Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/PkDgXcl83AX9ehDsJ4W4d1qs65k.roa
File: PkDgXcl83AX9ehDsJ4W4d1qs65k.roa (raw, json)
Hash identifier: NSnv+p3oxBVBKS2+b9peVm9y7aePif+NjM/fUlI8kOw=
Subject key identifier: 3E:40:E0:5D:C9:7C:DC:05:FD:7A:10:EC:27:85:B8:77:5A:AC:EB:99
Certificate issuer: /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial: 0111
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/PkDgXcl83AX9ehDsJ4W4d1qs65k.roa
Signing time: Fri 01 Sep 2023 01:34:25 +0000
ROA not before: Fri 01 Sep 2023 01:34:25 +0000
ROA not after: Wed 14 Aug 2024 01:30:02 +0000
asID: 2516
IP address blocks: 210.189.0.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 273 (0x111)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Validity
Not Before: Sep 1 01:34:25 2023 GMT
Not After : Aug 14 01:30:02 2024 GMT
Subject: CN=3E40E05DC97CDC05FD7A10EC2785B8775AACEB99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:ff:6b:55:a3:3f:1a:f5:56:68:4e:9c:11:30:
74:55:6d:06:ad:41:2e:c8:ec:bc:10:3c:f2:b4:fb:
cf:84:3b:d7:f5:72:98:1f:44:7b:d6:05:bf:8d:14:
1a:9c:28:4d:b5:89:05:b8:46:04:5d:74:23:cd:54:
e4:22:cc:b5:35:1d:1a:94:00:64:21:6e:ac:fd:5a:
3e:1b:d1:d4:17:a3:5d:68:e6:ce:99:21:e3:5e:4c:
c6:95:7d:44:c2:44:be:54:74:b1:80:9d:ab:6e:64:
be:b2:c8:02:f1:46:46:b9:51:aa:df:ac:56:40:4a:
02:97:2f:33:d5:66:fb:39:5e:73:49:d8:b8:dc:70:
0a:b7:4d:fc:ff:26:99:98:57:82:e3:45:26:fa:9a:
f0:82:7d:0d:a9:7f:fd:8d:3f:b9:39:84:8b:77:20:
69:b8:f7:0c:52:53:b7:9a:06:5b:cb:ed:b9:e3:22:
08:19:e4:e1:6c:e9:be:29:48:46:47:e4:05:df:0e:
ea:3b:59:86:5b:96:3d:28:52:42:2b:eb:cd:9d:95:
ad:96:18:64:0f:b3:91:27:77:2e:4f:a0:a3:8f:09:
19:f6:b9:93:0d:47:33:72:de:a1:22:36:82:ac:f7:
0c:03:2c:28:1d:9b:27:f0:d9:36:b7:f7:eb:0b:31:
13:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:40:E0:5D:C9:7C:DC:05:FD:7A:10:EC:27:85:B8:77:5A:AC:EB:99
X509v3 Authority Key Identifier:
keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/PkDgXcl83AX9ehDsJ4W4d1qs65k.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
210.189.0.0/18
Signature Algorithm: sha256WithRSAEncryption
86:85:2d:1c:d4:37:61:9b:e6:c6:aa:94:48:5f:4e:a2:52:63:
45:ad:fd:fe:16:0f:34:2b:61:41:cf:93:0f:7c:3b:7c:c4:1f:
c8:05:8e:57:c3:dc:d4:7a:50:65:20:d5:af:da:8b:b4:30:4d:
5b:6e:c1:1c:ef:a8:2d:bd:16:9a:3d:0c:03:5b:1b:15:b7:9c:
bd:47:e7:4e:11:57:6b:ec:5c:7d:7a:d1:f1:bd:60:4b:21:0b:
2a:e8:0e:e2:72:68:a3:ed:69:de:11:25:e6:47:bb:93:df:cf:
31:b1:1a:d3:3e:fb:a2:79:f9:d0:92:88:5d:42:47:06:44:b4:
a7:bb:70:fc:5e:40:84:ef:99:c3:88:e7:9f:59:c0:1f:b4:0b:
bf:17:1b:49:7b:ac:36:06:94:da:a1:5c:ee:0f:78:b7:38:60:
3c:d6:7e:39:4a:3c:22:be:75:a5:09:2b:eb:7b:be:aa:71:cd:
2c:97:ae:9d:23:ab:ef:48:ec:e7:26:b2:f0:5a:98:c6:4e:0f:
8a:40:e0:ab:ab:5f:06:9c:e6:35:01:f6:36:1d:09:b2:6d:af:
05:32:9f:f5:a4:8f:e8:22:f5:f4:e8:e8:b6:5b:e3:a8:87:60:
b8:aa:3c:42:3d:c5:82:4c:8f:91:18:94:af:7b:69:b5:8d:1f:
b9:02:a7:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:43 2024 by rpki-client on console-fra.rpki-client.org