211.10.200.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:34:15:1e:f6:dc:67:c8:de:34:5b:59:cd:c8:e7:1e:c9:be:
97:40:16:83:01:2d:95:db:89:e0:ac:14:48:28:e0:d4:f6:fd:
49:da:9d:86:2d:b9:26:e3:92:e7:d4:9f:64:62:95:4f:55:34:
fc:88:f7:0e:e3:4e:f3:68:52:65:d8:87:54:f1:92:2b:97:49:
48:a0:fb:94:71:88:68:b3:52:fd:81:6d:6f:0c:d3:29:b7:e4:
73:f2:14:0f:f6:51:9c:9a:24:4e:41:45:e8:77:db:db:00:e3:
08:06:5a:80:89:03:50:b9:45:59:14:3c:43:5f:88:5c:00:22:
08:2c:f3:cb:f9:0d:aa:3f:fb:71:38:92:5d:e9:f6:da:bf:da:
ae:32:d6:ff:f9:9b:42:f0:ec:82:6c:5e:fe:b4:b5:ac:4f:f8:
c3:6b:a2:41:13:0a:d5:68:4f:42:7b:75:3a:3d:22:ad:dc:fd:
46:62:85:d3:62:3b:30:7f:15:70:5b:ed:27:c1:05:08:60:5b:
c7:28:73:84:21:14:d2:ed:f3:2d:9a:5b:26:c4:3d:43:62:55:
d2:7f:cb:6d:03:1f:e9:a5:17:35:bd:78:e7:23:06:23:58:74:
3c:64:68:1c:63:c2:b0:2c:bf:12:b2:ff:f7:04:20:c4:d5:5e:
bc:2f:0d:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:47:52 2025 by rpki-client