Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/CID7yFJKLtPPOmmEPUfkqm2p6S8.roa
File: CID7yFJKLtPPOmmEPUfkqm2p6S8.roa (raw, json)
Hash identifier: iPpUUfQbTWUwE645N5/7BY2YiLoYwMD2wJq4McCf3cs=
Subject key identifier: 08:80:FB:C8:52:4A:2E:D3:CF:3A:69:84:3D:47:E4:AA:6D:A9:E9:2F
Certificate issuer: /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial: 0141
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/CID7yFJKLtPPOmmEPUfkqm2p6S8.roa
Signing time: Sun 01 Oct 2023 01:33:17 +0000
ROA not before: Sun 01 Oct 2023 01:33:17 +0000
ROA not after: Sat 14 Sep 2024 01:30:03 +0000
asID: 2516
IP address blocks: 211.10.192.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 321 (0x141)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Validity
Not Before: Oct 1 01:33:17 2023 GMT
Not After : Sep 14 01:30:03 2024 GMT
Subject: CN=0880FBC8524A2ED3CF3A69843D47E4AA6DA9E92F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:1b:2f:90:a7:d9:bf:40:c5:37:64:fc:63:32:
89:33:11:3d:3b:89:85:16:75:4d:b0:67:de:85:c7:
63:8e:ee:56:ca:36:60:77:ce:ba:ad:77:86:1f:78:
1b:e2:05:89:2c:49:6b:65:88:1f:bc:ea:49:4e:fd:
39:5e:09:98:1e:d4:9e:8f:55:38:e0:77:88:33:5f:
2e:8b:dd:37:19:36:51:e2:15:c6:0f:9a:50:08:4c:
40:ee:60:91:61:4f:74:f5:e1:27:91:66:7d:41:54:
42:99:9d:37:9d:02:94:42:e4:d7:6e:7d:71:65:f9:
d8:c0:8b:c4:60:54:c9:7e:89:8e:2f:1b:e6:4c:81:
8b:e8:ae:95:73:e9:ad:a7:24:2f:44:df:59:80:f1:
16:4d:46:1e:04:9f:d2:d0:81:22:f1:2b:a3:3d:0e:
b2:e4:d3:5b:7e:8f:ee:7a:7d:d2:c0:8e:aa:3d:0e:
73:76:cf:e1:bc:86:91:e1:89:86:be:b3:ad:a7:22:
9f:77:5e:66:ad:3e:2e:f6:c5:0e:9d:6f:a7:05:6a:
ed:86:db:7d:d3:a5:73:7f:b8:ce:1c:c6:d0:e1:bf:
0c:38:a1:23:57:cc:e2:e7:bb:84:1d:00:0c:36:37:
7a:35:3e:67:5e:1f:e7:f1:1b:79:41:c0:07:58:87:
c5:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:80:FB:C8:52:4A:2E:D3:CF:3A:69:84:3D:47:E4:AA:6D:A9:E9:2F
X509v3 Authority Key Identifier:
keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/CID7yFJKLtPPOmmEPUfkqm2p6S8.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
211.10.192.0/24
Signature Algorithm: sha256WithRSAEncryption
13:7b:bc:45:0f:1c:9e:3c:52:2f:47:a5:ba:91:98:cb:e5:9d:
f2:43:1f:b3:a0:3c:fe:2a:64:bd:3e:03:b8:d7:ae:04:68:4f:
60:b5:5a:1b:ce:f2:63:af:33:cd:3c:4e:51:c2:1b:d3:aa:50:
9b:81:ee:91:54:6d:ae:a7:0e:41:dc:62:87:26:e5:ed:02:dc:
b5:0c:d9:f2:4d:86:18:77:1f:c9:19:7b:dc:6b:2d:9a:b1:b0:
50:00:95:5f:ca:c8:61:35:2a:65:04:cc:a3:6a:87:5e:8f:8d:
ef:ac:6f:4c:c3:81:16:5e:01:7e:e8:8b:d4:e3:ec:10:21:d9:
59:87:71:4b:d2:d7:cc:f7:c8:61:b0:12:72:79:8b:5c:5e:11:
06:4d:3c:2e:11:26:41:94:cb:6b:7b:74:0c:07:dc:e1:74:4b:
42:60:a6:b2:04:41:6d:49:71:45:27:a7:9e:2b:8e:ee:39:b2:
c5:6d:97:4e:08:3c:05:59:c9:44:be:6d:3a:31:90:10:6b:0f:
ca:38:6d:1e:24:dc:5c:96:82:ed:0d:95:86:27:f5:48:8e:34:
08:01:7a:ac:62:85:94:05:b4:b4:db:e1:da:f5:6c:88:4f:e3:
ec:eb:92:fa:b6:91:4e:8a:3b:8a:55:c3:8f:5c:f0:e8:35:84:
88:00:e3:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:43 2024 by rpki-client on console-fra.rpki-client.org