Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/QXYLVHI36_zXo8yrp7T49AzWcWQ.roa
File: QXYLVHI36_zXo8yrp7T49AzWcWQ.roa (raw, json)
Hash identifier: 2FHnyh6DjPvf3WMI+BW9dDftjuogr2GwN7AmIip8mcc=
Subject key identifier: 41:76:0B:54:72:37:EB:FC:D7:A3:CC:AB:A7:B4:F8:F4:0C:D6:71:64
Certificate issuer: /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial: 011C
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/QXYLVHI36_zXo8yrp7T49AzWcWQ.roa
Signing time: Sun 01 Oct 2023 01:30:38 +0000
ROA not before: Sun 01 Oct 2023 01:30:38 +0000
ROA not after: Sat 14 Sep 2024 01:30:03 +0000
asID: 2516
IP address blocks: 210.250.22.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 284 (0x11c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Validity
Not Before: Oct 1 01:30:38 2023 GMT
Not After : Sep 14 01:30:03 2024 GMT
Subject: CN=41760B547237EBFCD7A3CCABA7B4F8F40CD67164
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e1:c6:22:b0:a9:92:5b:a2:9f:30:14:43:27:
f5:3b:4f:71:11:76:a4:a0:be:8f:f9:8a:3c:50:89:
52:c4:b3:a9:ac:2c:25:2b:45:1a:3a:36:af:dc:72:
94:48:78:50:28:a8:4e:87:87:76:ad:d1:b0:35:8b:
14:e9:a1:65:81:f6:33:01:e6:0e:d0:d7:01:33:50:
c4:d3:c5:b2:af:59:aa:ae:a9:9a:bb:4a:88:9e:e1:
3e:b6:33:34:41:32:a9:45:14:8b:af:5a:8f:dd:1b:
f2:e7:68:d0:07:35:13:e0:18:70:11:74:db:cb:dc:
3c:97:7e:25:59:58:03:9c:2a:02:dc:63:25:8b:20:
f0:ed:53:57:53:6f:9f:e0:48:bf:2c:8c:1e:fe:23:
0e:40:ef:e4:09:35:96:69:33:4d:af:b6:65:15:e7:
1e:05:56:c7:66:d3:ca:49:00:73:e5:db:ab:3d:da:
8c:25:77:fc:36:26:54:da:2d:d7:cf:02:d1:4b:c6:
3e:dc:82:ee:1e:58:17:06:eb:a3:cc:8e:69:cc:a3:
44:1f:65:4f:01:f7:0a:90:28:a5:73:28:6d:26:b6:
f8:73:38:ed:c0:7a:b1:ee:b9:b5:fe:ed:8f:98:1c:
aa:5e:f6:7d:a7:5f:b7:40:0b:a7:9a:b9:ad:3f:e2:
d9:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:76:0B:54:72:37:EB:FC:D7:A3:CC:AB:A7:B4:F8:F4:0C:D6:71:64
X509v3 Authority Key Identifier:
keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/QXYLVHI36_zXo8yrp7T49AzWcWQ.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
210.250.22.0/23
Signature Algorithm: sha256WithRSAEncryption
4f:53:0b:e6:8f:52:f9:4b:7f:49:85:c8:7d:81:33:a0:7d:b2:
98:ef:0c:2f:2c:41:7e:ff:75:94:ee:b6:a4:8b:8e:23:b5:29:
d4:19:37:e6:c7:8f:80:8c:e8:d7:02:d9:8a:10:ba:4a:57:6a:
98:9e:ce:eb:6f:be:05:d0:80:42:65:55:68:69:14:98:e6:36:
15:06:b7:55:9d:6e:dc:24:26:c7:fc:66:fa:ea:ad:cf:9e:b0:
45:9c:62:a9:dc:32:b0:56:93:99:7e:f5:fb:aa:fa:fa:9d:32:
a3:83:a7:f9:32:a9:e0:5a:a5:ec:05:80:cc:32:cf:b1:bd:6e:
e1:ee:98:11:29:cf:d9:e1:d9:fd:47:2c:c6:dc:6e:5f:7b:61:
21:e1:7b:45:fd:a9:69:96:28:1b:dc:1b:e9:dd:34:e2:1a:0c:
0d:08:2f:c9:bc:31:71:f3:8a:80:f3:44:ee:3a:7b:01:78:2c:
57:c2:3d:d5:56:37:51:79:b9:b8:cd:1a:b9:21:53:16:d5:ac:
c7:1c:e3:df:51:25:6a:e8:90:26:bb:86:dd:01:08:3f:92:87:
59:1a:3a:0c:3f:09:99:82:43:b4:d5:10:5f:46:f3:fe:c2:17:
65:c2:b2:e4:e0:03:70:cd:fd:d0:6a:be:da:ff:51:7c:b5:2c:
1d:b7:2c:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:33 2024 by rpki-client on console-ams.rpki-client.org