Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/MqKagrrlqZ1nqAwGXXUt-GhylPk.roa
File: MqKagrrlqZ1nqAwGXXUt-GhylPk.roa (raw, json)
Hash identifier: uPm3/knTZ3l2QjEdAIoAK57Hkl7nCbS8MJx/Ip5ggLM=
Subject key identifier: 32:A2:9A:82:BA:E5:A9:9D:67:A8:0C:06:5D:75:2D:F8:68:72:94:F9
Certificate issuer: /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial: 0137
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/MqKagrrlqZ1nqAwGXXUt-GhylPk.roa
Signing time: Sun 01 Oct 2023 01:30:51 +0000
ROA not before: Sun 01 Oct 2023 01:30:51 +0000
ROA not after: Sat 14 Sep 2024 01:30:03 +0000
asID: 2516
IP address blocks: 211.10.171.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 311 (0x137)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Validity
Not Before: Oct 1 01:30:51 2023 GMT
Not After : Sep 14 01:30:03 2024 GMT
Subject: CN=32A29A82BAE5A99D67A80C065D752DF8687294F9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:19:ce:2d:73:54:15:04:2f:57:ce:07:60:ae:
0f:e2:94:14:fa:7d:e5:69:49:af:2e:ad:d6:8e:ad:
9b:27:af:34:56:18:c8:a6:df:5a:ce:a5:26:e0:c6:
80:82:a5:a0:8a:c7:f0:19:88:5f:73:c4:42:7c:42:
74:36:d5:9b:49:87:b2:f3:0a:ff:31:78:a4:8e:16:
df:21:b6:8a:ed:04:8d:c8:b8:67:fc:87:a3:df:42:
b3:51:22:d3:4a:98:04:71:ff:ed:67:6c:ef:fc:86:
b1:54:9b:1c:45:7b:8e:a9:81:ed:5f:d7:f9:7c:0d:
ea:1c:51:8a:56:7e:1c:e4:8c:e2:15:2a:19:e0:a4:
73:58:d0:75:2f:fc:81:7e:55:e5:ec:f2:00:15:31:
26:5a:84:33:39:b1:2b:24:9c:db:c4:75:b7:fb:05:
a6:70:77:89:8f:ed:c3:6d:d5:9e:1c:f0:d5:ac:a8:
f1:e5:e5:16:ee:9d:96:42:a6:ea:b8:b7:12:26:99:
4f:ef:09:37:2c:fc:16:a1:8b:5d:ac:f6:12:50:1b:
a2:99:5b:f7:e8:49:17:af:d6:d5:7e:11:4f:01:1c:
28:d6:9d:25:ce:34:80:ac:66:93:44:c1:b9:88:fa:
ad:a2:d2:6d:83:c5:8c:a7:bb:b6:eb:4d:df:6d:08:
42:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:A2:9A:82:BA:E5:A9:9D:67:A8:0C:06:5D:75:2D:F8:68:72:94:F9
X509v3 Authority Key Identifier:
keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/MqKagrrlqZ1nqAwGXXUt-GhylPk.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
211.10.171.0/24
Signature Algorithm: sha256WithRSAEncryption
d7:3b:f0:79:88:63:78:e9:28:e6:b5:5a:49:38:76:cd:22:b2:
84:23:51:bd:f4:e1:a3:21:85:ca:9b:fd:c7:2f:f0:85:76:fc:
6d:86:87:55:f2:64:19:bb:1b:a6:bd:00:c1:ee:dc:f3:4e:ec:
ad:ab:59:a4:7c:44:f7:30:81:29:25:da:6c:84:3f:28:2c:87:
5f:82:94:24:75:a7:9c:c3:d5:9c:04:58:57:f7:70:2c:10:39:
44:38:38:c3:8a:fb:a0:43:61:c9:7b:56:38:b7:1b:27:dd:c1:
94:f9:11:9a:91:e3:9f:32:11:27:9a:9b:79:b4:8f:ab:2c:aa:
9f:a3:bb:b7:41:73:65:f7:20:95:45:3e:16:ee:02:91:91:0b:
d0:d6:7d:86:67:18:ff:04:3f:fb:de:6f:e1:ed:6e:0e:ad:09:
3c:6c:20:88:84:38:01:33:0e:6e:37:c9:85:3c:b4:b5:33:d4:
34:3d:16:95:eb:8e:4a:d0:9f:1a:d2:10:e5:83:35:53:7f:c1:
dd:61:05:68:9d:c4:d2:6a:fb:2d:3b:1f:04:fe:5e:48:54:ec:
09:d7:bc:12:7f:4c:8c:94:8f:67:64:27:a8:0b:58:87:4c:ea:
22:98:85:ed:59:2c:0f:c9:50:34:0b:2b:e3:25:c8:29:2a:98:
14:58:9a:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:10:49 2025 by rpki-client