Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/CGuRC7dsnFxfa_iq9tVhRHbHdbg.roa
File: CGuRC7dsnFxfa_iq9tVhRHbHdbg.roa (raw, json)
Hash identifier: oPlQVdC9SafDDVQHFYiH7IivrnyCSqdnUQN/rnhbSc4=
Subject key identifier: 08:6B:91:0B:B7:6C:9C:5C:5F:6B:F8:AA:F6:D5:61:44:76:C7:75:B8
Certificate issuer: /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial: C8
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/CGuRC7dsnFxfa_iq9tVhRHbHdbg.roa
Signing time: Fri 01 Sep 2023 01:30:49 +0000
ROA not before: Fri 01 Sep 2023 01:30:49 +0000
ROA not after: Wed 14 Aug 2024 01:30:02 +0000
asID: 2516
IP address blocks: 124.109.149.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 200 (0xc8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Validity
Not Before: Sep 1 01:30:49 2023 GMT
Not After : Aug 14 01:30:02 2024 GMT
Subject: CN=086B910BB76C9C5C5F6BF8AAF6D5614476C775B8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c5:3d:ff:6e:d0:9c:03:da:29:70:77:ad:d5:
28:35:5e:4f:93:58:8d:66:c3:90:06:a7:61:2c:83:
52:63:ca:01:67:85:48:35:a0:ce:29:95:7e:75:e3:
53:51:f4:54:d4:0d:59:e4:06:a6:70:65:e2:da:5e:
b0:78:57:ff:f7:7b:68:74:a8:c0:7b:e7:5f:36:d7:
0d:46:25:f3:6e:7b:17:97:88:7e:b2:5f:5e:91:d6:
22:bc:23:29:86:cb:8c:0c:aa:a1:33:a7:a6:e9:40:
76:cc:49:fc:3b:9a:a3:62:34:88:cf:32:4b:47:5c:
c5:86:34:16:6a:7f:8e:d3:1b:6b:d2:8d:0d:cb:71:
4c:46:05:01:dc:dd:a1:66:e1:b2:4b:a3:b8:a2:1c:
bc:8e:dd:7f:6c:78:3e:01:21:a6:4b:ff:53:0d:8a:
61:69:b8:ef:4e:03:8f:26:9a:84:75:3c:c9:f8:df:
32:ea:0e:b3:ff:39:98:8a:9f:3f:bd:52:80:35:b5:
08:79:06:70:98:e7:8b:84:47:03:74:bb:3f:97:0b:
1e:23:c8:b6:a4:21:39:e4:8a:15:c4:49:3a:6c:1e:
ff:5e:88:66:d5:64:58:29:d2:d9:11:14:0b:89:80:
7b:ee:a3:94:b9:99:d7:99:8f:2f:2b:78:93:97:9a:
a8:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:6B:91:0B:B7:6C:9C:5C:5F:6B:F8:AA:F6:D5:61:44:76:C7:75:B8
X509v3 Authority Key Identifier:
keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/CGuRC7dsnFxfa_iq9tVhRHbHdbg.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
124.109.149.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:24:24:fc:98:eb:f0:b7:40:42:4b:ff:e0:a4:ed:c5:66:d7:
ff:2d:27:ee:01:a3:40:1b:bd:d7:3d:11:de:3b:41:71:bb:cc:
b8:31:e4:de:a8:57:45:80:19:ed:4f:9b:47:e4:ea:f3:8e:11:
2d:a9:08:b1:4b:2b:13:fa:da:57:f0:3e:69:9b:41:a9:89:13:
a4:8c:b7:99:1a:b6:53:bd:88:fe:b6:0e:5d:b7:80:ef:1e:ad:
77:2c:e7:cc:ae:e7:22:c3:46:a5:29:73:0e:b1:93:fe:cb:da:
4a:6b:b8:34:77:8c:42:40:92:b5:89:93:22:41:1c:8c:de:c8:
82:0e:13:78:33:25:bd:f3:29:9d:2d:3a:d4:43:f8:81:f7:6d:
aa:ed:e1:da:65:5b:cc:bb:d9:2d:92:c3:26:62:ad:0e:bc:e5:
7a:d7:82:6e:9a:d6:92:85:97:1c:3f:77:ff:4a:94:87:d7:60:
fd:15:0f:b7:c1:b6:a8:e6:cb:9a:73:c6:ca:34:7e:98:64:a8:
26:6a:51:45:9d:df:46:67:d1:5c:41:08:52:70:7f:80:8d:15:
54:4c:ba:07:5e:a8:5b:4c:19:da:d8:d7:2e:16:a4:d7:97:0e:
a5:b1:5a:5e:ac:3a:3b:c4:22:c1:3c:b7:7a:ae:4f:d6:6f:31:
a2:6c:c3:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:43 2024 by rpki-client on console-fra.rpki-client.org